Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
File: HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft (raw, json)
Hash identifier: s2APMKzbDkHzY96sEPgZl02fjNwgh+en9l84AJ6FbMo=
Subject key identifier: 27:07:3E:A8:65:8C:04:E6:37:B4:03:78:C5:84:51:56:2D:15:9B:49
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 0196778CDF73D718BD9BAC1C57E4436BCDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
Manifest number: 0188
Signing time: Sun 27 Apr 2025 14:00:42 +0000
Manifest this update: Sun 27 Apr 2025 14:00:42 +0000
Manifest next update: Mon 28 Apr 2025 14:00:42 +0000
Files and hashes: 1: HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl (hash: EBYLyZylpmLZQwO1UGPwC9Ut5QaYXXLUAavw9W2Awsg=)
2: XqGkNzWhGRzFFq_Ld0F1iKDun4o.roa (hash: sSmVA8YWQ3N6iHQCrnx4d6eQ8ZnwuumMJH4aLXBAS+Y=)
3: zg1Lpd5dXDDrXWEs29Dqtm1PLWo.roa (hash: c0hWZybUPDWWpEetuD+QWOEePUUQ5c0jYzDlZOTBQ5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:df:73:d7:18:bd:9b:ac:1c:57:e4:43:6b:cd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Apr 27 14:00:42 2025 GMT
Not After : Apr 28 14:00:42 2025 GMT
Subject: CN=27073ea8658c04e637b40378c58451562d159b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:58:53:c8:09:f7:bd:10:26:3c:8e:89:92:
2a:42:7a:1e:00:37:d7:2c:b1:e4:28:37:96:40:11:
1d:d4:97:7a:ba:e9:a6:9f:1c:c3:99:91:02:fd:63:
76:43:e6:31:e0:ee:df:a7:9b:a3:7d:a9:5b:ae:b9:
52:5d:68:3b:4e:6c:87:35:d9:9e:18:7b:98:cc:d5:
55:a0:32:37:9a:4c:00:88:a8:19:e4:2c:94:fd:74:
d6:1e:0c:e4:0d:a3:8f:a1:4f:50:24:3e:84:4c:94:
73:36:e8:08:02:eb:fe:cb:3d:7f:0e:3a:41:4d:3b:
d8:97:85:79:bb:b8:ca:de:e1:44:b8:39:bd:b1:58:
90:66:a4:69:6e:44:e4:66:3b:be:7c:4c:52:d8:51:
4f:a9:fc:3e:5c:d7:9e:35:77:b3:ef:ca:0c:26:aa:
4a:62:c1:cc:5e:f5:0f:b5:0b:bd:9a:ff:0b:c6:b5:
32:65:48:ba:df:c1:fd:8f:18:83:28:69:fd:8e:fd:
0a:40:db:41:0b:cf:f3:2f:0f:c3:b4:24:f6:6b:48:
3c:c5:39:5c:74:2b:4c:5b:fa:bd:df:c4:22:5b:f0:
32:03:bf:22:e8:48:25:a8:28:bc:96:f9:38:92:ad:
dd:15:30:c9:c5:f8:98:98:13:68:80:40:78:7d:c3:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:3E:A8:65:8C:04:E6:37:B4:03:78:C5:84:51:56:2D:15:9B:49
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bb:42:ff:b4:05:77:54:c9:78:6d:1f:25:84:6a:3a:40:97:
64:b0:12:d8:3e:7b:51:cc:f9:4a:9a:07:9f:46:5d:44:ec:68:
73:d2:a8:ee:07:68:64:35:8a:f9:95:1d:76:69:dc:b2:ba:9f:
1c:a9:83:e6:88:7b:e9:19:73:da:8d:6d:64:05:9b:e8:15:0a:
91:f3:a1:e9:61:ff:82:fd:67:17:ed:c1:9a:2b:ec:82:14:72:
4c:04:0c:38:1d:ee:6a:cd:86:2a:be:57:28:bc:8c:5e:18:78:
44:c9:ad:85:ff:19:ba:7f:5d:23:c9:6b:2f:e8:a3:22:50:60:
80:bd:d5:e4:c1:a6:ec:b1:65:83:c2:ce:f4:62:da:f1:8a:85:
61:ca:4a:1a:fb:6d:9b:d7:76:12:5d:6d:7f:de:22:b9:54:20:
16:fb:f0:6f:19:12:31:59:60:9e:25:2c:db:b9:b4:56:d6:55:
89:f0:e3:91:7a:9c:83:be:b3:de:0d:0a:ac:a2:6e:11:5a:6f:
94:f2:e6:63:52:4b:71:bb:c6:f5:7b:f1:df:ca:49:75:c5:92:
85:d7:4b:2d:be:4f:2f:2b:a7:ed:52:d3:95:43:d5:1d:6b:ab:
43:b6:fd:db:5c:b7:ba:3a:92:b2:d0:89:4a:91:9c:a0:e6:84:
16:4a:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:12:16 2025 by rpki-client