Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier: 7CC/9dutho+3XbA/sFuBxOhwCyg9ytOzO7pka9FCaZc=
Subject key identifier: 86:22:57:AA:1E:0E:BC:67:6F:73:37:78:4E:A2:99:F0:84:7E:74:99
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 019680222F8F957D74614183A9C0FA30B76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number: 084D
Signing time: Tue 29 Apr 2025 06:00:46 +0000
Manifest this update: Tue 29 Apr 2025 06:00:46 +0000
Manifest next update: Wed 30 Apr 2025 06:00:46 +0000
Files and hashes: 1: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: NDLzSdQ49q3jzH9+6EjTczfWszdwXjtY5KDCFSOESLk=)
2: uaDvodSl9Qqt6SU3QvEP4PKpm0c.roa (hash: KfFNiihZ95ffen8bkT+elj9FXLgX4E04ZxK55q4T9Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:2f:8f:95:7d:74:61:41:83:a9:c0:fa:30:b7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Apr 29 06:00:46 2025 GMT
Not After : Apr 30 06:00:46 2025 GMT
Subject: CN=862257aa1e0ebc676f7337784ea299f0847e7499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:2a:c1:c1:22:61:4f:60:33:b0:7a:fc:4d:
6b:c1:fb:18:1b:17:6d:fb:01:49:6f:46:1f:49:11:
d2:cc:a7:a9:1e:f8:4c:65:a2:74:b6:1c:b1:a9:c6:
81:c3:8a:70:e2:31:34:66:42:e0:58:99:bc:e2:b6:
2f:97:13:7c:89:d4:35:26:81:29:8b:f6:16:81:af:
c6:d0:fe:b5:91:53:87:e7:21:ad:04:71:8d:52:a6:
f4:36:f9:94:5f:65:4d:f6:d1:72:72:89:5a:fa:d8:
a3:9a:98:3e:c4:ed:22:d7:48:f8:a1:27:c4:70:81:
fe:15:1d:26:b6:8f:e4:41:49:72:6b:b3:8f:1b:46:
5b:bb:f6:1a:36:0c:b8:07:77:46:a8:4c:6b:5a:5b:
95:2c:23:ee:66:4a:fc:68:b1:2a:c4:7c:38:b9:94:
aa:5f:53:8d:87:1f:9a:75:e8:a1:a8:d9:67:54:d1:
32:17:d8:bf:53:f4:89:6d:c8:4b:d2:a0:e4:9b:5e:
3b:fe:65:86:86:85:be:35:cc:ee:19:45:ca:10:20:
37:a5:d2:b4:79:ff:29:a1:af:42:2d:cc:b5:68:5f:
11:5c:48:45:11:05:bb:d4:2a:fc:0f:2d:54:99:9c:
f1:40:63:d4:c3:c0:70:27:c3:2f:b9:32:8e:c9:94:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:22:57:AA:1E:0E:BC:67:6F:73:37:78:4E:A2:99:F0:84:7E:74:99
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:86:89:f4:91:39:23:7b:d8:cb:71:bf:b5:55:cf:ef:21:94:
c5:26:1a:a5:04:9f:5b:20:22:d3:81:1b:f0:46:42:08:a3:25:
c4:24:6f:5d:11:45:1b:ca:e6:75:64:82:3c:3d:35:c7:c7:40:
68:81:77:4a:f9:3a:ec:5f:33:5a:53:fa:7e:20:99:7d:d1:41:
01:a2:8a:27:01:be:c8:66:82:df:84:b2:dd:e9:01:ca:1a:ba:
11:38:57:fa:63:9d:0d:fb:ee:94:94:86:d3:5a:ea:62:bd:32:
e8:99:4b:73:52:03:78:74:86:51:66:81:61:49:1e:13:d7:39:
8f:a0:7c:aa:1f:02:8a:42:24:53:ad:10:1b:74:18:36:3c:0a:
01:60:b4:14:a1:01:4d:ad:fe:2b:75:8e:50:27:a2:74:48:f3:
1c:e6:4e:37:f4:1b:76:e4:45:50:ae:31:a7:af:5c:fc:34:81:
89:b8:d3:12:ac:aa:08:dd:02:fd:10:a6:c6:09:8a:dc:1f:4d:
1b:e2:9c:37:36:32:e0:45:16:c4:ee:8d:a6:77:de:f7:73:38:
c3:72:00:b4:5e:6d:67:ae:0d:fa:ac:a5:bf:0c:97:a9:d0:8f:
a4:6f:68:bb:90:34:85:19:3d:53:00:cb:42:12:de:42:c9:37:
ad:96:d1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:30:01 2025 by rpki-client