Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: fYVufRP5GfULsSRmOEo3gKIbxY68feR4RGPSfXvNV18=
Subject key identifier: 0D:56:12:C9:99:4A:13:8B:E2:46:7A:7C:71:14:EA:C7:8B:42:0A:48
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 019673423ED24E272D44B1C82F8DED6A9EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 12AE
Signing time: Sat 26 Apr 2025 18:00:43 +0000
Manifest this update: Sat 26 Apr 2025 18:00:43 +0000
Manifest next update: Sun 27 Apr 2025 18:00:43 +0000
Files and hashes: 1: 0mGXGaCdx8b0IvVKiGo7317nAQw.roa (hash: JBoOppkoR2+2kdzZgQYn1vdyTCQusp5l9Um4sKeOKzw=)
2: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: r0/YX9IfDL2siZoidpXh/rGR/WcanpkCBpC56FI4/vY=)
3: P3rY7Cmn84Ni11FziReIJTvis6Q.roa (hash: SHFkgztCNHhWPjHt5nCk5Bgx6ribEhAmnRifNZCrpkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:3e:d2:4e:27:2d:44:b1:c8:2f:8d:ed:6a:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Apr 26 18:00:43 2025 GMT
Not After : Apr 27 18:00:43 2025 GMT
Subject: CN=0d5612c9994a138be2467a7c7114eac78b420a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:f0:40:54:a4:65:c2:83:7c:68:1e:f9:48:
91:a8:a3:b5:ff:58:e0:14:df:dc:2c:83:53:ce:aa:
20:d6:8d:d0:7d:60:6e:e5:68:7f:45:1c:8f:d5:77:
3e:5c:2a:c9:80:14:73:38:b6:9e:10:4f:33:fb:95:
59:37:39:1d:9e:d7:37:da:5c:c7:11:f7:7d:5a:63:
5e:1b:96:13:81:30:83:db:95:35:a6:76:6b:ed:5a:
69:dd:84:fd:3b:31:40:f3:b5:98:25:c9:be:cf:32:
6f:60:ee:e0:c4:8a:97:7e:9f:59:97:f3:c0:f2:72:
09:b3:ba:e4:2d:2a:33:55:01:67:6f:76:5f:d6:ad:
c1:6d:a1:06:db:4f:43:6b:d5:58:19:13:8a:72:dc:
19:ee:e7:b0:63:ae:49:14:73:b5:cf:56:0c:8e:e0:
7f:b1:2e:b0:93:66:f0:f4:97:7c:04:a3:d8:a9:ae:
06:02:a3:30:ac:e0:d3:91:bc:51:0d:b8:68:44:6d:
24:c4:dc:c6:6e:9d:e2:04:11:b3:dc:13:83:03:10:
6f:60:85:b2:a8:e0:eb:52:8d:47:2c:fc:81:c6:b7:
d3:9a:54:4d:b7:a0:af:4f:27:d0:89:d1:d9:df:86:
3e:51:c8:9f:76:8f:69:e4:9e:77:ff:95:1c:ee:b9:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:56:12:C9:99:4A:13:8B:E2:46:7A:7C:71:14:EA:C7:8B:42:0A:48
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6e:88:0f:a9:e1:0f:28:0f:a4:17:1c:82:c3:2e:1a:22:ae:
4a:50:43:31:42:e3:fd:d9:ec:c2:06:83:c5:6d:3c:4d:92:76:
67:95:51:90:55:71:a9:90:15:9c:1d:5e:a1:c5:f1:5c:0b:8b:
86:89:ba:a7:2b:b0:7c:84:f3:ce:a2:9f:48:07:71:0d:75:b2:
05:02:40:6d:bc:21:bd:b0:95:21:f5:da:68:47:b4:e6:8c:9e:
ad:43:4a:ba:9f:85:b2:02:d2:aa:c3:61:8f:67:a6:3c:3e:f6:
cd:8e:e2:ba:26:79:b2:4c:f1:78:32:95:eb:0e:c0:2d:74:0d:
c1:35:9d:05:72:58:b4:44:5b:86:e1:fc:87:d7:ad:f0:46:fa:
1a:76:d3:e7:ce:9d:c8:e5:77:af:be:aa:f2:48:34:da:c2:b4:
d0:e7:17:c8:9d:fe:85:80:56:a0:00:d0:48:79:ee:11:66:67:
db:ca:ff:db:ed:17:90:ed:56:4f:96:70:9b:80:e9:9f:89:88:
3d:ef:28:04:3e:5f:47:e2:a0:f8:3d:fd:b6:3e:2b:ab:df:0f:
e7:ac:0e:5b:fe:3a:9f:9a:e4:97:17:a4:cb:71:89:9d:b1:3e:
3f:ac:7d:c6:67:62:ef:b4:2f:74:d5:b5:e5:f4:fd:28:5a:ca:
79:f2:83:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:59:51 2025 by rpki-client