Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: Hm27lTj70JWJbibIroWXrr0diqo19DCH383OkeQgs6c=
Subject key identifier: 90:46:FE:CD:3E:F1:F7:05:BE:FA:61:DB:03:CA:21:66:43:5A:AA:11
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 01968A37B1F2762A1C6660412CE940582457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 05:00:27 +0000
Manifest this update: Thu 01 May 2025 05:00:27 +0000
Manifest next update: Fri 02 May 2025 05:00:27 +0000
Files and hashes: 1: FjIahcKt09OuzmKTy1-sTrhxfJE.roa (hash: vdC0TpdFOFzZCc1CfiRmwTujlsmnztXNdvUzRtn8G+A=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: 3SFy6N2mL2HH16HhdhFOSQAdvjFLLTbg1WU5QoAoiwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:b1:f2:76:2a:1c:66:60:41:2c:e9:40:58:24:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: May 1 05:00:27 2025 GMT
Not After : May 2 05:00:27 2025 GMT
Subject: CN=9046fecd3ef1f705befa61db03ca2166435aaa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:ad:a7:b6:cc:8f:e9:4d:1e:ca:11:9e:14:
7d:24:e4:e0:6a:ad:67:35:7a:29:8a:d1:ec:7b:ad:
40:b3:e3:06:61:ed:89:03:03:d0:ee:b2:15:1c:d7:
63:56:79:16:56:7c:51:6f:90:65:ca:f9:a5:f3:55:
ae:8f:9a:7d:65:41:c6:e6:76:a0:a9:08:c7:c4:90:
c5:f4:43:dc:59:d4:7d:1b:9a:7c:0f:d8:e3:10:ef:
08:4c:0a:06:b5:32:4a:8e:ce:1a:cb:fc:f2:a6:d4:
7d:ac:aa:a6:6f:67:81:fb:b8:a1:e9:8e:14:0c:32:
2c:2d:7d:8d:1f:3f:ac:b9:67:fd:64:17:0f:d5:c3:
92:62:5b:5c:99:32:7f:a5:54:3f:fa:2b:41:6e:a0:
ab:50:7e:85:d0:84:27:26:39:2b:43:9a:83:ee:e3:
6f:ab:de:be:82:5a:0c:1c:d9:c0:77:d3:e7:93:4e:
20:8c:34:80:d3:b2:67:31:32:36:13:dd:38:95:83:
6b:67:9f:45:31:c6:be:11:0e:2a:a7:75:ee:96:43:
60:44:aa:d9:4b:ee:3b:94:2e:c0:fb:99:30:2b:c9:
a4:24:9b:5a:6f:2c:ec:4d:33:76:25:21:f9:f1:27:
ab:93:01:2e:e1:6e:43:12:3a:72:ba:61:f4:a2:67:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:46:FE:CD:3E:F1:F7:05:BE:FA:61:DB:03:CA:21:66:43:5A:AA:11
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0b:6e:9b:cf:99:fa:3d:b2:d6:e9:e8:6f:2d:f3:b0:51:74:
84:de:b6:96:b2:85:b4:31:bc:8f:39:71:f3:41:42:70:61:a2:
be:7f:6e:41:ee:eb:55:44:45:c6:83:fe:ec:e9:72:23:6d:e7:
df:fa:fb:26:db:0a:94:7a:e5:51:06:bc:4d:3e:10:60:d6:70:
f2:bf:df:a6:ee:6d:2a:91:29:c1:ca:3c:5f:1b:ec:49:2e:1e:
6c:f4:ce:6a:b2:f9:cd:d2:8d:71:98:a2:e3:ee:f4:4d:42:f2:
07:9e:94:3e:69:d7:08:cc:c3:b1:61:c9:18:04:ff:bc:e8:76:
6e:4a:b2:fd:13:19:f9:09:78:76:a2:42:36:d0:18:00:b6:ba:
90:7e:da:b0:b8:8e:3c:ba:fc:c1:08:09:42:b9:0c:11:47:76:
55:d8:1e:9f:2b:f9:ab:6f:a1:19:8b:12:26:e2:33:20:6a:49:
dc:6d:8d:6b:b7:67:ad:0a:f5:01:33:b8:1a:50:c4:57:7c:e5:
65:c7:d0:ab:c5:19:b7:3b:af:b6:f9:75:8c:9a:c7:dc:43:a0:
5c:30:e4:03:4d:e8:af:58:34:17:1d:d8:cc:77:7a:f0:36:53:
9b:d8:eb:9a:15:ab:84:27:0b:22:9c:5d:e7:81:57:4b:5c:e2:
d2:c4:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:30:12 2025 by rpki-client