Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: jkbFkSLGfWzNmJry161IUz6Vu+nGTw5ii6Bf8Pjz1BM=
Subject key identifier: 20:AE:57:5A:37:F4:A2:EF:43:58:89:33:A6:48:0C:F1:15:C0:A8:28
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 01968021C27FA616DB3BE4C480A599239D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 0373
Signing time: Tue 29 Apr 2025 06:00:17 +0000
Manifest this update: Tue 29 Apr 2025 06:00:17 +0000
Manifest next update: Wed 30 Apr 2025 06:00:17 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: 7vuHfzAYnbBrexMFm7W/A3NnMR74mPTGRiPgb3HGD5U=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:c2:7f:a6:16:db:3b:e4:c4:80:a5:99:23:9d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Apr 29 06:00:17 2025 GMT
Not After : Apr 30 06:00:17 2025 GMT
Subject: CN=20ae575a37f4a2ef43588933a6480cf115c0a828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:9b:c0:b5:d8:24:54:f9:74:08:b5:42:0b:
9e:1d:2e:38:81:8f:2b:02:37:48:31:f6:e1:ae:e1:
aa:b1:20:82:7c:9b:c0:a5:24:69:75:54:44:9f:00:
91:dc:ba:d5:00:ea:77:99:f6:f8:38:22:bf:e7:80:
a1:aa:f2:a7:cf:ef:6a:eb:65:1d:59:bf:90:0e:ba:
12:ad:ae:5a:6e:88:96:ea:6c:33:f2:b1:8f:9b:cd:
19:43:55:7b:45:d1:76:d9:2e:29:64:eb:ef:fa:82:
d7:46:25:6f:f8:67:65:8f:aa:22:35:a6:c6:36:7b:
61:e3:98:fe:b8:e5:5f:cf:f3:df:6a:9f:3a:ca:a3:
74:18:bb:a9:42:3f:be:ef:96:cb:69:2a:9b:90:82:
02:24:31:6e:29:fa:ac:01:6a:85:33:07:7f:7d:c3:
f0:be:5f:65:8c:a2:bd:54:49:93:71:06:84:83:9e:
55:f7:c0:28:4e:ac:16:43:a0:a3:12:4b:93:e4:1e:
8e:84:88:07:7e:9a:2d:28:60:47:6d:22:7c:d5:37:
ae:2f:2c:ff:38:21:63:1b:34:5b:66:3b:65:ac:57:
ac:9c:07:90:2d:a4:3c:5f:92:e5:10:cb:27:3d:cb:
3a:94:5f:4c:b3:5d:60:6e:dc:bb:2c:19:c6:86:01:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:57:5A:37:F4:A2:EF:43:58:89:33:A6:48:0C:F1:15:C0:A8:28
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:59:1f:ad:37:79:14:89:d0:b6:61:88:c7:56:fa:26:6c:
26:c8:c1:4c:63:a4:67:e1:54:bc:f4:60:c9:e6:b2:cd:f0:75:
b6:9c:f9:7b:a3:9e:47:fd:44:82:50:85:30:04:20:09:8a:31:
9b:65:5d:e3:0b:91:2a:60:60:e9:29:e6:9b:29:8f:45:54:17:
8c:60:36:17:6e:0e:39:08:f2:f6:e9:1a:6d:3a:dc:56:e3:b2:
18:14:e4:74:6b:41:d9:b6:ff:f2:a7:eb:18:c5:29:cd:92:98:
2f:04:9d:56:4f:70:c1:6d:b1:c3:32:b9:4f:2a:c7:ec:26:26:
65:19:62:f9:cc:3d:1a:89:fa:fa:a7:58:a6:ae:82:c3:c7:92:
49:79:e3:51:85:fe:10:db:65:d6:c7:f6:6a:2c:80:70:cf:f8:
b3:c9:6e:cf:05:9b:f4:3c:50:f3:4c:99:62:f6:2d:1c:b9:c2:
b6:2f:31:cd:5e:97:dc:20:d1:f7:e7:93:da:f2:52:37:78:a7:
d8:e6:06:ca:bf:03:b8:96:8c:22:93:1e:92:d4:c1:6e:38:ec:
ad:b9:9e:4a:4f:89:bf:8c:35:96:cb:51:15:a9:82:4c:0a:e2:
be:8d:fc:81:d5:91:14:66:06:61:66:ed:23:c3:6e:0c:f3:8f:
9b:53:b0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:36:57 2025 by rpki-client