Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: Dy7VJpNa+grP3N9jMWrJUcul71v3RBlK9JG18ewWoZ0=
Subject key identifier: 2F:80:7F:B9:A5:72:67:2A:50:7D:B5:FE:6F:9F:E2:AD:EA:A3:4C:F0
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 01968391C3AC402DBA6A6E7CC124FBF8EF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 22:01:30 +0000
Manifest this update: Tue 29 Apr 2025 22:01:30 +0000
Manifest next update: Wed 30 Apr 2025 22:01:30 +0000
Files and hashes: 1: KUCsTzvnwNnMm7Jeca6aVL9k1f0.roa (hash: 08CBdTpQIdxpgYISvMqyNDiM+ICQK0H520OtR31swUg=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: kGxE1fY9M/oC7wpmxRh7Rk50DGfuEy89zmygv4+FUag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:c3:ac:40:2d:ba:6a:6e:7c:c1:24:fb:f8:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Apr 29 22:01:30 2025 GMT
Not After : Apr 30 22:01:30 2025 GMT
Subject: CN=2f807fb9a572672a507db5fe6f9fe2adeaa34cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:4a:ce:c8:05:1f:23:6a:2c:f2:d6:a1:2b:
e0:01:16:96:46:0b:a9:6f:5a:7a:07:29:93:d8:f9:
92:89:3e:ff:7c:66:d4:39:08:da:77:77:c1:ba:8e:
8b:f5:8d:c3:e2:4b:fd:cb:1a:1e:c1:8d:22:4a:4d:
b0:6e:8c:87:59:20:13:8d:76:fe:e2:c4:d5:0c:60:
74:ee:cb:a3:db:c8:ce:32:4f:72:6a:11:69:29:dd:
21:97:9a:29:74:6b:6a:b0:d3:50:f2:fe:c7:82:bb:
fc:9e:3b:13:44:07:80:40:79:76:71:a7:52:46:4c:
c7:ea:b5:0c:20:5c:2d:6a:22:4c:2a:d5:55:e0:a8:
30:51:05:60:0f:a0:ca:d8:d9:83:8b:9f:65:8d:7e:
4e:b9:a5:8e:77:a6:07:99:23:ec:83:2a:05:00:53:
6a:9d:41:f2:45:00:a2:e7:ea:d0:af:21:8d:b8:00:
14:e9:28:05:13:3e:c0:25:29:0b:d9:9b:65:4d:8e:
49:e2:2a:1b:7e:cc:6b:de:17:58:d0:54:81:f7:05:
11:97:bb:6c:59:a5:6d:65:53:15:f9:64:f8:18:3a:
e5:c1:d2:ce:85:77:0e:c2:62:4f:4d:36:c2:b0:09:
c4:6c:b0:b9:2c:b3:e6:23:6b:b6:93:bd:f8:2a:d1:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:80:7F:B9:A5:72:67:2A:50:7D:B5:FE:6F:9F:E2:AD:EA:A3:4C:F0
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ea:34:af:4e:88:7e:5d:8b:a4:9b:c6:56:3d:d9:c4:30:82:
f4:79:fa:87:af:45:9e:c5:c4:7e:16:1a:14:e0:26:e4:50:21:
a3:3f:60:0b:2d:37:1e:9c:89:02:2c:8a:24:39:b5:5f:d1:92:
ae:13:db:93:1e:f4:15:84:f2:d8:5e:1a:b8:5a:f8:ff:4c:2f:
8b:1f:3e:b7:c2:94:c8:95:82:24:83:30:dd:12:92:87:2e:e2:
9f:b4:e5:46:af:05:5a:98:1f:35:92:e9:fb:d6:21:0a:6e:8f:
0d:79:bb:6e:b4:13:52:21:a2:5b:7d:50:60:6c:0f:10:1d:9f:
d6:0c:5b:e1:ac:e8:1d:00:65:4f:88:4f:78:60:ba:2e:f6:9b:
b1:f6:f0:50:f3:9f:48:05:ed:8c:75:bc:6b:6d:b9:4f:57:82:
fc:83:0b:97:10:05:6a:84:ea:4a:0d:07:15:55:d6:e7:4b:0d:
b5:67:34:ff:63:ad:25:88:b4:41:5d:36:4d:1d:a2:32:ff:ee:
50:86:19:4a:84:c1:f9:5a:9a:1f:c8:49:11:9c:8e:1e:1f:ba:
f4:c1:5f:68:4b:0c:de:0f:66:92:94:ae:5e:e3:56:e3:4a:57:
3b:d9:dc:1c:3e:a5:72:79:90:f9:f9:2d:15:e0:2d:ce:ab:2f:
be:f5:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:33:03 2025 by rpki-client