Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: gkS3xEMQTg8smYU8Wi45Ny1rLkIO7ESDGfGf98zcOm4=
Subject key identifier: A3:02:79:48:02:4E:C6:E3:DF:7F:49:0D:C7:90:3E:34:9E:4E:01:35
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019671C22181DC213733A97594A2763A0672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 11:01:10 +0000
Manifest this update: Sat 26 Apr 2025 11:01:10 +0000
Manifest next update: Sun 27 Apr 2025 11:01:10 +0000
Files and hashes: 1: 0EXTA2fh52m_pdzndlQONOR-ALo.roa (hash: 6rMWco6WBnZhVNOyIqX9uMPGJDuagIsvvOicEopd/aI=)
2: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: h9EsXug0nErLD+kfKVVZdtaMY6tZh4d3tAWRA2VmUa4=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:21:81:dc:21:37:33:a9:75:94:a2:76:3a:06:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Apr 26 11:01:10 2025 GMT
Not After : Apr 27 11:01:10 2025 GMT
Subject: CN=a3027948024ec6e3df7f490dc7903e349e4e0135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:0e:a1:99:0c:c2:a7:10:f6:f7:cb:5d:81:
17:69:f0:3f:4f:2a:26:71:18:4f:0a:9b:84:0c:27:
5a:81:28:ef:6f:41:48:4b:25:46:17:dc:f5:23:fe:
5a:97:3f:aa:b4:c5:2e:a8:b0:bc:e8:84:dd:0c:11:
6a:4a:32:a2:ae:36:05:6c:6b:da:61:f9:3c:2c:73:
e7:53:bf:37:d4:b2:d2:2a:c0:7a:03:c2:f6:85:77:
a8:22:d5:d6:84:20:cc:c9:7e:7f:ac:b4:3a:c3:a5:
dd:02:c6:d5:d8:90:ba:71:cb:47:da:a1:97:98:e6:
a3:11:21:46:be:cb:08:22:09:b6:10:76:93:ad:ce:
3c:7c:3d:8e:cc:da:9d:57:86:a5:63:72:17:a0:d7:
3a:b0:9d:71:20:45:3c:e9:b2:8a:3f:58:8a:8c:76:
dd:c8:8d:c7:30:73:d7:e9:b9:c6:36:a9:9a:ca:2f:
95:3b:4d:35:aa:11:69:03:2a:d3:aa:5b:7f:7d:25:
37:38:5f:c0:74:c2:3f:d5:99:6c:86:c7:88:bf:bf:
30:1d:74:5f:ef:44:95:0f:51:8e:0f:41:89:68:89:
6f:47:c9:03:4f:0e:ec:e2:3d:cc:ed:68:3c:e6:8f:
5f:46:89:ac:c2:68:f9:2e:8b:21:dd:b6:8b:26:02:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:79:48:02:4E:C6:E3:DF:7F:49:0D:C7:90:3E:34:9E:4E:01:35
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c6:36:e2:75:33:1c:fb:82:ea:9f:09:a0:ec:9b:33:e3:43:
9c:02:f4:ef:a5:32:f8:0f:dc:a2:b8:de:cf:74:51:32:72:a1:
db:52:84:8f:03:b8:9e:4a:a3:d3:e9:66:97:41:88:c7:d3:50:
c7:d2:e9:71:4e:2f:57:b2:50:2b:01:4a:31:d6:fb:23:b4:ae:
2e:87:46:ed:fe:67:7a:40:2b:7e:d9:bf:92:dc:5e:70:9c:82:
6c:69:62:45:24:ae:05:e5:76:58:08:23:7e:83:8b:5a:54:e8:
d9:2c:c4:3c:2f:9b:24:37:65:a4:7f:74:c3:5a:51:98:8d:71:
6f:08:40:1d:de:a2:39:f4:ff:17:2d:8b:09:38:f8:f7:86:97:
1e:0f:e5:da:60:5d:93:07:bd:42:eb:6f:55:3f:07:7a:2d:ec:
7e:6b:1d:09:d4:b9:6b:ce:db:0e:42:76:58:77:bd:1c:4c:ab:
5b:dc:b0:76:f0:d9:0a:7f:01:e3:be:d4:d6:00:2a:1b:a2:00:
11:c8:45:e7:76:65:32:52:c7:9f:90:ba:e3:19:6e:cf:83:06:
ae:b5:ed:2d:fb:04:26:0f:5a:73:b2:e9:f0:7d:7c:04:f0:b7:
5a:48:c2:09:5e:1a:86:3b:93:92:ec:03:b4:b3:1f:8e:54:8a:
3f:ce:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:12 2025 by rpki-client