Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: 0ctQxAPpFZ/I+0whQsbKRA4CjpQbt+F4tMgm+T1RCVo=
Subject key identifier: 03:C4:84:B7:C4:5D:5B:13:5C:C1:46:9A:F3:36:D2:71:65:49:9A:F2
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 01967A573773AF257B890419332D2DF6DBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: DE
Signing time: Mon 28 Apr 2025 03:00:58 +0000
Manifest this update: Mon 28 Apr 2025 03:00:58 +0000
Manifest next update: Tue 29 Apr 2025 03:00:58 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: X3eu2cC1N1ebER/WGzlm4EmciN5wFAzEXpSnyJojqUY=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:37:73:af:25:7b:89:04:19:33:2d:2d:f6:db:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Apr 28 03:00:58 2025 GMT
Not After : Apr 29 03:00:58 2025 GMT
Subject: CN=03c484b7c45d5b135cc1469af336d27165499af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:ac:e9:7e:90:f0:09:d3:4c:d8:ab:0f:5a:
0a:38:3d:3f:d7:5c:59:5b:35:7f:8c:3d:9f:7a:a5:
31:b7:ec:34:3c:53:d3:52:f7:0b:f2:ba:e3:b0:99:
4d:47:25:46:b7:f0:59:ad:05:8b:f7:26:d3:1a:3c:
ac:91:ff:6a:74:74:29:4a:de:cb:55:cf:77:fb:02:
21:da:7b:85:7d:3d:56:17:c5:85:d2:7c:5b:ad:dc:
bb:31:47:2f:ac:ab:2f:e1:88:13:ff:ac:19:5d:24:
68:86:67:47:81:6e:3b:77:46:8a:ee:e6:1a:98:e6:
ae:cc:db:59:94:c4:77:f1:60:76:33:f2:a8:a9:57:
10:06:b9:20:bf:8d:83:b6:ab:b6:db:a8:56:84:08:
23:f6:29:31:db:80:c6:27:93:f8:d1:70:f1:5e:84:
64:af:aa:02:da:ab:95:79:2f:1e:c0:75:d4:5e:c9:
e8:83:1d:3e:00:67:82:eb:6c:07:ec:d2:93:89:f0:
1f:c2:19:3f:a3:5a:2f:7e:ab:eb:8a:d0:e2:44:eb:
a5:55:c3:8c:60:92:f9:8d:30:b6:75:59:02:37:58:
57:c5:18:87:a1:9c:78:2a:bc:87:e7:fc:b0:1f:f7:
49:1a:c0:82:23:d1:8a:6e:ea:fb:bf:5e:b6:77:17:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:84:B7:C4:5D:5B:13:5C:C1:46:9A:F3:36:D2:71:65:49:9A:F2
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e7:2e:65:e3:77:cf:64:03:99:01:22:df:f0:ef:27:1e:46:
a4:28:3f:57:02:4e:3e:5a:40:b4:bc:eb:9b:03:11:8c:17:62:
eb:1a:54:8c:2a:3e:79:b8:9a:fd:76:2e:0b:72:13:89:89:c1:
5d:7e:8d:34:15:ca:4c:5c:46:52:ae:42:80:78:fa:31:f7:5d:
9c:92:89:89:f2:53:38:54:84:65:ff:c8:e4:bf:ef:25:0a:32:
28:33:bc:6f:64:38:3c:1f:66:fa:e2:7e:ea:75:ec:ba:38:cf:
25:6b:00:e5:84:33:7b:c3:62:10:74:af:c1:1f:56:72:b0:06:
f2:d6:91:ce:ef:c5:9b:87:7a:a5:68:18:24:64:98:76:da:66:
aa:13:6c:b8:1e:33:92:51:9e:15:cf:1b:f3:93:ac:a8:b0:a0:
51:f3:57:f1:b0:c6:e7:47:1a:79:9f:ba:3d:0f:6e:48:e3:7e:
29:72:70:de:d8:d4:47:70:ce:f6:ba:79:a4:9b:9f:65:4c:f3:
9a:ff:fd:50:d0:07:8f:f3:eb:25:43:48:d6:71:b3:7a:5b:73:
55:63:72:6b:35:c5:e8:78:b9:81:65:7c:3a:b1:cd:f1:b9:0b:
61:b9:70:0a:05:ee:9e:39:b9:a9:37:b6:73:27:c9:32:54:a3:
36:ef:fb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:34:23 2025 by rpki-client