Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: ymajJAdo/HhfSQfe8YXfnxMMhpfhT2yASXCCdYe95z4=
Subject key identifier: A9:31:8A:BF:47:C1:92:28:F5:FE:2F:FA:73:49:8A:BE:70:14:E9:52
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 01967D57E57C10D7F5A81A493FA1B0D3A734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0483
Signing time: Mon 28 Apr 2025 17:00:34 +0000
Manifest this update: Mon 28 Apr 2025 17:00:34 +0000
Manifest next update: Tue 29 Apr 2025 17:00:34 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: qxuYMrGwctxY7/aE4IhpayrYZYTnopSORhi83KclIWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:e5:7c:10:d7:f5:a8:1a:49:3f:a1:b0:d3:a7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Apr 28 17:00:34 2025 GMT
Not After : Apr 29 17:00:34 2025 GMT
Subject: CN=a9318abf47c19228f5fe2ffa73498abe7014e952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:cc:f1:35:bc:41:93:e6:bf:0b:d4:c1:55:
a3:87:50:7c:b2:a5:0e:88:d4:0e:89:4a:e8:90:30:
b8:64:1c:ee:5e:44:8e:28:65:4a:d3:43:be:3d:8e:
38:45:b5:dd:3e:fd:31:96:92:16:bb:94:fc:bc:77:
ca:56:4e:4a:91:24:59:23:29:a1:f7:2e:5e:76:88:
2e:0e:25:1e:9d:63:8e:53:b8:df:41:10:50:ed:62:
28:8d:dc:14:93:db:0f:03:f8:c7:9f:3b:83:b0:3d:
89:ef:0a:de:9f:34:a5:ca:fb:99:41:80:2c:d1:9f:
6e:13:e2:5a:91:5c:c7:e6:d2:6e:7c:f5:49:1c:ca:
19:0f:84:96:1f:75:c7:9c:e9:27:69:8d:4b:2f:32:
7d:86:aa:e7:38:04:98:de:e3:b2:97:0e:44:90:a4:
c3:15:47:15:80:80:a0:d6:9a:6e:fe:ff:67:e2:98:
12:07:3f:1a:51:e8:e4:65:79:de:65:6d:6f:6a:c6:
d9:48:3a:4c:1a:01:18:11:50:85:f1:f5:e0:9b:ba:
91:1d:b8:23:e5:63:ff:32:f1:9c:38:e5:73:69:24:
99:78:9e:b4:b8:5f:97:08:b2:a3:92:47:55:25:b6:
73:3e:99:c7:e0:83:1b:92:c5:3f:dc:8b:13:87:a6:
27:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:31:8A:BF:47:C1:92:28:F5:FE:2F:FA:73:49:8A:BE:70:14:E9:52
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:cb:01:79:ee:c2:89:0d:01:45:e7:33:a5:58:7f:c6:85:
da:16:2e:c1:87:84:79:4a:ee:93:3a:e4:bd:7a:f1:21:79:15:
b2:7b:82:e4:fe:f7:b0:76:4b:3e:e9:ae:cd:c4:21:99:ef:44:
22:5c:09:4c:17:15:fe:3c:e3:84:ca:09:74:ec:f0:92:cd:a3:
f0:2e:93:fa:c8:4c:f5:df:f7:bc:62:9e:1d:8f:f3:fb:eb:1c:
19:15:82:9b:54:a0:a2:25:d9:bc:45:c9:71:0d:5f:83:6a:af:
6a:0f:28:e6:9f:60:48:22:e7:c5:70:d6:03:97:7d:ac:dc:95:
52:88:cc:43:4f:22:2f:fc:b7:8d:41:9e:e4:1a:9c:f6:de:68:
7b:a6:09:8c:69:04:89:c8:67:46:7d:01:d7:52:68:40:a2:62:
3b:c6:0a:09:da:28:8d:86:9b:e7:8a:a5:c2:81:a3:bc:7d:9b:
4f:e7:bc:e7:c9:aa:69:3b:6b:8f:ec:a6:07:29:ac:14:36:87:
aa:e0:a3:3d:f9:47:16:a1:33:93:3e:81:ac:74:03:1b:a0:02:
ec:64:f1:dd:21:7d:c6:c6:94:47:34:fb:e1:07:10:e4:d5:f8:
90:d2:d0:f6:70:21:cc:f2:77:d0:96:05:86:e5:17:0f:9d:8f:
3a:90:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:55:14 2025 by rpki-client