Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier: M2AfqSHZhB4QOx7NT/v7nnvRn2amkhwpt1Ujp7Xb99w=
Subject key identifier: A2:01:0F:AE:BA:D6:FB:7F:AF:67:22:5F:53:AE:59:FF:1C:0B:61:33
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial: 019676B124D4A032DA55FE66AC46CF192EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 10:00:42 +0000
Manifest this update: Sun 27 Apr 2025 10:00:42 +0000
Manifest next update: Mon 28 Apr 2025 10:00:42 +0000
Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: UjHCqca/Vjw3BqoWqhfb7PJpr/uAcKtgjoiSCLCFYA4=)
2: ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (hash: HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:24:d4:a0:32:da:55:fe:66:ac:46:cf:19:2e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Validity
Not Before: Apr 27 10:00:42 2025 GMT
Not After : Apr 28 10:00:42 2025 GMT
Subject: CN=a2010faebad6fb7faf67225f53ae59ff1c0b6133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:38:39:80:e3:8f:cc:09:ab:af:9f:a6:d7:
00:9b:5a:ba:3b:97:99:b9:52:64:05:28:2c:ec:1f:
25:7f:1b:17:41:e7:e7:b1:a1:6d:69:22:57:bd:3f:
e2:2d:43:4e:8d:b9:92:43:e7:cb:9f:f5:53:7f:aa:
33:08:41:21:a8:aa:05:e5:10:1a:ca:06:d2:de:d3:
c9:cb:be:5d:d4:e3:ce:83:07:39:d6:b3:39:da:0a:
fa:1a:e5:b6:11:32:cc:64:26:88:54:99:14:c3:31:
68:9d:c2:c8:26:f9:1c:7f:d8:3e:2d:2c:5d:56:e5:
d2:ce:73:4b:9a:a9:d1:88:a3:05:a6:c9:4e:0d:e0:
3d:2e:39:d3:56:db:fd:eb:72:57:11:ac:89:ac:9b:
0e:01:b4:43:fb:38:2b:7d:f0:3a:66:9d:30:60:ae:
e5:ad:29:85:37:6c:77:95:33:e2:52:9e:31:7d:14:
6a:cc:55:4d:69:9c:ca:14:06:f1:62:17:b4:10:95:
7d:66:86:90:6a:3c:32:1c:bb:7a:fc:27:e0:d4:d7:
da:15:bf:e4:6c:be:b3:17:cd:62:4f:fb:26:3d:c7:
98:ea:6f:24:e5:b7:ae:b4:32:23:74:43:06:59:c6:
b4:9d:0f:ea:c6:1d:43:42:7d:80:11:3d:54:5f:df:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:0F:AE:BA:D6:FB:7F:AF:67:22:5F:53:AE:59:FF:1C:0B:61:33
X509v3 Authority Key Identifier:
keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0f:eb:6f:4c:cb:7d:84:80:28:05:c3:52:6b:d6:01:6a:61:
b9:9e:04:02:24:9f:1a:fe:a8:87:a6:57:30:be:96:29:b6:67:
cc:e4:1d:e7:ce:73:a3:d0:5a:4a:3a:63:5d:a0:8f:c5:a4:d7:
2c:a4:55:99:e8:e2:6d:e4:c0:ab:b2:9f:b3:11:18:13:2c:5b:
8e:60:00:28:1a:1e:3a:15:4f:1c:f2:1c:6f:3e:23:76:f0:58:
45:7d:0d:90:af:69:b7:e5:2e:84:0b:26:ab:08:87:aa:4f:74:
8e:8c:16:74:d0:00:6f:3e:24:93:67:16:32:73:d2:93:f0:29:
0d:e7:9a:0d:ec:bf:7b:e7:9f:b4:e5:d7:45:bb:27:5d:30:72:
f5:dd:e3:7b:19:c9:a9:06:9d:ba:b1:7d:25:93:fa:aa:53:ba:
12:79:ff:4d:9a:aa:f0:12:36:4b:4f:84:1c:b7:f5:12:48:5c:
76:b8:7d:23:71:e3:54:87:91:2b:a3:2a:d4:a7:47:c0:af:97:
89:41:a7:f5:c7:1d:2e:ef:ed:59:ee:3a:42:6f:7a:09:47:4f:
d2:92:13:cb:b6:be:53:a0:ad:5c:fd:a6:18:05:2d:5d:89:c3:
a6:95:87:bf:9b:6f:a7:53:e9:e8:e2:2f:5a:37:ed:66:cc:55:
b4:4e:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:57:39 2025 by rpki-client