Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: j2GM0Mv/Oqbu/onj2M1ZwAWRZzVT1mS0iOS3oW9sFpk=
Subject key identifier: 8F:67:1E:DF:5D:43:CF:42:10:50:0F:F8:B0:6D:8C:92:0F:E4:72:50
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 01967642D7A28B0575FABFC7D1FF9E1FA65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 05F5
Signing time: Sun 27 Apr 2025 08:00:14 +0000
Manifest this update: Sun 27 Apr 2025 08:00:14 +0000
Manifest next update: Mon 28 Apr 2025 08:00:14 +0000
Files and hashes: 1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: bMAuLd+jVMhUKXp8Yy0wEziuUwYg5cJTj+lGw4FFKeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:d7:a2:8b:05:75:fa:bf:c7:d1:ff:9e:1f:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Apr 27 08:00:14 2025 GMT
Not After : Apr 28 08:00:14 2025 GMT
Subject: CN=8f671edf5d43cf4210500ff8b06d8c920fe47250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:a2:c6:01:cc:c7:05:25:74:5b:6f:1b:ae:
7c:92:ad:22:59:63:54:42:d3:24:ed:3c:45:3d:83:
58:4b:f7:58:ec:23:97:f9:d1:56:6c:dd:e3:66:7f:
e8:8f:4d:d0:3c:07:f7:a5:90:0a:dc:78:ed:f2:13:
90:6f:21:2d:47:de:48:a7:f7:1b:14:96:2e:be:39:
88:b3:a9:1e:c7:1c:5d:b8:a1:37:41:fe:e6:00:8b:
3c:f7:4b:b6:a3:56:94:73:c4:8c:82:be:5c:88:e3:
02:11:5c:23:79:04:44:6f:f4:5b:48:4f:0d:99:ae:
d7:25:aa:53:da:93:c8:f4:81:a0:c3:70:66:5a:1a:
93:18:50:a6:31:ec:35:2d:1b:38:8c:f2:76:a7:e3:
bf:0f:7e:98:82:2d:dc:33:12:43:79:d0:c0:1b:7c:
74:87:bf:20:1a:8a:4a:cf:2c:df:ba:88:9d:03:45:
de:7a:8c:1e:c5:57:b9:ba:0e:34:f1:6e:51:7d:3e:
f6:7a:5c:d4:72:7f:5f:6a:43:6a:67:4c:a2:18:c4:
13:4b:80:d1:68:e4:16:c3:dc:88:1e:ad:e3:69:c6:
89:f5:9e:cb:ca:fc:69:3d:1e:fd:90:54:3b:4f:d1:
40:17:c4:d5:af:f9:a9:d3:41:2b:f6:17:dc:e3:ce:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:67:1E:DF:5D:43:CF:42:10:50:0F:F8:B0:6D:8C:92:0F:E4:72:50
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7c:78:80:d4:31:9d:50:66:06:ad:f6:5c:9e:57:16:3a:8c:
01:88:ae:c9:da:38:90:a1:6b:c5:d2:00:33:0d:3e:a0:c1:da:
84:cb:17:81:73:98:bb:91:4e:bd:54:47:5b:e7:f1:ec:f6:f8:
42:3f:5b:bb:c9:3e:b9:a7:d4:ef:89:76:aa:1c:e2:04:e6:31:
38:20:ee:d5:cb:4c:f0:2a:04:28:bd:96:e5:bd:5b:72:7d:f5:
db:31:b9:0e:08:f2:45:e2:ec:91:5d:95:71:99:ec:d3:f6:48:
35:be:01:29:44:b9:61:74:7b:92:18:a2:28:6c:fd:b4:af:2e:
69:ad:63:6a:f7:5f:b4:10:27:02:8e:a9:f6:0b:8d:3d:9a:50:
b5:5d:49:36:96:79:bb:ff:80:f7:7b:08:19:06:d2:40:33:ae:
a3:64:75:8d:ac:e2:36:92:e1:62:d0:c6:a1:96:2e:11:3a:df:
06:4b:98:b5:3c:5e:d4:41:66:51:3f:10:f7:af:aa:9f:5e:ce:
22:cb:a9:96:3a:d9:4e:d4:2e:a7:41:da:22:11:8f:a1:0c:dd:
9e:c9:2e:4b:ea:7a:11:69:87:cf:7d:3d:b3:52:88:ef:d8:b1:
a4:19:18:10:d6:ee:a6:ce:3b:4a:93:d3:4b:de:fd:e8:d2:96:
d8:07:30:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:13 2025 by rpki-client