Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: a56qVjRL9CrVcw1KfJsLNl7Wcsq4EAkS4LIx2M+lGFs=
Subject key identifier: 8F:60:22:7A:E3:7E:8E:8C:36:7F:5B:1D:A5:2A:51:1E:AD:C4:BC:64
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019670E616D0511BD2420B5331ABD8308338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 07:00:49 +0000
Manifest this update: Sat 26 Apr 2025 07:00:49 +0000
Manifest next update: Sun 27 Apr 2025 07:00:49 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: oSzu2rOyPl/d6PBmsZePyxwTfQ4JCBbXh0hJvQfCFXI=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:70:e6:16:d0:51:1b:d2:42:0b:53:31:ab:d8:30:83:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Apr 26 07:00:49 2025 GMT
Not After : Apr 27 07:00:49 2025 GMT
Subject: CN=8f60227ae37e8e8c367f5b1da52a511eadc4bc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:d4:f2:0c:8b:fa:98:4a:c3:29:b2:23:d7:
a1:12:b0:72:5a:4c:28:85:1d:46:73:db:11:e2:3b:
05:b6:08:17:16:8a:3d:bd:31:3b:c6:cc:b7:a6:e1:
bd:23:d7:51:97:16:41:f0:1a:54:d3:88:b3:5a:43:
a7:9c:e7:6b:ce:7e:0f:3d:cd:21:62:a0:6e:b1:d3:
5f:71:d2:c9:94:5f:f3:67:af:f4:74:05:49:cb:28:
8c:57:11:8d:7b:56:1a:00:36:a5:ac:65:46:74:5c:
83:c9:43:cc:2e:ba:d3:4a:69:7a:89:c2:28:a6:6f:
e7:20:fe:3a:08:da:c1:f1:a8:49:b5:19:47:c4:f3:
eb:b5:c9:86:7e:5c:2d:63:82:da:55:9d:d7:f6:d5:
f6:6c:0b:33:00:83:08:93:80:68:82:14:29:3b:6e:
4f:28:f3:31:a8:cb:7d:5f:9b:01:cb:56:a8:c9:90:
fd:3c:68:34:67:a9:96:59:03:9e:82:91:44:cf:52:
4c:1e:f6:54:47:a2:6c:cf:f0:21:da:8d:da:8d:75:
a3:e5:71:b0:fd:66:cd:b3:04:89:95:89:f6:33:54:
d9:d7:e4:0b:56:32:d5:01:79:44:98:ef:56:3a:d9:
9d:c4:36:0f:6a:f6:17:45:f8:81:1b:cc:cd:9c:2b:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:60:22:7A:E3:7E:8E:8C:36:7F:5B:1D:A5:2A:51:1E:AD:C4:BC:64
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:aa:9a:29:b9:1d:ba:d4:9b:32:93:cf:f1:17:74:bd:de:
20:d3:1a:5c:13:6e:8e:a8:18:cc:a3:de:fc:88:e5:dd:57:db:
0f:a1:24:c0:28:72:5f:ae:fe:c1:6b:02:b2:bf:9d:0b:df:6d:
d9:c1:75:00:97:95:3e:b8:14:88:61:a6:d3:d4:a5:94:d3:d6:
11:75:f1:f4:c6:a0:a1:dc:9d:bb:7b:ca:f0:22:0c:44:79:da:
bd:bf:da:2e:b0:42:2f:73:d7:46:72:ed:79:20:7b:2e:6c:5b:
11:fc:94:b7:d2:7e:64:5d:ce:17:d4:bc:73:59:0c:94:1a:e6:
71:6a:5b:c5:bc:1e:d8:e0:b4:4c:56:97:42:82:8c:52:60:f6:
d5:e7:b5:1d:66:02:fd:38:eb:e7:ef:8f:5c:ad:41:c1:cc:02:
30:2d:ce:02:0f:ae:11:aa:2d:4a:e5:b0:26:9b:38:11:0a:f0:
d1:de:1d:f2:be:ca:87:73:82:aa:31:f2:3c:8b:5b:74:d4:56:
f6:8d:73:2f:79:54:39:fa:19:84:47:45:2c:6d:f7:13:ed:23:
44:6f:bb:a9:74:9b:8c:d8:10:97:0d:44:85:45:8c:73:d0:fd:
c5:26:ba:13:cf:9d:54:33:ec:49:1c:6f:ba:0d:9e:ad:7b:76:
5c:a8:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:40 2025 by rpki-client