Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
File: hpA1wxdzT2Ybv4XCGEFVofNhat0.mft (raw, json)
Hash identifier: oZf/yw3YE+HgvdD0M2y0ZZvVqTbMTTqqycWLoFtokzo=
Subject key identifier: 20:08:C6:82:93:B0:65:C1:A6:52:1A:88:37:1D:99:B5:63:B5:3E:B5
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial: 0196C5030F4FA062D0EE130DAD9D2E9851A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
Manifest number: 10BE
Signing time: Mon 12 May 2025 15:00:34 +0000
Manifest this update: Mon 12 May 2025 15:00:34 +0000
Manifest next update: Tue 13 May 2025 15:00:34 +0000
Files and hashes: 1: AFoF1GuFzHjl8hWS56zz0OT3Bgg.roa (hash: tZKNbZDCtPOdNWQDTedTIFStwLgZ/2vtLmBHU+SWAQk=)
2: hpA1wxdzT2Ybv4XCGEFVofNhat0.crl (hash: Ly2j/OGVniJSlY1nZGYj+RY/0uI2JkCjs/dpNe6Ph6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:0f:4f:a0:62:d0:ee:13:0d:ad:9d:2e:98:51:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
Validity
Not Before: May 12 15:00:34 2025 GMT
Not After : May 13 15:00:34 2025 GMT
Subject: CN=2008c68293b065c1a6521a88371d99b563b53eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:0f:46:4e:72:01:10:02:1a:16:f5:6d:58:
34:52:33:c1:0e:ea:30:87:dd:e8:c9:dc:2e:25:8f:
a9:16:0b:44:d8:1b:87:36:91:20:f7:dd:1b:d6:62:
65:39:62:f6:3c:eb:ec:d1:d8:7e:6a:27:84:67:3f:
88:47:72:c5:10:bd:d5:6f:d2:e5:71:cc:6b:08:7e:
a5:37:1f:88:f1:74:03:66:78:97:45:43:71:8b:3a:
10:a4:99:3f:45:d9:68:16:e9:a4:92:e9:24:c8:0c:
75:05:c8:12:c0:44:82:5a:06:fa:48:ae:68:8b:85:
8d:a0:50:d0:a4:f0:c7:30:e7:f6:3f:45:e9:e3:78:
25:74:b1:aa:0d:24:cb:b2:14:b7:f2:a4:60:6f:26:
0a:98:49:a3:d4:3c:3c:2c:08:4d:9a:b6:b0:3d:bc:
50:23:fe:31:b5:7e:bf:05:e1:6c:59:0b:54:c1:e7:
7f:8a:af:17:43:c2:ac:c0:3d:e6:bf:d9:7b:3c:c1:
60:2f:23:70:7b:26:7e:24:7c:1f:df:fd:f6:e8:0b:
e2:e3:6a:e3:bb:09:34:f9:16:0f:da:fe:5b:8a:ef:
10:57:3b:d2:43:33:a3:c1:4c:df:00:86:a7:db:6f:
2e:d5:d9:eb:d1:13:1f:15:99:36:ca:4d:0c:75:84:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:C6:82:93:B0:65:C1:A6:52:1A:88:37:1D:99:B5:63:B5:3E:B5
X509v3 Authority Key Identifier:
keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:83:66:9d:66:92:1b:5d:10:7c:fb:ba:2a:8c:af:64:56:1e:
eb:3c:f7:71:07:f7:f8:4b:05:57:f7:b2:66:7b:bc:ce:0b:ca:
50:93:9a:0e:0e:59:6b:52:d9:05:3d:e7:5a:2e:a0:fd:b1:06:
75:4d:46:c1:20:99:7b:4b:fc:15:ee:14:fc:7f:96:78:fc:65:
75:60:47:b2:f8:7f:bb:52:77:d2:3c:19:81:7a:4a:ff:50:0a:
44:27:9e:1f:29:40:ce:3b:4d:45:af:f3:da:d0:9a:7b:8d:33:
4e:58:a5:94:31:d1:89:1b:d5:05:45:40:05:fa:2a:75:a4:57:
19:6d:ac:1d:02:70:2a:09:af:85:60:f5:23:e1:f5:9b:84:c5:
6b:b5:96:4a:0f:10:ea:3c:58:0c:80:fe:45:43:38:28:af:6f:
12:3b:f4:ff:da:0a:e8:ff:68:88:e7:be:f6:70:fe:b0:1d:84:
18:7f:4a:63:bb:5d:e3:84:b1:77:4e:2e:ec:ac:de:1b:eb:0e:
fd:28:2e:62:41:2c:e4:24:40:47:6c:34:eb:ec:bf:42:ed:db:
74:ba:1f:48:d0:44:36:b1:82:02:ac:60:96:c2:6e:8e:f0:40:
14:8f:54:89:87:f5:ab:4c:45:88:90:e5:fa:02:1f:b9:45:53:
76:67:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:02:46 2025 by rpki-client