Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: QZaAQTRF+2GvCO0a9mPjuaEF095Jy+1DGSwzobF6CA4=
Subject key identifier: 2C:1F:11:7A:75:79:1D:55:03:89:24:3D:D5:AE:D6:4B:48:BE:00:AE
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 0196C0B8A109E00E0E9C3E98C36B3F46044A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 0FC4
Signing time: Sun 11 May 2025 19:00:47 +0000
Manifest this update: Sun 11 May 2025 19:00:47 +0000
Manifest next update: Mon 12 May 2025 19:00:47 +0000
Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=)
2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: rR1UQn6BptQFo1MKDR+avGyEjyDwbAtLWvw58OK5sCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:a1:09:e0:0e:0e:9c:3e:98:c3:6b:3f:46:04:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: May 11 19:00:47 2025 GMT
Not After : May 12 19:00:47 2025 GMT
Subject: CN=2c1f117a75791d550389243dd5aed64b48be00ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ad:d7:58:b6:4b:e9:1f:cb:d7:56:f7:59:39:
e8:72:07:39:70:04:c5:c9:52:24:d9:b8:a9:4f:65:
c6:bc:b4:d6:bb:6d:ad:80:af:7d:dd:bc:ac:1a:7b:
d1:56:8f:95:cd:96:d1:ca:c9:61:7f:46:63:fd:f7:
25:9b:5c:94:9c:71:d9:37:2c:c6:15:63:58:b1:a1:
1c:31:80:ad:d9:22:00:02:22:17:27:fc:85:5d:c5:
4f:ff:72:fb:3c:10:8e:d0:9f:64:e0:48:2e:20:4d:
ad:f4:e1:59:05:b0:15:12:55:29:b4:50:88:39:62:
32:8d:fc:51:21:83:56:73:d8:0d:64:d3:d0:4c:c4:
d4:52:ab:66:4c:3f:b8:2d:46:8d:cb:bc:86:ce:89:
f5:ee:d2:0d:91:75:04:d9:39:e6:eb:c6:9b:9f:1a:
06:75:9e:ef:67:cc:c9:a7:6e:58:5b:f7:90:4c:b1:
b7:c3:fd:4a:44:d2:75:90:08:64:2b:71:48:b8:ef:
11:44:1a:05:c3:53:bb:a3:96:0b:25:30:45:fe:b7:
1f:81:6a:02:c4:e8:0a:48:8e:16:46:75:b2:c1:3d:
9e:81:6b:95:5d:c3:de:11:2f:ac:0f:e1:1f:c1:77:
24:6c:85:e0:6f:04:04:d8:fa:8c:4e:2d:f0:63:d7:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1F:11:7A:75:79:1D:55:03:89:24:3D:D5:AE:D6:4B:48:BE:00:AE
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fc:c7:a3:67:13:4c:0e:ce:55:b0:c0:8a:12:10:f3:65:ea:
09:f6:5a:d0:c9:73:9f:73:27:96:f2:ee:12:7c:cf:fb:92:c8:
c0:b2:2d:cb:0e:26:f8:ad:d5:45:11:c1:17:71:86:71:b0:73:
d7:a6:08:62:4e:89:c8:dd:10:a1:ce:91:d4:7c:98:71:df:dd:
4e:a0:ff:b6:5a:92:6a:64:41:45:83:60:0d:18:3f:01:f2:ac:
40:0e:86:85:fd:c1:a6:bb:98:6d:82:a6:15:de:f1:0b:75:48:
5b:d5:ec:9a:dd:34:b0:61:d4:44:3c:63:ae:b7:8b:2a:19:44:
ea:58:18:cd:a2:79:09:77:96:88:be:9e:d4:99:2f:0a:05:72:
fc:4a:43:52:71:14:77:4c:d1:67:7c:d2:fe:fa:df:b8:c2:c5:
b3:3f:c4:9a:49:4c:3d:82:27:d3:e9:e9:93:8e:5b:a1:fe:a9:
41:24:c3:2a:18:6b:a2:28:7a:df:1a:b2:21:46:c6:24:de:01:
c3:7a:dd:55:21:b7:95:2a:69:df:34:1e:42:67:af:cd:fa:14:
59:6f:44:97:aa:e1:39:78:2a:28:bc:45:81:bc:71:e5:38:fb:
e3:0e:3c:d8:a9:11:70:0c:d5:b3:4f:86:09:76:8e:4e:1f:1d:
48:a3:07:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:59:45 2025 by rpki-client