Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier: lwfERGuYhuA6x6MWBuViFIstAXNObTQzmXO4Hq4c/ik=
Subject key identifier: 2C:77:D4:3D:4A:C5:4A:71:FB:14:99:F4:A7:36:15:98:57:B2:90:ED
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 0196C3F0DA486A7CD793BA0C79BDDA2FBD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 10:01:03 +0000
Manifest this update: Mon 12 May 2025 10:01:03 +0000
Manifest next update: Tue 13 May 2025 10:01:03 +0000
Files and hashes: 1: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: x88SehOZfFD3wp+hnjCmfEuaVzJSgkyHoNLuYHxU3Yg=)
2: LrQvGSWjZ1_u3gVVuPLp2WxRk1k.roa (hash: ZcyQD8WEBHUW25dO4BlMcUXBz86xnVBSf9fbKGrRMB8=)
3: _reFuWE8F3Q1MCsGcykhYwVBWKM.roa (hash: O++vwJ85mD5AXwmEuMpGVw7mWSimyoQ3mta9DBkVsW4=)
4: dbWbArxAw26iNluKXUrcW4Vg-TI.roa (hash: btYEfLq8/9yx4IhA4v1IAzOkYKFAL79qzcrLbl8TnGs=)
5: t3uSAegbFXAgvcMRKArmSOOjc88.roa (hash: 4JXslF6DFYbC7wM1C83bbrfYplmPiSougkSoNLfd1xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:da:48:6a:7c:d7:93:ba:0c:79:bd:da:2f:bd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: May 12 10:01:03 2025 GMT
Not After : May 13 10:01:03 2025 GMT
Subject: CN=2c77d43d4ac54a71fb1499f4a736159857b290ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:1b:f4:17:97:38:17:9a:3d:89:9d:f6:ae:
06:ac:3f:e3:60:6a:34:88:33:c5:d6:84:52:dd:48:
cb:be:ec:66:50:e0:c9:39:0a:bc:77:ff:33:be:94:
de:d5:2f:92:0c:dd:b4:66:c9:51:96:3f:12:c1:6d:
61:11:fa:f7:44:aa:f0:46:0f:14:2f:15:99:57:27:
f1:14:f0:d6:6f:2f:01:a6:c4:29:55:17:ec:7a:9f:
82:a1:bd:46:2a:b4:20:bb:34:85:f0:ef:31:bd:27:
96:3c:28:b0:f3:9f:e1:b5:17:56:ca:fb:df:1b:5c:
44:61:33:49:f5:72:ba:5a:d5:da:cb:df:88:20:6c:
90:c6:a7:a4:fd:95:db:f1:25:c6:c3:c4:2c:f8:f7:
27:ae:af:d7:0f:55:12:d0:b4:69:7f:4b:8e:e7:77:
6f:e6:56:ce:70:34:47:ed:63:0f:f9:f7:cc:4e:a3:
70:22:8b:ff:54:f8:45:a4:fd:74:01:ce:9d:71:39:
b5:1c:b6:ec:bc:61:f9:0c:c9:04:4b:d8:6c:02:54:
87:49:53:d0:12:80:0c:ba:89:b6:2b:17:b6:ee:96:
b2:fa:3d:bc:55:45:d1:a9:ad:a0:88:e9:7c:78:eb:
44:3c:aa:a7:21:c9:ec:36:25:e5:33:57:d3:88:17:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:D4:3D:4A:C5:4A:71:FB:14:99:F4:A7:36:15:98:57:B2:90:ED
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:95:dc:0d:4f:ac:dd:39:42:ce:25:fc:6d:90:d7:57:56:12:
13:7f:1b:fe:63:bb:7f:0e:df:c0:f6:ce:81:88:c2:ab:fc:e1:
40:d9:a0:ab:b4:96:51:f5:1b:ac:1b:b9:b6:26:df:b6:58:ae:
08:a2:38:35:da:81:43:9e:24:2d:c4:1b:3a:bb:51:7d:43:dd:
37:3b:3e:e7:d9:cc:78:3b:dc:98:e4:8c:35:99:c0:0a:b5:58:
c4:a1:a8:62:be:84:a8:47:31:5d:a7:ce:04:75:77:23:e1:2e:
67:c5:ea:ba:0f:98:0d:81:8d:15:d9:68:fe:03:d5:79:53:0e:
c0:d3:7c:1d:d0:7f:d8:1c:de:74:1e:9b:34:6a:0c:fc:62:f2:
01:40:c2:3a:3f:73:3d:0f:db:d3:f3:a4:db:8b:1b:cd:ae:cf:
68:b4:a9:4b:5b:c1:a5:f7:bd:ba:60:9d:cb:3e:9e:a4:e7:9d:
9b:2d:41:27:68:6e:83:4b:cd:18:cd:c5:14:c6:be:00:78:66:
bd:13:cb:57:bb:99:45:47:95:b3:ce:35:82:a8:fb:37:5d:cf:
1a:9d:bd:04:25:18:02:25:7c:ea:8e:bd:9b:24:27:ce:19:45:
e9:a8:3e:9c:cd:9c:fb:dc:63:5c:86:de:85:99:3b:56:88:bf:
54:18:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:52:51 2025 by rpki-client