
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
File: Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft (raw, json)
Hash identifier: X80a/GnqLqmpwCnRlzlX0DUlCnYL/Pia9M0MzsPOTW0=
Subject key identifier: 86:2B:F6:0E:68:5E:B4:12:95:A2:85:C7:04:B5:64:F7:7E:A4:A5:05
Authority key identifier: 1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
Certificate issuer: /CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Certificate serial: 0196AF56E86FA56562ED0010121831167770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
Manifest number: 143F
Signing time: Thu 08 May 2025 10:00:30 +0000
Manifest this update: Thu 08 May 2025 10:00:30 +0000
Manifest next update: Fri 09 May 2025 10:00:30 +0000
Files and hashes: 1: Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl (hash: lbVMUCvPwG/asd3/o9UjQXAA/14wZZETjMxDQMz4eWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:e8:6f:a5:65:62:ed:00:10:12:18:31:16:77:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1edc3a97f1ccaef7f1086991cf7b10a410ce1942
Validity
Not Before: May 8 10:00:30 2025 GMT
Not After : May 9 10:00:30 2025 GMT
Subject: CN=862bf60e685eb41295a285c704b564f77ea4a505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d2:09:24:e6:13:e6:40:56:89:dc:95:04:a3:
92:a4:4e:3b:c3:5a:ee:b7:ca:32:e7:14:0e:7f:97:
1a:86:49:7d:39:e1:31:60:61:56:6a:02:96:b4:53:
4c:ee:79:ba:54:06:30:c8:99:13:ae:15:6e:11:39:
74:15:b4:14:d3:3b:4e:ce:26:11:57:bf:5d:53:5d:
84:86:50:c7:0c:25:fa:e6:a6:d1:5c:59:a9:85:89:
76:a4:0e:b2:de:d6:9f:12:53:17:57:73:ec:b2:47:
8d:17:bd:e8:f2:f0:63:af:5d:4d:30:c5:e0:6f:53:
32:a4:e4:93:5d:79:9d:0f:29:23:cd:ae:0b:f6:a6:
e5:fe:bb:77:0b:70:6d:41:96:86:4c:bb:ab:32:de:
76:b3:26:60:ff:20:82:d1:af:99:a9:21:fc:5e:48:
82:1e:6e:b7:d1:0a:2f:e0:78:b4:5c:82:7a:0a:e6:
88:9a:7d:85:57:09:aa:32:b4:c5:cb:90:53:7d:51:
ea:da:21:6e:e9:1c:9d:de:70:37:12:29:d7:f6:86:
eb:f6:20:31:63:17:8c:83:4b:e1:d5:10:61:2a:59:
38:05:00:1f:4e:cb:24:e2:b7:78:3e:ee:ea:19:38:
a0:4c:2e:13:6c:8f:97:c9:5a:cf:fb:c9:54:7d:3e:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:F6:0E:68:5E:B4:12:95:A2:85:C7:04:B5:64:F7:7E:A4:A5:05
X509v3 Authority Key Identifier:
keyid:1E:DC:3A:97:F1:CC:AE:F7:F1:08:69:91:CF:7B:10:A4:10:CE:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htw6l_HMrvfxCGmRz3sQpBDOGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0d0724-55f5-4755-99c2-612651ae3eb3/1/Htw6l_HMrvfxCGmRz3sQpBDOGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:05:30:f3:a6:49:dc:da:3b:49:f4:d0:b5:33:a9:72:99:ea:
69:f8:22:3d:34:5e:30:65:6e:74:95:32:54:84:43:29:18:e8:
c6:2b:13:25:2f:48:a2:18:4c:19:8d:0b:49:83:fe:f4:95:d8:
ad:50:ea:57:bf:60:50:ab:ae:5c:55:d2:c5:2b:15:68:08:63:
96:a0:1d:1a:b9:16:00:4c:c9:3c:57:09:3f:ef:6a:9c:c8:ca:
1e:46:a3:a5:f0:02:c8:2a:31:8c:21:79:f0:c6:87:90:a6:c8:
d7:61:a2:4c:f2:2f:54:62:43:3c:e8:c5:11:c8:fd:a4:52:27:
74:dc:cd:e1:8f:cd:bf:e4:8d:2a:41:9b:bf:d4:3b:0b:ad:66:
04:01:e5:a3:f5:c4:ea:c3:d0:64:9a:28:56:58:ec:7f:4d:ce:
15:19:7c:b5:2a:63:49:18:d0:77:ec:52:bb:ba:d8:fc:d7:10:
81:f8:c4:3d:0b:ec:6c:b8:4e:b6:6b:97:1e:1a:4f:df:a8:a4:
19:2e:93:08:a4:45:17:25:11:24:32:94:5f:17:7f:b8:e3:5c:
48:c2:b9:dc:bf:c3:90:d3:a7:01:ec:e0:5b:4b:a0:06:87:1a:
e0:c6:6c:6b:02:b3:6b:11:f2:cb:8e:fa:97:5b:26:fd:aa:cf:
04:85:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:57:11 2025 by rpki-client