Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json)
Hash identifier: NOxHqJrQR2sItg+gcW+Bivzd2RBJszOmWxhktYzpPGI=
Subject key identifier: 06:26:36:48:64:13:27:AE:E5:49:12:3E:41:E5:EF:AB:A6:AD:AE:D6
Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Certificate serial: 0196C201E7506B57F55A3E6AFAC0C78CD3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
Manifest number: 1222
Signing time: Mon 12 May 2025 01:00:26 +0000
Manifest this update: Mon 12 May 2025 01:00:26 +0000
Manifest next update: Tue 13 May 2025 01:00:26 +0000
Files and hashes: 1: 42BfRq7Uq2Z4S_hnedC1PWND5eY.roa (hash: SUpoA58huBIRfI1PcJohNyNQhenW9V0GmIZXcKZjs0I=)
2: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: k4uP5lrqYrWrCYQWLmfcaDjzygiYLOKmztgh40PtYlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:e7:50:6b:57:f5:5a:3e:6a:fa:c0:c7:8c:d3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e
Validity
Not Before: May 12 01:00:26 2025 GMT
Not After : May 13 01:00:26 2025 GMT
Subject: CN=06263648641327aee549123e41e5efaba6adaed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:00:11:ad:73:a5:70:78:e4:0c:7e:0f:a0:d7:
2a:0e:f1:99:04:30:49:3c:6d:a7:97:43:0a:fc:76:
47:d1:4a:c3:c8:0f:53:08:6a:0a:6b:31:a8:f1:98:
8b:06:8a:04:29:8d:08:c3:21:6e:cd:ac:51:3f:f2:
d9:ce:2e:7b:f2:5c:83:ea:c1:b9:5a:bf:73:11:e8:
69:fe:79:da:5c:a9:2b:63:4e:c8:b0:8b:5a:0a:fa:
70:30:0a:e1:fb:58:f0:42:c5:4c:31:2a:99:0c:e0:
fb:4d:10:5f:63:1c:a6:7c:fb:f9:c9:92:cc:ae:51:
bc:fb:13:53:00:8a:0a:2b:ad:9f:b7:70:7b:aa:22:
84:24:97:51:9b:24:ec:7c:7b:02:97:35:cc:88:df:
f8:e6:c5:ae:8c:33:b5:c8:50:0e:84:17:75:6b:e6:
97:f1:ba:c9:f2:b2:26:6a:0e:4c:95:70:7b:11:87:
a7:a2:6c:d3:ff:f7:53:d9:cb:d0:cc:53:25:1b:11:
6a:a3:18:be:1f:f3:b0:52:97:c4:b4:12:60:28:8c:
86:86:34:d7:a5:ff:b1:f7:71:0b:59:3d:f9:75:d9:
83:bb:c6:de:e8:bc:73:18:63:88:4d:44:39:f7:36:
83:1c:9f:e8:fa:63:e9:31:39:27:b3:3b:7b:c6:8f:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:36:48:64:13:27:AE:E5:49:12:3E:41:E5:EF:AB:A6:AD:AE:D6
X509v3 Authority Key Identifier:
keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d9:6d:9c:d0:49:6e:7a:0b:69:a9:d8:b1:0c:0f:96:fc:e5:
77:d5:b5:3e:0b:49:b2:3b:68:da:51:32:2c:e4:f3:57:08:01:
eb:91:d7:44:ab:5d:8c:2e:6c:5f:3b:ea:3b:2a:27:44:d4:18:
33:38:40:4e:45:82:a2:46:0d:2f:52:44:29:c9:e3:60:6e:f3:
cf:77:68:5d:ba:44:93:9f:d6:b2:92:56:54:fd:c6:1c:16:b8:
b2:72:5d:05:63:3c:f9:e8:ff:49:63:78:90:a4:0b:b7:b0:50:
d9:5e:86:78:7e:7d:ca:87:38:c3:98:ea:e4:2f:62:84:89:18:
b7:8c:ff:18:b2:01:8f:af:3a:1a:d2:90:d4:af:bd:ad:25:0a:
51:45:ec:2d:b3:b1:ac:af:5f:7e:6d:0d:db:d6:fd:20:80:46:
90:2e:f1:80:f1:fb:24:da:81:93:b2:85:a7:68:33:4f:09:52:
31:0e:a4:15:d4:fc:a6:3a:5b:88:06:29:fa:91:aa:b7:1d:ae:
16:40:fb:09:f0:aa:72:ba:00:6e:3c:dc:be:52:a6:b1:32:d6:
09:a2:c4:2e:bd:a1:c1:b8:d2:5f:b9:5f:3d:e1:72:68:f1:d3:
54:60:b8:c3:4d:02:35:f4:e0:2d:6f:48:50:f4:34:8d:40:61:
26:8a:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:57:08 2025 by rpki-client