Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier: x8tdtnbrVdoRGIn+brQzYNvK+RI94N3TrhffaOkmAe8=
Subject key identifier: D4:53:2D:EB:B0:B5:73:B4:F1:A8:47:7C:1F:20:8C:C6:59:47:56:D4
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial: 0196BC37200563951AF134FB9C3EA59FFBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number: 08CB
Signing time: Sat 10 May 2025 22:00:51 +0000
Manifest this update: Sat 10 May 2025 22:00:51 +0000
Manifest next update: Sun 11 May 2025 22:00:51 +0000
Files and hashes: 1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=)
2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: 2120aifvS+IFFNj7S3EEXRduscbsCnpNe5SzwsmaLwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:20:05:63:95:1a:f1:34:fb:9c:3e:a5:9f:fb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Validity
Not Before: May 10 22:00:51 2025 GMT
Not After : May 11 22:00:51 2025 GMT
Subject: CN=d4532debb0b573b4f1a8477c1f208cc6594756d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:a8:95:31:c6:f3:22:63:eb:b4:4d:51:d1:
49:44:84:28:a4:29:6f:52:3a:4e:8b:a9:2d:6e:2e:
c3:64:24:09:d5:f8:fc:0e:a5:7b:22:7e:0b:9d:e3:
95:d0:b3:19:bd:49:1e:e5:ad:c7:a8:18:4c:75:26:
78:e6:e5:88:ef:e0:1e:4d:3d:66:80:11:47:cc:46:
29:90:90:a9:a1:fe:40:08:40:3e:8c:be:29:ef:c8:
b3:e3:b2:78:1e:64:e1:06:fa:d0:8b:80:b7:1f:04:
7d:71:41:61:3c:bf:9e:3a:9e:37:b9:95:c3:f8:64:
ab:29:6f:7c:3a:50:2d:73:6c:72:24:93:8d:9d:42:
b1:7a:8a:ab:44:f8:24:42:d3:8e:87:b4:7a:ae:f5:
da:4e:e6:85:38:4b:86:d5:1c:fc:9a:eb:fc:6c:df:
35:6b:6f:86:d6:b0:52:45:87:74:96:37:ef:60:ce:
b8:7f:85:26:69:5c:4f:70:a0:4a:2f:03:e9:68:4c:
7e:5b:45:e0:25:ba:f5:77:3d:ef:11:e4:4e:fc:c7:
6d:80:7f:36:5f:c1:c7:72:09:62:0f:dd:86:9f:b8:
08:44:2f:f5:a5:2b:ee:c8:52:24:78:ce:9e:8b:61:
85:16:9d:11:ac:ee:a5:ac:96:b2:71:d9:2b:1e:94:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:2D:EB:B0:B5:73:B4:F1:A8:47:7C:1F:20:8C:C6:59:47:56:D4
X509v3 Authority Key Identifier:
keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fc:d5:ce:f5:40:9c:f6:23:79:55:1d:38:ff:47:b0:90:c6:
79:b2:c2:ca:c2:4e:04:c7:21:3f:8c:49:62:09:8a:e3:94:65:
25:54:8f:6f:40:a1:10:07:86:9c:c5:d5:4c:fa:2a:e0:16:cc:
7a:c7:26:86:ab:08:bf:37:e6:59:3d:37:3c:42:c8:90:50:d7:
8a:b4:04:0f:8a:8b:be:f9:e3:8b:45:06:ce:38:43:97:a5:84:
90:80:00:9e:84:3f:3c:ad:ec:dc:fc:75:38:15:8e:db:d8:87:
d5:ab:89:a6:c2:2b:09:42:4b:0b:1f:3f:6d:10:89:6c:57:8d:
10:6b:2b:8d:77:f7:6a:4c:55:d5:d8:e0:95:1d:55:4f:d3:e5:
d5:62:95:61:d4:2a:c8:73:9a:a0:56:fe:85:74:22:42:5c:70:
25:d0:92:fc:c0:d9:4e:bc:97:54:8d:61:f4:e7:3d:80:45:66:
a4:9c:7a:bf:01:24:30:76:58:d5:c2:9f:e4:ae:66:2e:7e:b0:
f3:09:40:3f:c9:4c:07:4c:7b:b9:ff:1e:2b:b1:26:e6:27:80:
b1:77:66:ec:34:b5:68:bd:01:fa:98:7e:e0:49:82:84:ac:b3:
8f:ec:31:0b:e2:e5:ce:dd:34:17:17:90:c1:42:1a:9c:72:15:
4c:fc:2e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:35:38 2025 by rpki-client