Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: gUFA34JRBi7C4A5d3YRefreUPwkibMkl0Zbqgn88wlk=
Subject key identifier: E3:8E:EB:05:9D:65:8C:23:3C:82:79:1C:5A:76:3B:4F:4F:69:41:6D
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 0196A3532FBC7999EC31C683C994092BBD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1440
Signing time: Tue 06 May 2025 02:00:59 +0000
Manifest this update: Tue 06 May 2025 02:00:59 +0000
Manifest next update: Wed 07 May 2025 02:00:59 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: ysEs9PwHG9OTWFEn9ZHmvdiYgA7AM0MB+G1Mc64HC54=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:53:2f:bc:79:99:ec:31:c6:83:c9:94:09:2b:bd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: May 6 02:00:59 2025 GMT
Not After : May 7 02:00:59 2025 GMT
Subject: CN=e38eeb059d658c233c82791c5a763b4f4f69416d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:0e:d5:a3:d6:e0:a7:e2:a1:d9:c5:73:c7:
b7:d5:c0:6b:7b:ba:4a:43:41:54:78:92:ab:1b:81:
80:3b:75:ce:d1:0c:0b:b7:63:76:9a:93:c7:24:40:
9c:77:aa:e0:0d:0c:2f:5f:14:bf:32:3e:85:13:1a:
25:52:9e:b3:b4:47:1e:1b:99:62:3a:fd:bb:d2:10:
95:ed:08:1e:0d:50:6a:e8:44:45:50:3e:84:1a:7f:
73:38:2b:4f:76:e6:7c:a4:5d:68:e6:35:af:09:4a:
1b:ee:61:4e:3c:2d:25:6e:7d:45:25:ad:c5:b9:3a:
96:c2:7c:5f:35:2e:cf:14:08:78:53:36:bb:d9:e3:
9c:0f:a2:ec:f8:13:b0:75:35:fa:f8:1d:b2:b5:ec:
98:cb:a5:09:01:02:bd:44:1b:c8:b9:3a:02:9d:ce:
b6:46:79:31:be:e2:28:e8:07:bc:ca:9c:43:d4:8c:
22:a3:a8:6c:15:ba:13:6d:e8:42:8e:2c:e9:c3:07:
90:a8:80:a9:5f:4d:2b:2e:a7:f0:55:d2:ba:da:85:
01:06:ce:79:08:73:c6:7a:28:e2:62:a9:23:8c:95:
26:b7:91:59:15:85:26:e1:17:93:a7:40:b2:87:1a:
aa:a2:15:a1:1c:76:37:9d:63:87:f5:79:b2:53:e0:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:EB:05:9D:65:8C:23:3C:82:79:1C:5A:76:3B:4F:4F:69:41:6D
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c4:fd:46:e3:8b:b3:06:03:10:f7:72:a5:2d:69:c0:3b:9a:
51:4a:23:ce:99:5b:01:86:09:19:c5:d2:37:a8:36:8b:2c:58:
e1:8f:40:98:f2:be:03:db:8d:ca:a3:27:2c:a0:5e:0b:ec:67:
a9:cf:b9:21:a5:44:13:a0:38:b5:47:59:ef:6b:b0:0d:15:6b:
4b:83:84:c8:c5:40:5f:c5:30:89:2a:a8:d3:79:b8:ef:b8:89:
6f:ae:43:48:74:fc:24:ae:1f:69:89:08:bf:6c:5b:c9:f9:98:
35:49:24:45:09:d6:7f:c5:bb:41:eb:53:ca:53:9c:e7:8b:16:
b9:79:af:f5:f2:68:82:07:ff:e2:bc:e3:bd:22:c1:cd:ea:d2:
71:33:59:af:1c:14:d7:6d:78:b1:d2:35:29:f4:41:a6:fd:a0:
77:8f:c9:55:f9:69:cf:21:4d:9c:8e:b1:a3:24:2f:cd:b2:7d:
a7:f7:e0:32:87:71:fa:c6:e7:f1:22:48:c7:6b:66:c9:12:0c:
36:89:f6:d6:60:90:ba:bd:3d:26:cd:1a:92:2f:1a:dc:f4:5b:
f2:e6:57:11:e7:41:0c:1b:c2:d2:7c:1c:cb:d3:f2:72:5f:01:
1b:62:bb:5a:f3:13:64:3d:ae:2d:88:2b:96:15:8d:ed:9b:81:
b3:ad:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:14:31 2025 by rpki-client