Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: uNrgdmoiy+sGMFZ0Y9uvVCEgmOG9NNr6RwG0vR7IvAY=
Subject key identifier: 09:F1:12:49:B6:91:8D:F4:99:25:42:B5:5A:28:E0:71:4A:B7:A9:7B
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 0196BCA4A138AF4FC1ADDE273083365C33AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 00:00:27 +0000
Manifest this update: Sun 11 May 2025 00:00:27 +0000
Manifest next update: Mon 12 May 2025 00:00:27 +0000
Files and hashes: 1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: E7JM5xJ2rFV33X2kgXrrPbjfJ0nfx0lbwnHv8uGSGro=)
2: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:a1:38:af:4f:c1:ad:de:27:30:83:36:5c:33:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: May 11 00:00:27 2025 GMT
Not After : May 12 00:00:27 2025 GMT
Subject: CN=09f11249b6918df4992542b55a28e0714ab7a97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:b3:fa:73:a7:79:6a:bb:d1:08:eb:0a:ee:
83:e7:47:f1:1b:a8:97:98:9b:24:00:39:4c:3f:e6:
55:7f:4c:7f:3b:2e:16:3b:aa:51:1e:9a:3d:bf:2f:
e5:12:c1:b0:7c:3f:58:db:a0:a0:e4:12:8c:65:25:
66:d6:0d:ab:f1:4a:bc:19:e5:ec:bb:f9:ac:25:fb:
bf:0c:1c:65:85:8d:98:e9:a4:cb:44:33:a8:ae:09:
11:20:20:89:86:54:46:e3:f0:69:3b:b4:6e:0e:f7:
73:8c:1c:88:80:aa:28:51:a3:c0:2b:63:ef:0b:41:
a8:4c:73:d5:aa:21:28:22:b3:56:48:7e:2a:10:65:
8c:14:32:5e:88:a7:04:58:a1:a3:07:f8:08:b0:f2:
53:21:a8:b0:93:cf:21:08:e9:d7:43:43:fc:e3:d6:
bf:63:c8:2d:31:c0:a4:56:c6:66:af:ef:38:0c:7b:
ac:b8:9c:37:b3:61:c4:20:ea:12:52:6b:54:cd:86:
f1:d7:46:1a:24:47:73:03:d3:05:4d:79:48:83:6e:
a0:31:c6:3f:5b:f4:81:6a:d9:9c:b0:46:51:84:28:
80:e9:71:2a:02:5d:6c:9c:3b:56:b0:03:20:13:af:
24:4d:95:21:ba:d8:90:84:47:5d:ce:84:e0:ee:0d:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:12:49:B6:91:8D:F4:99:25:42:B5:5A:28:E0:71:4A:B7:A9:7B
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:93:42:e1:32:50:46:e4:09:16:b4:81:e1:c6:f0:06:d3:84:
43:9f:b7:e3:fb:86:db:04:ee:8b:69:fa:3e:91:29:ea:db:5e:
10:e2:df:01:5a:8e:9c:35:a6:8b:a6:02:24:de:8d:36:75:55:
fb:86:d7:4a:9b:5e:82:bb:39:d2:d2:b5:08:9f:3a:f5:ad:e8:
55:cb:e0:c1:7d:8e:cf:a9:8d:7d:84:bc:d3:18:09:82:39:be:
ad:a3:ae:a2:d2:41:b0:e8:6d:6a:9b:29:e6:a0:25:a7:62:90:
10:e1:ca:f2:f2:f3:95:a2:bf:4b:fd:c4:9e:7a:9a:23:29:b4:
a8:8d:d6:a9:7a:25:c6:86:59:e1:ae:48:ca:f3:d3:d1:12:78:
62:1f:00:ce:10:35:e6:95:b4:96:cf:04:52:cd:d4:f1:00:66:
9d:79:1e:43:fa:34:cc:6a:06:94:15:1b:06:50:1c:39:67:4e:
eb:87:fb:83:7c:a3:5c:82:40:d4:87:ac:e2:76:da:8f:e6:9a:
d7:f8:9e:9f:96:38:9b:6d:f8:f6:37:5f:7b:7d:16:1c:f1:dc:
8f:91:b9:37:51:38:4c:4a:c7:db:f9:cb:1c:69:47:7f:2f:a8:
58:0f:2e:bf:a6:0c:b2:3d:f1:6f:62:9c:2f:1d:b2:36:18:ab:
50:cf:cd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:22:29 2025 by rpki-client