Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: 9RC+U0CvyjDz16sMHYjQXUJWx00GJjq/WgbZ/T1LAP8=
Subject key identifier: 29:B4:AA:39:E2:FA:B6:25:85:67:37:1C:BC:B1:DF:9E:EB:5E:AC:AF
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 01969DF5EAF4366BDC04585C49F05A30481C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 01:01:01 +0000
Manifest this update: Mon 05 May 2025 01:01:01 +0000
Manifest next update: Tue 06 May 2025 01:01:01 +0000
Files and hashes: 1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: HWr2nI6l54vbxzkYqTMkScZqVj4lusK0jDn72vC6ils=)
3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=)
4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:ea:f4:36:6b:dc:04:58:5c:49:f0:5a:30:48:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: May 5 01:01:01 2025 GMT
Not After : May 6 01:01:01 2025 GMT
Subject: CN=29b4aa39e2fab6258567371cbcb1df9eeb5eacaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3f:79:32:eb:02:66:69:7c:a4:46:d4:d5:cf:
6d:01:a0:4a:25:fc:2b:da:08:7e:55:2c:2c:56:a5:
1f:b6:a7:f7:51:94:6b:dc:91:10:b5:97:84:c5:0a:
e6:7c:ca:4c:1d:78:57:8b:5d:51:1c:64:a1:c0:9e:
cb:27:66:81:d5:b7:e8:5f:eb:bb:ca:6b:b6:38:59:
db:f3:a2:56:f9:36:53:04:b5:db:91:a9:d0:d5:5d:
6b:74:9c:be:05:8d:da:e0:b0:72:67:f2:18:d9:e0:
c0:fb:9f:97:6c:c7:d9:53:e8:b2:e6:35:75:be:88:
16:27:2f:0b:39:75:95:ae:46:13:25:ad:5c:5b:31:
c1:45:3a:b7:fe:e0:29:fa:69:22:c7:6d:09:ff:c4:
cd:fd:52:50:bb:83:97:8a:5c:c0:66:04:63:ee:c7:
ad:63:98:88:45:f2:d6:ec:26:ff:0c:ea:1d:7b:60:
c5:62:3f:f0:c2:b2:98:96:ac:13:6f:c3:7a:e5:0d:
86:a4:df:23:24:22:e8:b0:35:7b:95:20:4c:64:97:
a3:23:ad:2d:46:a1:95:2a:21:dd:1b:da:d5:32:d4:
6f:22:74:6f:a2:2f:fd:6d:7a:1f:8a:4e:30:a7:93:
47:1d:8a:59:11:15:12:9c:cd:7b:a4:d0:cd:19:78:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B4:AA:39:E2:FA:B6:25:85:67:37:1C:BC:B1:DF:9E:EB:5E:AC:AF
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f6:35:eb:46:14:66:8e:14:1c:2c:50:bb:05:95:85:db:35:
95:19:7a:7a:05:3c:a8:05:de:96:31:82:7f:63:e6:da:02:50:
dd:5d:1f:da:b8:68:37:b1:5b:03:84:70:4b:ff:71:a4:3c:fe:
d6:b7:59:24:93:cc:3a:33:ff:2f:b3:27:e2:ef:b4:77:89:7f:
16:03:31:00:73:1b:6b:4a:02:b1:53:2a:fa:9c:54:f4:a9:29:
47:16:34:bc:77:a7:5b:55:f6:e9:49:11:8a:ad:93:54:77:2a:
0d:9b:84:0b:a8:f0:8f:94:ce:eb:11:e5:b7:a5:d3:fe:2f:7d:
99:73:a9:4b:82:23:a7:22:e3:3d:f2:41:7b:9c:6d:d8:a9:34:
4b:b6:1a:b9:c2:7e:da:19:4b:18:3e:3f:8c:62:94:ba:28:24:
cc:d3:18:25:8b:29:42:66:41:ce:5a:96:8a:75:d2:d8:7b:b8:
ff:9a:2a:95:ba:57:3a:15:3c:98:88:c5:fe:b5:b9:43:07:33:
b2:2a:4c:99:be:ea:81:b1:c2:50:72:8e:cd:8b:05:78:9e:17:
c8:d1:a1:92:8f:ee:06:18:ff:a2:dd:56:b3:1e:ed:95:26:7d:
bd:ea:d2:b2:79:70:ac:bc:9a:e6:0a:73:cc:bb:b8:62:e1:38:
88:4a:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:53:36 2025 by rpki-client