Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: ygmwYmp8I3heUPvufjmYLNK9ePSOvaH8KzBsr0FUWUs=
Subject key identifier: 88:4D:A2:8C:7E:A1:F2:46:DD:A1:11:81:F7:E7:A5:90:86:A8:C1:AB
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 0196A1648450FB9A18F2A8361DE0F8419FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 1174
Signing time: Mon 05 May 2025 17:00:41 +0000
Manifest this update: Mon 05 May 2025 17:00:41 +0000
Manifest next update: Tue 06 May 2025 17:00:41 +0000
Files and hashes: 1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=)
2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: rbRs34/+i8jHd6niBOpFCgdF3v5pLbtcGLPN5W5Gmo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:84:50:fb:9a:18:f2:a8:36:1d:e0:f8:41:9f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: May 5 17:00:41 2025 GMT
Not After : May 6 17:00:41 2025 GMT
Subject: CN=884da28c7ea1f246dda11181f7e7a59086a8c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:63:6e:5f:6a:44:4a:08:9a:bd:50:9e:d7:
86:9a:56:35:35:a4:b2:79:19:1d:79:69:f3:d0:45:
d3:eb:b0:85:f4:4d:05:5e:a3:cc:34:75:94:44:bb:
ad:b1:9e:f9:85:e7:cb:da:79:6a:08:4c:df:7c:a6:
f2:e0:80:0c:bb:9a:fe:bb:1b:35:31:5a:fc:3a:09:
b9:14:9b:41:92:bc:ff:e6:40:81:8e:88:bb:b8:aa:
e3:b9:6e:46:36:15:ee:04:af:0d:71:c8:09:df:7e:
97:9f:b4:57:5c:80:98:f8:d7:ba:5a:8a:5d:64:84:
66:97:12:53:d0:c3:c3:2d:05:fd:93:74:8d:e2:fd:
a3:74:9e:2f:95:12:90:4a:6a:c4:c8:5e:fb:66:e0:
91:cc:06:a1:4e:6e:89:e1:0b:62:3a:92:9a:b2:53:
4a:f5:49:8b:b2:a9:ed:6a:7a:ed:7e:7b:5b:92:76:
c2:c2:18:91:16:81:95:52:d6:59:ca:f5:b7:0c:e7:
57:df:0a:12:6d:24:c7:89:66:3d:ed:a7:03:a2:40:
d6:98:cf:f3:d3:9e:ab:41:1a:db:f4:12:0a:e7:bf:
10:0a:af:7c:6c:87:24:3f:86:af:66:d2:b1:f6:f8:
c5:c1:f4:42:cb:02:fc:b1:25:aa:39:46:75:05:56:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:A2:8C:7E:A1:F2:46:DD:A1:11:81:F7:E7:A5:90:86:A8:C1:AB
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:16:e5:d1:a7:17:96:0f:c1:df:8b:79:59:6b:93:4c:5b:b3:
d1:7e:66:a1:70:52:d4:58:cb:3d:d7:c4:53:93:ae:63:81:6d:
36:b6:37:31:d4:d8:f2:5b:2a:88:98:35:64:90:88:21:ee:e0:
42:af:7e:f6:7c:f6:e1:3d:95:1f:f2:41:7a:fd:dc:b3:ed:a2:
4b:9e:fd:7e:c0:89:e3:3e:75:db:e6:62:0e:04:b3:17:f7:f6:
f7:31:e3:72:b6:18:9a:7e:64:e2:1a:a9:8d:af:ef:09:e7:84:
0c:df:c5:a4:d7:47:8a:1e:af:f9:fa:1e:68:5f:59:5a:f5:b3:
25:95:68:f5:f4:d5:36:5b:e2:1e:d1:a1:b0:00:a1:4e:d7:58:
e3:ee:e7:b4:77:17:52:35:a1:96:91:ec:58:21:69:96:dd:b4:
5d:cc:5b:8f:31:14:c4:a7:64:99:a3:12:d5:01:69:45:d6:6f:
bd:4e:af:ea:f0:5d:28:1b:bf:76:37:f3:c3:ee:d5:e2:11:d1:
98:fc:41:87:37:43:22:b8:b9:f4:87:2c:e1:90:64:80:e6:cc:
ae:90:fd:51:7f:ce:4b:1a:58:ec:95:8f:b5:a5:d3:fd:3d:b8:
74:3c:56:19:de:3b:c8:32:c5:a7:4c:8c:ff:80:9a:ec:4c:0f:
38:fc:41:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:22:18 2025 by rpki-client