Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: gTh0KFiKGV3rPrIDFJcnnEwlz467ta4pkqjXDPcwyJo=
Subject key identifier: AF:B8:DB:96:14:16:3A:D7:C3:C4:67:63:83:45:CA:A7:4E:83:8A:4A
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 0196BA1181761B31CDD8DF12EF7A8B422F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 12:00:31 +0000
Manifest this update: Sat 10 May 2025 12:00:31 +0000
Manifest next update: Sun 11 May 2025 12:00:31 +0000
Files and hashes: 1: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (hash: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=)
2: 5ExX7PElDwhZvsqUirscS-kfnho.roa (hash: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=)
3: 80uZVWp_iWFE8vdma8FvwSsz-Uo.roa (hash: pm27AxcsLfVMm1BA5QNNe0QMO134e9SV+S+h9WFlZjs=)
4: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: GmEPB8b5PWziAv0BIjl5mZn7cSJaJF6/xiU2y6P+x9E=)
5: Mxsx50Ph9_qr5vUqU-Gjhz8TFEo.roa (hash: r/sY/VoJqmcdsNcKGmTBnZbt3tc9vj95Qx95jR+/+BY=)
6: SUGGbjb1_Jk1qcT2JM8WcjQsO3o.roa (hash: oGVNqEXP6azb1lMS8LZZ+mpr73t/MEzsv974PdYYkYc=)
7: Z1aPPPc81U2W2p-hUbb2wEiLSrc.roa (hash: 2YYRPX4gY5ODPttZebzHcbGfP4UENAWKSJvWHEPrLO0=)
8: _3NlYGtAccp6zaeP-Zhm_oVq4fE.roa (hash: 7Ai+yD0w7Uc4wl5Kdh07MB6GvX74tuDak744pWBhJkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:81:76:1b:31:cd:d8:df:12:ef:7a:8b:42:2f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: May 10 12:00:31 2025 GMT
Not After : May 11 12:00:31 2025 GMT
Subject: CN=afb8db9614163ad7c3c467638345caa74e838a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:df:51:53:e2:3b:fc:c5:15:9e:31:92:a1:
64:03:29:4b:48:41:e0:fa:da:4b:c6:43:17:59:27:
1c:f6:f8:b9:a5:e8:f1:0d:17:08:cd:64:fd:7d:af:
68:18:ec:ed:4a:f2:71:c3:9c:60:03:ee:39:51:fb:
06:80:52:12:71:af:cd:67:8b:89:36:b2:9c:5c:ba:
42:58:d7:a5:3c:3f:ca:c7:2a:cb:98:bd:e8:88:9e:
60:b9:52:41:9d:c7:bf:98:dc:80:d5:bf:d9:ff:d4:
13:66:8f:68:a8:d8:f8:27:00:6c:9a:a2:79:c7:52:
2a:78:3b:77:5a:7c:4b:06:d5:d5:fb:09:49:ae:d8:
b0:5f:8f:42:e2:c9:5c:10:74:3b:50:1f:d9:75:b6:
8f:94:45:09:68:c4:80:52:c4:70:cf:d1:89:b2:57:
e3:35:78:7c:bc:22:fc:f9:76:3d:fb:17:d8:da:9d:
2e:50:8b:3c:58:34:9f:5b:c1:5f:48:af:7b:ec:f2:
86:6c:73:d9:43:e3:e9:51:ec:49:2c:64:8f:bc:ea:
1d:d1:b2:0f:c2:2e:8f:23:f9:37:fb:f5:34:a3:29:
59:3f:da:20:6b:37:ad:70:96:40:64:c8:89:19:a3:
9c:0c:79:8a:83:28:da:42:91:60:17:d9:7a:b3:2b:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B8:DB:96:14:16:3A:D7:C3:C4:67:63:83:45:CA:A7:4E:83:8A:4A
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:66:d2:d0:ca:a7:28:c9:27:42:a8:6e:ba:82:6d:aa:97:a9:
3e:8b:f0:fd:44:dc:7a:d7:49:15:c0:3b:4f:9e:8c:18:c0:04:
75:09:99:f6:c6:d6:5b:7c:b4:b9:eb:2b:e3:d3:1d:0b:12:4a:
4f:0a:9a:80:d7:3c:2e:39:b2:7d:d9:3e:27:e2:cd:a5:74:9f:
63:18:6f:63:11:1a:6c:31:49:4d:55:37:9c:c5:56:c6:f6:84:
83:db:59:be:6e:36:d4:b9:f5:40:95:4e:6b:7f:a8:72:c7:a8:
0c:3a:17:24:ad:c0:cd:2a:57:88:a9:e8:f3:75:79:cb:a7:94:
38:81:4e:9d:34:a2:3e:b8:37:2a:f5:b1:0c:13:be:13:f7:99:
4e:fc:cf:88:82:45:ad:eb:4c:30:ef:31:94:8d:18:8f:56:52:
3e:b7:0b:1c:e1:c5:b7:db:13:a0:2c:21:20:53:63:9c:48:8f:
8e:1c:73:7a:7f:7c:ef:b7:a7:01:e2:aa:40:e3:f9:25:09:75:
4f:80:61:43:b9:c7:39:72:39:f1:97:67:32:89:9c:4d:d2:f7:
b4:92:26:5c:9e:01:a6:fb:ce:bb:30:bd:0d:a7:0e:d4:42:8a:
9b:17:18:85:b6:70:3f:74:7d:73:30:a2:af:93:89:42:b3:02:
a2:5b:1a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:45:59 2025 by rpki-client