Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: oiz6QmgtmuEOFJmDBzMOVJY2fX/utb3KSiqIU3iDUPM=
Subject key identifier: 5C:E2:C9:EE:A6:37:0C:88:AB:70:B7:D0:9A:01:1C:F2:8D:B0:DF:3B
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 0196C1CABC687902730FAD4DA37C99C7AB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 0947
Signing time: Mon 12 May 2025 00:00:11 +0000
Manifest this update: Mon 12 May 2025 00:00:11 +0000
Manifest next update: Tue 13 May 2025 00:00:11 +0000
Files and hashes: 1: Ihp0VP8oRNeTGrBSGwpts6D1JhE.roa (hash: Qldf3LszJ2g2XwaE6LEoxPc+aR59tijRa50IN/mT6PY=)
2: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (hash: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: 68jFEssRFE90wXRaLAdMFZRkdY+3/tQiOEsie3pbsI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:bc:68:79:02:73:0f:ad:4d:a3:7c:99:c7:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: May 12 00:00:11 2025 GMT
Not After : May 13 00:00:11 2025 GMT
Subject: CN=5ce2c9eea6370c88ab70b7d09a011cf28db0df3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:b1:41:6c:33:01:6a:d7:a5:67:9d:e1:5a:
a9:6d:16:92:a4:27:2a:ab:37:1b:e9:9b:14:96:0a:
bd:80:3d:51:c2:0e:96:73:1d:72:63:50:01:73:19:
71:56:4b:85:1c:bc:1b:31:1c:cd:5e:5d:71:c4:d0:
21:e0:35:03:fb:7f:be:3f:f3:97:f4:30:f6:e9:bd:
48:84:af:3e:68:ae:0a:36:3a:86:b7:49:2f:10:ef:
79:f1:9a:21:0f:65:6a:3a:6b:08:d6:c8:9d:88:a4:
84:cd:2c:25:ec:dd:2e:ac:7d:5a:47:2f:e1:07:70:
41:42:66:24:4d:65:1d:c2:17:d9:e6:ec:2d:e5:17:
f1:cd:2f:b3:18:04:15:3b:03:14:f5:95:48:4c:15:
a1:78:9e:77:77:b7:b7:09:52:ec:44:c8:df:8d:52:
6e:77:92:2e:77:01:c5:73:4d:8d:c7:2d:36:d7:ab:
58:f8:62:ac:78:ac:96:a6:8e:c9:b8:dd:f5:76:7d:
3c:0c:41:95:b6:04:3f:77:e7:46:6d:90:cf:a0:2e:
69:f8:e0:4f:1b:77:c4:3d:25:9f:c0:ed:e7:2f:7c:
f5:27:7d:88:75:e9:ff:71:06:eb:79:e6:14:ca:da:
30:0e:b7:bc:ef:1a:ac:d2:fe:70:ad:ce:21:29:ad:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E2:C9:EE:A6:37:0C:88:AB:70:B7:D0:9A:01:1C:F2:8D:B0:DF:3B
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:71:19:66:5e:d4:cf:46:e1:6d:a3:72:7b:82:65:2e:6d:ce:
a8:0b:1e:47:41:37:90:85:e1:e2:a8:e2:91:dd:97:5a:45:15:
41:33:33:eb:f7:82:dc:68:03:e4:c0:a9:5c:13:2d:d8:4b:ac:
d8:92:79:af:06:b6:4a:90:d2:b8:6e:a2:db:fd:8a:fb:93:c2:
f7:b2:79:46:35:6a:f1:48:02:41:c2:e9:14:af:51:5e:c9:9e:
44:3d:6f:70:d6:bc:d4:4d:c5:42:db:b7:9f:6d:3b:8f:56:85:
a4:ef:f5:5c:b2:1f:7d:f4:f4:61:2e:a2:67:a0:8f:04:85:b0:
11:7a:1c:91:44:ab:32:3a:29:d1:7a:b5:e6:0e:b4:84:89:3b:
a0:c5:f8:97:71:6f:0e:70:a8:cf:09:e2:1c:e1:27:be:4f:f2:
dd:e3:b4:8c:8c:31:1d:6f:40:b2:b4:5f:3b:91:ee:ce:80:5f:
13:78:51:04:89:f7:0c:e1:8d:2e:81:b2:05:b5:eb:b2:08:11:
97:20:ec:3a:e4:ab:4a:c4:b5:dd:9c:2e:b3:5a:83:de:8b:03:
f3:69:0b:f1:4b:e3:1e:99:fd:33:b2:11:04:e1:18:ec:79:9e:
03:14:af:c9:9c:fa:34:a0:76:98:46:33:a8:05:d3:ba:c1:70:
41:90:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:05:43 2025 by rpki-client