Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: l6m1H9h/LKkQwHlybnAhXkk9zXPq1ZJwi7yj++WmB6I=
Subject key identifier: 1D:39:58:5E:07:FD:48:A6:09:46:43:37:B0:1C:E8:95:D9:8A:59:45
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 0196C0812B1E212F667002948D0DB02455E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 150A
Signing time: Sun 11 May 2025 18:00:12 +0000
Manifest this update: Sun 11 May 2025 18:00:12 +0000
Manifest next update: Mon 12 May 2025 18:00:12 +0000
Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: 4vwiY+CkXYhGfPwuMfehTBH6H76dF1uPoF8n4WBTxOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:2b:1e:21:2f:66:70:02:94:8d:0d:b0:24:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: May 11 18:00:12 2025 GMT
Not After : May 12 18:00:12 2025 GMT
Subject: CN=1d39585e07fd48a609464337b01ce895d98a5945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:8e:14:87:d8:d4:e7:de:b8:a3:b1:b1:93:
05:c0:6a:c8:1b:eb:7e:2f:c0:38:f9:bf:c4:85:3e:
c2:69:e9:0e:ad:3b:a0:09:0c:1c:f0:56:97:02:0b:
46:4c:d2:1e:a4:86:fd:a2:5b:b8:65:c0:53:a4:17:
97:e7:64:b8:4f:ef:a4:1a:a1:a5:33:74:e3:d4:17:
6d:e9:a5:26:c9:eb:d1:c6:80:29:0b:37:ea:a7:52:
b3:5d:62:57:b1:55:e9:ca:57:97:6d:c5:91:67:88:
be:2b:19:71:5c:15:66:9e:56:6c:ac:97:16:d1:3e:
e2:a9:b2:e1:85:3f:9d:58:f0:aa:79:74:4f:98:d3:
a0:37:47:54:37:d5:b6:92:63:b7:f5:cc:2c:7d:66:
9d:8a:a9:a7:01:91:59:88:78:97:14:12:9c:6d:48:
e1:e8:b7:ce:86:0f:c0:b0:13:1c:a3:3e:3c:58:e4:
1e:b0:5c:b4:cd:10:fb:2d:a6:48:1e:12:8e:0a:e5:
89:a7:f6:b2:66:1e:a0:44:9e:2a:03:02:11:1e:61:
e7:19:f7:69:04:6b:7c:7b:d4:10:b0:3b:49:8e:05:
24:98:e8:24:d7:ff:5b:56:92:19:4d:2d:94:89:17:
00:c8:c6:3f:ce:8b:ab:e3:cd:f5:df:31:16:11:c6:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:58:5E:07:FD:48:A6:09:46:43:37:B0:1C:E8:95:D9:8A:59:45
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9e:f5:c4:fd:e3:76:2f:1f:4b:17:fe:16:c7:99:3b:e4:30:
52:d4:1d:c3:4e:51:fa:26:8c:ac:c0:ea:02:50:82:cf:2f:6f:
53:ba:81:51:c8:a5:e2:5a:e1:cc:64:56:c8:d0:11:e5:92:15:
53:96:45:74:4d:7f:c6:1d:1b:2b:25:c2:34:78:8d:91:9d:18:
5c:d8:4e:36:89:22:1b:35:a7:94:9e:dd:14:cf:58:db:f9:2f:
3a:35:5b:9d:b8:d1:b5:91:78:fa:d6:a8:4e:cc:06:ea:f4:91:
da:e0:34:e8:55:61:bf:ff:81:f3:de:dd:b2:16:14:14:a2:1a:
1b:a6:80:fa:c4:c0:41:c2:ff:47:79:4b:1b:2d:3b:84:5c:60:
9b:3c:c6:65:59:8c:9e:74:41:bb:fa:d9:61:e2:c4:31:5e:05:
b3:25:50:3d:21:50:f6:f6:d5:4a:cd:2c:cc:94:b2:d2:ed:fd:
b1:ca:27:3e:50:94:a9:de:50:76:a6:49:f4:cb:ad:de:64:74:
d6:37:c6:de:e0:06:41:84:4b:a6:e7:8a:05:21:af:fb:c8:20:
9e:25:e6:16:23:06:b7:70:76:06:f1:7c:f5:2a:54:57:6e:d1:
f5:d0:5c:a1:04:e6:0a:79:01:a2:be:e9:bc:5b:16:2f:8d:a1:
e0:e6:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:09:19 2025 by rpki-client