Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier: r6f7gnJK/tz/pmUpS8Ir5BCUqN0BcZg2vs93shfD0lM=
Subject key identifier: 0A:E1:DE:EC:0F:B0:06:67:DC:8D:81:B5:EC:40:84:82:D7:6F:E3:22
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 0196B7B519C67586831506C01FF5D48158EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 01:00:21 +0000
Manifest this update: Sat 10 May 2025 01:00:21 +0000
Manifest next update: Sun 11 May 2025 01:00:21 +0000
Files and hashes: 1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=)
2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: tiZ8Lz8g+ayJYnE7Atu/ENEVkYtYYinGzkHGXHzGpEs=)
3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=)
4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:19:c6:75:86:83:15:06:c0:1f:f5:d4:81:58:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: May 10 01:00:21 2025 GMT
Not After : May 11 01:00:21 2025 GMT
Subject: CN=0ae1deec0fb00667dc8d81b5ec408482d76fe322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:f1:1d:cb:9e:06:72:16:14:65:cb:a4:99:
40:d5:d6:ff:b0:75:c1:ae:f4:db:5c:80:1d:92:c9:
b2:fd:f4:58:d4:f6:89:2d:ca:66:3e:c0:c5:b7:1b:
12:28:e9:37:80:95:ad:55:8a:d8:1d:08:80:fc:a9:
3f:8b:21:64:fc:c5:df:cf:7f:42:c5:b9:d6:26:50:
25:91:c6:d6:e9:0e:07:a9:9d:a4:d7:a2:a7:0d:df:
24:b9:3f:2f:35:18:4e:c2:a9:18:54:21:e8:ec:8b:
d1:d3:0c:fa:65:d5:05:4c:29:38:66:13:40:d7:6b:
61:f6:39:f7:bd:4e:27:be:38:81:a0:34:b1:e9:fc:
36:48:76:08:68:41:00:67:36:8f:71:03:5f:dc:86:
b6:46:a0:4f:5f:47:f1:6c:67:b0:7c:f6:38:3a:67:
3a:b0:9b:60:1c:c1:bd:c2:16:5e:8c:d4:12:78:20:
1f:68:92:a0:3e:2b:ba:60:a4:77:76:49:dd:85:dc:
6b:a7:da:71:84:58:cd:02:95:c3:98:a7:3a:83:0a:
e2:13:fe:bb:a9:cf:7a:78:5f:e3:1d:5d:e7:79:4c:
d8:f5:ce:39:26:8f:cd:97:b3:d2:5b:41:17:fd:74:
3c:34:4a:8f:9e:1e:57:a6:3a:8d:ce:cb:a4:bc:85:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E1:DE:EC:0F:B0:06:67:DC:8D:81:B5:EC:40:84:82:D7:6F:E3:22
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d5:d3:6c:af:0d:e5:c0:76:f7:ad:93:20:4b:87:3d:13:23:
f2:3d:4f:35:0a:33:3c:8f:46:39:c9:a8:57:b1:34:9d:a3:33:
39:8c:cd:de:34:ec:44:cc:c7:f6:9c:e5:4b:db:63:ea:54:33:
b4:73:d0:a5:62:5e:a4:2f:24:c3:5a:2f:4d:6e:29:e3:ab:8a:
c9:db:f8:8b:95:f1:f7:de:05:96:98:76:96:54:4f:f5:7e:ca:
ac:73:95:77:74:6e:33:7f:d9:61:1d:82:2e:5f:4b:1e:9d:83:
1a:d8:36:59:c4:8a:7e:5a:12:33:3e:67:72:bb:b6:60:c8:d9:
b5:d4:a4:86:ce:86:8b:4f:cf:93:1f:43:f9:3a:3f:dc:eb:74:
8f:71:77:30:58:b2:33:87:22:f7:88:d1:79:6d:23:fc:49:64:
b4:35:a2:0e:8e:f3:74:a0:e6:10:e9:66:eb:48:d5:f2:b3:25:
e1:b3:69:fc:20:37:70:f3:81:21:08:51:a2:53:d3:50:f9:33:
b6:b4:ae:a7:4f:4e:a1:e8:0d:92:f0:f8:2c:51:b8:c1:15:0d:
a1:ee:46:da:b1:03:0f:75:74:c3:25:a3:b7:b5:a2:f9:ef:9c:
00:1c:32:6d:e1:86:a7:79:6c:4c:3d:07:27:f1:d7:bf:95:7d:
fb:3a:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:21:35 2025 by rpki-client