Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: Gk9xpKPGmym4xTIjoR7AqoBOheSkEXuXMRCJVxvvwu8=
Subject key identifier: 57:CA:DF:2D:7D:E2:BB:CC:7B:C1:9A:2B:97:AC:FC:86:E6:97:8E:CE
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 0196A3527902BAEE13324EAA24C13625917B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1527
Signing time: Tue 06 May 2025 02:00:13 +0000
Manifest this update: Tue 06 May 2025 02:00:13 +0000
Manifest next update: Wed 07 May 2025 02:00:13 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: K1WFfC9/HK6UiAsdVRrtVc1mKDPXvUUA4wObkiC/RsI=)
2: UyByoYW1eGUazMnJ8I-2ncOK0hs.roa (hash: 2RQW6HeC6UJWl0PyhVUJ1Au2Gjg5MsY0s3xBfwIHAaw=)
3: vRyA1sBnGbBdfcd9RnV3r6TFptk.roa (hash: +l9+gT14Y8WjAyCtiqhfE/NWwkGANddHeME8IP4u0y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:79:02:ba:ee:13:32:4e:aa:24:c1:36:25:91:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: May 6 02:00:13 2025 GMT
Not After : May 7 02:00:13 2025 GMT
Subject: CN=57cadf2d7de2bbcc7bc19a2b97acfc86e6978ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:cb:2e:6e:73:03:aa:da:75:fa:2b:cc:2b:
0d:d7:8e:53:0b:b8:43:97:16:3a:d7:34:df:d7:b4:
cf:89:bf:c4:5c:25:29:82:d2:e1:31:6b:84:d8:91:
68:2b:7e:74:61:10:17:40:a3:a0:05:b8:ee:b1:2c:
a2:83:20:1c:56:df:e3:d8:c6:c4:12:af:8b:bb:aa:
53:f0:74:7d:94:4a:e7:fa:79:a7:67:6e:19:86:e0:
6f:9b:a9:c7:9c:b8:2a:53:e2:5a:c6:08:6b:3b:ee:
32:10:bc:ae:d9:71:31:4c:aa:92:3e:f8:a1:30:80:
2c:00:60:2e:88:9d:ea:6b:18:65:37:6f:05:04:de:
8d:d1:bc:e5:af:c1:3c:99:d2:e6:6f:45:39:9e:50:
9b:d2:56:fa:47:a4:ab:90:32:3e:a4:bc:9a:a5:d0:
f7:a3:d8:97:47:8f:db:fa:ac:36:cd:7d:a8:6e:5b:
7b:c1:e1:97:71:74:2b:e6:81:b8:c1:20:e5:bc:b2:
e2:5b:a8:9a:56:8f:13:ca:5e:de:1c:9d:b7:e6:20:
be:f8:a2:fa:1b:a2:6c:77:a5:1b:8b:66:4d:6e:6c:
72:b4:f6:ce:15:52:70:d2:14:54:83:2c:80:27:ff:
2d:60:bc:ba:c0:35:78:a4:1a:e3:29:c1:88:84:ec:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CA:DF:2D:7D:E2:BB:CC:7B:C1:9A:2B:97:AC:FC:86:E6:97:8E:CE
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:62:a6:d3:be:2c:fa:96:af:cf:1d:e9:c4:72:1e:80:4d:25:
b8:2b:7b:e6:e3:40:7c:e7:5f:74:65:0c:6b:db:ad:b5:25:2d:
e4:d1:5b:4f:d0:c4:1b:dc:bb:87:eb:de:5e:74:c6:a1:b8:eb:
2b:22:85:a9:9f:3a:e9:45:7f:c6:88:e3:0d:a8:a3:ea:25:00:
12:6f:5c:cc:05:67:96:30:89:38:0c:8f:b8:40:b2:6c:51:b6:
c8:d3:7c:d2:7d:06:2f:6b:f8:dc:78:f2:a7:bf:47:35:62:f6:
ed:39:8f:3b:23:9c:47:35:23:94:86:90:32:3b:85:b9:0a:72:
51:79:43:94:18:16:4a:9d:01:30:ba:61:ca:69:2b:92:d6:b8:
41:9e:8f:f6:e8:c7:55:9a:cf:5b:71:d0:9c:01:0d:0e:12:fd:
53:5b:47:e0:f0:91:56:5b:58:e5:a6:18:0c:e7:a0:ea:d9:4a:
a9:86:7f:4d:2e:5d:14:a3:9e:5c:fa:f1:e0:06:10:a8:07:0a:
b5:85:a5:11:3d:89:91:e3:85:2f:51:4d:13:8c:96:00:8b:8a:
e0:7a:7d:18:f9:f9:57:bb:35:21:ec:c3:8b:54:09:f7:a3:9b:
12:f8:e6:44:e3:f1:d3:be:18:bf:8c:c0:8d:c7:9d:b7:b5:29:
09:80:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:30:46 2025 by rpki-client