Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier: jWpAxmDyrgJ91YoSz6RZkeipzVzm+QSAavpSnVuT1U8=
Subject key identifier: 53:30:4B:92:18:69:D7:99:29:96:05:4B:BF:D3:F0:06:00:C8:C8:6A
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial: 0196BE25C99A8FC29C8762E7D84B9A82490E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number: 0592
Signing time: Sun 11 May 2025 07:01:09 +0000
Manifest this update: Sun 11 May 2025 07:01:09 +0000
Manifest next update: Mon 12 May 2025 07:01:09 +0000
Files and hashes: 1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=)
2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: xoMyTu9Wex5NjayhTn5OKOCrnNbC3psFe4Y96dVbS+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:c9:9a:8f:c2:9c:87:62:e7:d8:4b:9a:82:49:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
Validity
Not Before: May 11 07:01:09 2025 GMT
Not After : May 12 07:01:09 2025 GMT
Subject: CN=53304b921869d7992996054bbfd3f00600c8c86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:9f:eb:b3:c8:ad:d6:6f:ce:26:86:3e:9a:
fe:00:01:1f:9b:a3:dc:19:b5:2c:ad:ca:87:1a:a7:
fd:da:53:97:d4:4e:53:c4:34:75:ef:ec:45:13:77:
f0:c0:7c:27:84:5c:db:92:e8:47:aa:7a:9c:7c:81:
0b:21:e6:0d:b4:32:6d:c7:c3:e1:f9:5e:aa:d1:c7:
68:8f:b4:49:a0:2d:94:62:97:72:99:15:2e:c2:01:
51:62:79:ff:c7:f6:ec:02:ce:82:6e:1f:03:d6:a8:
1a:5c:94:9d:27:86:b0:ed:d0:0a:9b:f8:36:f4:1b:
6f:ba:db:29:01:90:f1:77:e8:fe:d8:b4:6d:db:be:
4a:20:3e:97:83:8d:5d:14:63:68:1d:b8:18:4a:aa:
02:ed:be:e9:29:0b:52:c7:b6:4e:8c:12:50:57:fa:
17:2e:3e:5d:18:78:ff:35:8e:8c:01:06:44:fe:87:
e7:c8:f1:76:1a:b2:8b:ac:3f:97:11:e8:df:2a:4f:
8d:ae:16:b3:17:fb:e7:a9:fd:c4:fa:0e:91:2d:ab:
8f:f6:22:76:4e:bc:be:0c:b0:94:f2:c8:6b:60:8a:
ee:63:6d:75:3a:62:e1:b1:04:73:2f:04:db:cc:55:
3b:50:14:0a:9f:18:4d:e8:54:7d:3c:f2:1c:78:21:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:30:4B:92:18:69:D7:99:29:96:05:4B:BF:D3:F0:06:00:C8:C8:6A
X509v3 Authority Key Identifier:
keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:eb:a1:98:d1:9a:6e:5b:f0:50:65:f2:8d:e1:8a:ae:4b:72:
83:1f:50:e2:47:9c:32:4b:dc:38:f2:ea:d5:a1:c5:23:2f:9d:
a3:57:55:a6:41:35:7e:64:78:90:af:ef:c8:6a:f4:da:2d:24:
df:0d:c5:66:4b:fe:17:f6:5d:ab:b6:78:8e:69:03:24:43:c2:
b8:d2:67:62:6b:97:42:9e:bf:38:3e:16:65:c5:08:aa:66:40:
6f:b0:37:09:79:98:17:53:a7:ad:42:3c:ec:82:9f:6b:86:33:
1a:7c:88:eb:89:82:31:db:45:c2:59:56:d9:4f:88:71:94:a4:
db:15:40:5d:f9:6c:81:15:76:9c:d2:d9:23:f1:82:ec:e7:c5:
f2:a4:62:da:c4:b3:b5:fe:17:c7:c6:32:f6:d9:bf:8f:20:21:
86:3a:74:76:87:e1:d2:e2:ab:8a:45:65:83:b7:de:83:63:f8:
34:89:25:bd:8c:51:97:04:77:2b:aa:b2:c9:7d:63:63:a2:33:
30:5a:34:7f:30:86:e5:30:14:23:8f:d8:17:4f:bc:56:3f:b9:
c8:6e:90:ae:ce:48:fa:ad:4a:49:ac:66:af:15:fc:ab:26:64:
bc:67:6f:92:7c:1e:42:b1:6c:f5:8a:19:29:cf:63:39:7d:0b:
ec:f8:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:46:34 2025 by rpki-client