Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier: UpaCS5W02X+yEbIAQzzp5F0IvN+RV9p3K0woig1BGJM=
Subject key identifier: A0:A0:26:17:72:46:20:3E:C0:68:C7:5B:1B:BE:F2:BC:F4:69:F3:2D
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 0196C5DEC7DCEBA6814ED8FEBBD818CBDC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number: 0939
Signing time: Mon 12 May 2025 19:00:33 +0000
Manifest this update: Mon 12 May 2025 19:00:33 +0000
Manifest next update: Tue 13 May 2025 19:00:33 +0000
Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: esTQNfLqXs0TSb8yVUQXm1/7J7An4IKBcIVCQ2VenIA=)
2: bS6FP0-RWfuMzsBRZquHdjUbynI.roa (hash: kkw9ceZnHPEpX3rLpD2wmL4u+vt4FdSYPPqT4A+84KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:c7:dc:eb:a6:81:4e:d8:fe:bb:d8:18:cb:dc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: May 12 19:00:33 2025 GMT
Not After : May 13 19:00:33 2025 GMT
Subject: CN=a0a026177246203ec068c75b1bbef2bcf469f32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:e3:e6:60:cc:4b:56:d2:0e:47:4c:36:77:
40:2e:ee:6b:3e:88:e8:85:29:56:99:14:82:b9:90:
62:54:5c:73:76:a0:63:00:09:6b:d7:d2:45:72:83:
4a:5d:88:3e:a4:e0:46:09:b0:51:9c:22:0b:26:1e:
45:fc:e6:cc:4f:63:b0:fc:67:52:15:27:21:33:cc:
72:71:1c:ba:60:8a:12:3a:a7:82:4e:1d:ff:e5:7a:
2a:6b:61:34:44:8a:6e:81:56:b0:ce:ee:ef:19:27:
ea:e7:a4:a4:8c:02:68:3b:80:67:ac:7f:8d:8a:d2:
03:fd:78:32:e0:5f:c9:63:0d:60:28:c3:a8:8a:94:
66:75:33:96:89:6d:6d:9f:a8:e0:e4:aa:35:f2:f7:
b8:12:ff:12:62:db:fd:1e:75:bf:14:ee:ac:26:3e:
e8:f7:42:37:a8:a5:6b:84:03:c5:fb:ae:68:72:b4:
e2:ee:fc:fd:15:5e:44:28:98:67:0e:c9:55:f2:41:
1d:ee:5b:82:fc:c0:41:5f:88:c7:fd:99:4c:b4:5d:
35:f4:03:5e:a7:82:d9:ae:3a:e5:d0:81:ef:85:72:
cf:cd:70:db:3b:0b:f5:9c:2c:f8:d3:ad:77:0d:f3:
37:04:bc:7d:68:ae:af:01:76:4b:f8:dc:cb:05:c2:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A0:26:17:72:46:20:3E:C0:68:C7:5B:1B:BE:F2:BC:F4:69:F3:2D
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:18:de:3b:d3:d6:37:e9:22:d5:cc:d7:d3:fb:cb:79:a7:6b:
7d:29:bb:dc:1d:87:13:6a:3a:95:97:4f:fa:ec:77:e4:5b:74:
48:09:d8:12:3d:c6:47:20:14:89:89:ee:9b:12:96:90:26:11:
f3:14:d0:a5:23:65:aa:9d:b0:d2:ff:1f:d6:e2:b2:32:3a:01:
77:db:cc:5e:78:1c:e9:a1:3f:9b:8e:2d:5b:50:97:13:1d:68:
5c:43:5f:dd:b2:9a:79:c6:08:a5:61:22:a4:94:cc:21:e7:03:
03:51:bd:79:f9:9e:ec:06:e0:d9:f6:2b:47:2d:3e:67:98:e6:
84:1d:00:ad:da:c8:9c:4b:a4:50:46:29:a5:11:52:7a:47:11:
e7:28:35:8c:44:eb:52:a2:7b:ac:71:e4:9c:62:b8:1a:fb:d0:
c2:ee:86:af:64:5d:1e:f6:4b:44:77:0e:27:8d:23:0f:9d:3e:
4e:dc:4f:b0:0a:2e:7e:a0:f1:ab:01:3a:20:de:ec:ca:e3:73:
b7:30:dc:3a:c3:ab:bd:f4:58:1c:bb:b5:f8:fd:a2:f6:77:1a:
fd:51:bb:4a:13:b4:03:34:b2:02:75:9d:d1:6f:b8:d4:bb:49:
10:13:24:23:d0:53:0d:68:f6:90:2c:b0:e6:e1:df:0c:0f:4f:
61:4d:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:34:45 2025 by rpki-client