Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: rHzwS/NI+qPAVoVZ6aEQJE0ktNTQuqB4iMxd6O9wAzs=
Subject key identifier: DE:85:9F:60:75:E0:5E:E6:E6:CD:75:AC:8B:0F:51:9A:50:2D:D6:96
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 0196BCA462EADAB3EAC0EA9C6B189AA2E517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 04D7
Signing time: Sun 11 May 2025 00:00:11 +0000
Manifest this update: Sun 11 May 2025 00:00:11 +0000
Manifest next update: Mon 12 May 2025 00:00:11 +0000
Files and hashes: 1: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (hash: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: 7zyW3/hUw/n0uDaYGOs9TASNUdHxvH+7zogWv+8HYeM=)
3: qiRFgTjVRdabsTRRM1YWXUGLw64.roa (hash: lCjSoDx/oZnpAtqpweWxZW6jo+ICoZqCCQhV41u6/VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:62:ea:da:b3:ea:c0:ea:9c:6b:18:9a:a2:e5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: May 11 00:00:11 2025 GMT
Not After : May 12 00:00:11 2025 GMT
Subject: CN=de859f6075e05ee6e6cd75ac8b0f519a502dd696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:70:0a:5f:1f:23:71:94:84:94:d1:5c:db:
68:35:91:43:48:ee:12:ac:95:78:1d:bb:4e:8f:35:
59:78:04:f3:35:1a:3f:bb:cc:94:7c:43:9c:b9:f4:
cb:f6:55:5f:c4:d0:04:ee:4b:59:22:b3:1d:a3:97:
83:3f:51:93:c1:74:d8:48:8b:00:07:20:71:89:73:
d1:0d:ea:79:41:28:47:00:73:26:cb:75:83:b7:b1:
51:41:e0:4a:f1:16:bd:2a:a9:4d:ec:70:64:c0:f9:
19:a6:95:a4:ec:9a:30:da:29:af:20:03:c6:f1:8d:
03:ca:5e:50:1d:c0:7e:53:9e:55:9c:29:a1:a4:30:
06:4c:63:a1:ef:a8:31:d2:a3:8f:7a:f3:fa:fc:fd:
73:68:3a:62:79:ae:82:ef:88:87:b6:ea:0b:15:1b:
2c:97:c7:30:82:53:ab:1b:fb:96:34:da:3f:91:63:
70:cb:82:24:4e:a2:33:6a:8a:3e:c8:cc:ab:73:c6:
32:0a:32:cf:d9:d7:34:f8:15:f8:e1:c2:86:5d:40:
48:57:70:6c:f8:63:17:5f:44:c2:71:fb:21:45:b1:
49:fb:21:51:eb:fd:e5:3a:a4:4d:ca:fc:4a:d7:92:
3f:dc:db:a9:7b:4c:4b:d3:eb:29:60:fb:b7:f0:ec:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:85:9F:60:75:E0:5E:E6:E6:CD:75:AC:8B:0F:51:9A:50:2D:D6:96
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4a:51:b1:5b:e5:41:12:ec:eb:53:22:dc:ca:db:0c:78:df:
bd:37:3e:3b:08:17:2a:df:a1:bc:f8:9c:c4:7d:26:d0:6d:a8:
5f:a4:cb:32:c6:42:5e:3d:3c:7a:9e:ba:f6:b9:4f:98:78:bb:
97:88:5e:fe:92:0c:11:95:e0:5b:a9:28:c5:dd:49:c1:c5:71:
c6:7e:c2:41:2e:b1:90:9d:9a:11:b2:e9:80:c2:cc:b9:88:4b:
0f:f2:05:bd:43:fc:a3:35:cb:80:65:7d:ec:17:f7:08:ba:c1:
a6:90:06:04:ed:cc:39:0b:c7:b9:16:05:79:cc:89:68:d3:1b:
06:e5:8d:b1:31:ea:16:9d:8f:31:55:bc:ed:e4:39:68:08:34:
2d:16:c0:f2:9c:33:8e:70:b1:bd:52:f7:8b:b3:01:48:48:d4:
82:9c:71:82:50:8d:0c:f8:17:5a:51:eb:a3:8c:2e:d6:b1:1d:
0c:4d:cf:4b:b1:b3:5a:9f:06:e0:01:c8:10:ba:d6:7b:8a:c8:
9a:f3:64:ec:f8:5c:7b:4c:b8:08:74:b2:c8:a6:56:79:a6:e5:
c4:66:10:1b:eb:be:12:2e:c1:a9:46:2f:0e:dc:01:84:63:03:
cd:69:d1:a9:ed:a2:b1:ff:bd:b1:de:c5:13:53:3c:f5:d3:81:
ec:c6:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:37:36 2025 by rpki-client