Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
File: hLuutws_HQZxY1itmi7P730hJvs.mft (raw, json)
Hash identifier: fPS691AX150bhcp8LQI8BjPgHe8D4QZE7/UDKLHMOM8=
Subject key identifier: 70:A7:55:0D:FE:A7:20:A4:83:CB:7A:D0:61:30:3B:74:5B:21:55:2C
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Certificate issuer: /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial: 0196BE5CB59A00E795BA198A5B6D2B652658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 08:01:08 +0000
Manifest this update: Sun 11 May 2025 08:01:08 +0000
Manifest next update: Mon 12 May 2025 08:01:08 +0000
Files and hashes: 1: 4OM3TuNkPVdmDzic95IjszBtoQA.roa (hash: dt9wokazgTd6EaqSSQPyaNUyIvDqSau9vaZZ+2FBCWU=)
2: 5CVIud6aSjhP35j0D8sNgUBswDg.roa (hash: UoSAXHVcQJsyf3DK5QS9wM9YzXOIKVEySwjesnB1PLY=)
3: POoeZ9JcIrFPhJTeWPU8jpK_vAc.roa (hash: ToulLGENoP/7yn7Jgz/qlwSorKjiORy0BAk4ycS9VNQ=)
4: hLuutws_HQZxY1itmi7P730hJvs.crl (hash: WPPRSzmgcok7Hc/1lhfSUiTEe48cjrJm3BMe76+cynM=)
5: tISHEAHtpJDdCS4l3Yug27J3cB4.roa (hash: MfAYQ6HspqhfS9luXY6/Ub4o3vZ2098dY5v7aRHURxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:b5:9a:00:e7:95:ba:19:8a:5b:6d:2b:65:26:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Validity
Not Before: May 11 08:01:08 2025 GMT
Not After : May 12 08:01:08 2025 GMT
Subject: CN=70a7550dfea720a483cb7ad061303b745b21552c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:d3:11:6b:50:f2:6d:df:e7:58:b3:f8:e3:
e7:ba:9c:4a:f5:17:cc:45:fd:f1:bb:56:1c:72:ac:
92:9d:a4:2a:01:dd:e1:44:77:41:ca:f4:d6:29:9d:
eb:ca:b9:e2:9c:c4:48:a8:6f:10:b5:02:02:de:33:
4c:c4:ad:75:ef:42:37:9b:8f:d7:b4:0e:6c:5d:ff:
33:43:44:9c:94:df:dc:d3:bf:d1:bd:ea:0e:1e:da:
cf:83:c3:62:cb:b4:fb:80:e2:80:bc:8d:68:48:60:
ac:6c:fa:fe:2e:46:f0:3c:11:fb:2b:15:f4:6c:04:
00:31:c0:30:f3:f7:ab:9b:7d:c9:66:03:da:50:4d:
a2:f7:5e:f3:d4:00:95:df:04:fb:2e:e4:04:87:45:
29:a5:56:be:82:75:a9:a4:ba:a1:c4:da:e6:0f:56:
d0:e0:7c:b1:ae:35:cf:78:b8:22:f5:0f:ee:ac:88:
9c:57:e9:72:13:ed:c7:82:3e:0d:9b:69:b9:80:ba:
6c:65:a7:06:a1:94:d3:05:17:a0:82:46:b2:e3:53:
db:6d:bf:fb:09:0d:4f:cb:93:4c:98:c3:95:e0:7f:
51:db:b1:9f:60:5a:41:17:21:36:f6:e7:1d:ff:a5:
f8:6c:7e:ed:39:09:38:32:ce:bb:1b:15:f1:bb:7d:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:55:0D:FE:A7:20:A4:83:CB:7A:D0:61:30:3B:74:5B:21:55:2C
X509v3 Authority Key Identifier:
keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:52:02:3d:51:a4:8d:73:a5:6d:4f:a0:3b:6c:16:c2:c7:33:
1e:2b:55:67:b1:85:b9:f1:f3:80:f8:e0:69:85:38:94:e2:be:
dc:5d:c3:16:64:a7:38:c7:a6:7f:eb:9c:47:3e:0f:cb:d5:0b:
8d:8f:0a:4e:ff:00:c9:ab:ec:72:3a:23:51:5b:75:94:9d:13:
d8:a0:a4:f4:37:38:fe:af:8f:07:26:8c:2c:8a:18:80:a3:92:
d6:cc:d3:43:09:08:49:21:6d:7c:45:43:29:76:d9:5f:84:76:
2a:8b:18:00:0e:59:44:9b:d9:b1:32:45:c9:e1:69:af:de:84:
ed:3b:9a:95:ee:cd:c6:6f:c0:95:b9:05:c7:d5:40:13:28:09:
73:ec:5d:28:ff:4f:42:31:8a:45:5b:b1:5a:dd:f6:eb:73:61:
d2:5c:da:0c:c2:77:08:53:31:b4:f3:04:e0:f5:e7:8d:da:5b:
08:9c:9f:19:4c:e0:d0:b1:26:21:7b:98:e1:f4:d6:34:fa:f7:
e9:0f:c9:87:ca:b3:29:4c:31:bc:b5:1b:0c:8d:db:dd:bd:89:
dd:d3:f0:dd:a8:23:41:f1:67:8f:7e:a9:58:15:9d:7a:13:60:
fd:27:a0:32:4f:e0:a9:ef:3b:cd:50:33:b2:48:89:2b:d7:9f:
00:d8:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:08:35 2025 by rpki-client