Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: KIEyX0lkmxi8C+rSQryRjqJAjdcq55pFt0okRWuu8Jw=
Subject key identifier: 3B:7C:90:56:37:76:D2:1D:89:B8:D4:67:5A:D8:1C:DB:D5:EE:79:01
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 0196C871B78740DF28F91A00222CC185ACE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 07:00:17 +0000
Manifest this update: Tue 13 May 2025 07:00:17 +0000
Manifest next update: Wed 14 May 2025 07:00:17 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: fiK5N0MZYW14ZVfVL7Kw4kPHXFdNbi0qULSdB9Ma2m0=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:b7:87:40:df:28:f9:1a:00:22:2c:c1:85:ac:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: May 13 07:00:17 2025 GMT
Not After : May 14 07:00:17 2025 GMT
Subject: CN=3b7c90563776d21d89b8d4675ad81cdbd5ee7901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:32:d3:9f:a4:f7:d7:ab:ce:d5:0b:50:dc:
2e:58:54:2a:cb:b1:3b:ab:c5:9b:45:e1:96:9d:cf:
50:6a:16:6d:69:fc:fa:ba:93:2a:64:c2:15:6c:bb:
aa:3c:5a:5f:93:65:20:34:f7:d0:d5:65:53:b8:0d:
ee:19:06:40:fc:cd:10:a1:b2:95:22:e4:ac:0a:52:
79:29:65:ce:89:4b:53:42:13:b3:75:8f:06:fd:b8:
43:e4:03:14:06:eb:91:61:9c:d2:11:0f:89:79:43:
c6:08:5a:dc:9b:00:bf:9b:4e:b1:6c:12:74:36:f3:
fc:68:95:7c:78:26:72:54:f8:2e:b3:58:24:c3:74:
9b:42:db:30:9d:b9:1a:6d:0d:83:07:8e:83:8c:99:
74:e0:c2:4d:fc:d3:fc:82:41:39:bf:e5:bd:93:32:
1d:e0:d1:6f:56:3f:ca:db:fb:20:ba:cf:6a:5f:73:
90:ad:a9:a4:dc:6d:c5:32:83:f9:94:89:32:8d:0a:
6d:71:59:de:f2:e8:f5:a3:b7:6b:16:a7:7f:a5:24:
b4:ec:2a:e0:e9:aa:e6:99:6a:c8:07:c2:31:71:e7:
8c:9c:6a:47:4c:7a:a9:9e:9b:13:38:4b:be:f1:04:
82:52:8b:42:6f:0b:2c:ab:02:95:7d:a3:9f:19:71:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7C:90:56:37:76:D2:1D:89:B8:D4:67:5A:D8:1C:DB:D5:EE:79:01
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9d:9d:0b:39:a2:ba:c7:74:75:f3:b0:23:97:5e:3f:70:65:
ca:b2:39:e8:a1:1b:b5:55:e0:4d:48:06:b4:72:24:26:57:c2:
53:d3:94:22:97:d7:89:8f:d9:52:91:23:21:bc:a4:6a:28:68:
2a:a4:93:fd:d4:46:5e:0d:36:df:a7:f2:6e:f1:0a:1f:e2:b3:
40:6c:f1:bd:de:39:e7:04:10:4b:09:62:f9:0e:40:42:a6:75:
bb:84:6e:a4:bc:71:b4:ab:c1:3b:a0:b9:57:52:dd:bb:be:df:
a5:55:2e:34:b4:f0:53:16:50:09:32:53:fa:df:3a:93:a8:82:
ff:38:32:6a:73:35:16:fb:64:25:60:1f:d8:11:90:48:ca:ea:
19:ca:b2:85:5b:7b:eb:a0:5b:b5:1b:f7:10:93:b4:d0:2f:55:
6c:f3:51:df:4d:04:d6:f7:6d:86:ee:45:93:c4:1b:22:96:6b:
06:29:a2:4f:3b:2c:46:08:0d:96:b1:d1:33:94:56:3a:fd:4d:
e1:71:40:2b:d1:ae:28:c9:d7:ed:fb:6c:05:8c:df:f0:e7:2b:
3b:fc:c0:ac:a4:d0:86:a6:0e:bb:a2:e0:2f:ce:58:02:d0:ac:
9d:73:6a:58:f9:71:df:c5:59:9e:19:39:59:11:11:60:87:51:
c8:0d:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:52:36 2025 by rpki-client