Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: /+UMd03uAdSV2EGmOeBLFdC8i20HsUGmDaY8GNP1UK0=
Subject key identifier: 5D:B8:3D:0F:A1:3D:39:20:77:68:67:D4:3B:94:99:42:86:36:34:E6
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 0196C3B9DFA0712793326C719C59ACEB9D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 1277
Signing time: Mon 12 May 2025 09:01:00 +0000
Manifest this update: Mon 12 May 2025 09:01:00 +0000
Manifest next update: Tue 13 May 2025 09:01:00 +0000
Files and hashes: 1: 09kK1ESpBv8LiYB9wN6M6ItCuW8.roa (hash: knJCckrITclIVMheMGK5cxyj8YBBf+peiHkDGIWIF80=)
2: EqTLLrStWQ1_lYgYRBgmgDPtF_4.roa (hash: VTc+tW3JK91nfNjIEDHdLe+grDG6p0570ue39trIFTw=)
3: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=)
4: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=)
5: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: MbBJV0q+M+JyciRGl2ar0wZNsX+yISRV0ZtpzI6Ln2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:df:a0:71:27:93:32:6c:71:9c:59:ac:eb:9d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: May 12 09:01:00 2025 GMT
Not After : May 13 09:01:00 2025 GMT
Subject: CN=5db83d0fa13d3920776867d43b949942863634e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:f9:73:2f:e9:ee:1a:51:76:54:52:e7:c9:
18:46:60:b8:ad:4c:6c:73:4d:94:2a:c7:f0:1e:2e:
90:22:ee:e7:5a:f3:f3:5b:8b:8b:ad:9d:30:90:50:
59:96:c9:a7:51:5f:93:bf:31:27:2d:35:59:a3:d2:
0d:aa:a8:7a:a1:83:90:3e:1a:e3:bd:bb:1d:be:97:
3c:2d:0d:4f:fa:f4:e1:60:50:02:e8:24:b8:ff:9a:
35:51:21:ab:9f:18:71:21:9a:e9:f1:fd:64:ae:86:
1e:42:69:bb:b2:3c:3f:9b:63:25:64:ef:29:e7:fd:
47:18:7f:ca:da:c8:2a:6d:70:db:18:eb:4a:28:b4:
15:0c:a1:a4:cf:e8:f9:27:0d:6e:21:07:0d:f1:f3:
e5:a2:37:04:9d:b2:de:e4:95:fb:14:8f:f2:0f:cd:
9c:bb:ea:78:52:17:81:e6:48:80:4b:b5:b7:2f:ac:
8b:e4:eb:08:5f:51:e0:72:99:d0:3e:08:c9:21:dd:
29:a4:ac:88:6b:80:be:5e:05:58:58:87:2b:fb:e1:
ea:ac:0b:e7:7b:50:4c:31:67:b4:b7:f2:35:9c:82:
64:46:1a:54:d7:cd:0e:d3:fa:a4:a4:ea:bd:1b:fe:
fc:6b:0e:e6:31:73:16:e8:69:f0:90:5d:84:af:0a:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B8:3D:0F:A1:3D:39:20:77:68:67:D4:3B:94:99:42:86:36:34:E6
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:46:b0:50:0a:47:03:50:5f:e9:56:6a:d2:15:c1:4f:08:3f:
49:6a:43:bb:01:5f:4d:6f:c8:38:0e:c3:f2:73:e4:5e:7e:c0:
1a:72:c8:55:91:9e:0a:95:23:90:e4:ae:b9:72:8a:40:62:ef:
ae:77:c3:cf:0c:c1:69:62:a6:0a:97:bf:ef:90:61:2b:93:0a:
5e:9f:26:6d:ef:84:73:db:29:a9:cf:c4:a7:82:72:88:37:fb:
c4:47:1f:31:82:a4:b5:d0:9e:7a:a3:b6:8d:56:56:a2:7d:fe:
70:b0:c6:04:6b:06:d0:97:fa:3e:0a:2e:97:67:82:be:ea:1b:
89:0b:ef:09:e5:33:35:8e:7c:d4:6d:de:a4:29:38:57:ac:54:
65:3f:0e:1d:79:2f:f2:e4:c8:ff:cd:f9:ee:f0:70:56:07:21:
83:69:bd:65:ae:38:d4:ec:aa:04:81:6e:d7:bd:21:45:f2:a7:
ce:8e:4a:2c:0e:ea:ae:a9:f4:33:d8:4d:38:a0:05:fb:49:2a:
dc:d1:ec:f3:a6:65:ba:4e:7f:c1:ac:fd:ff:ef:93:f4:5e:8c:
28:cf:95:32:30:67:e8:99:bf:3b:25:7a:8e:9d:63:47:30:5d:
10:b1:c9:ce:46:29:11:c8:83:46:af:0f:d0:9b:ca:17:a5:90:
65:42:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:44:24 2025 by rpki-client