Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: oG44Ko8G0sEH7C9hOYv26ZM0yNT9JJYSiAyPGyWiruw=
Subject key identifier: FC:11:19:D5:BB:12:96:90:D6:9C:A3:A6:2D:22:69:44:5C:D7:5A:3E
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 0196A9F9B1E11BB66BB63611BD53C5DD7989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0D47
Signing time: Wed 07 May 2025 09:00:35 +0000
Manifest this update: Wed 07 May 2025 09:00:35 +0000
Manifest next update: Thu 08 May 2025 09:00:35 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: LcXNCWfyIIg9sK7wsiSqFsvpw7NvlvGGcX2ESkdXqAU=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:b1:e1:1b:b6:6b:b6:36:11:bd:53:c5:dd:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: May 7 09:00:35 2025 GMT
Not After : May 8 09:00:35 2025 GMT
Subject: CN=fc1119d5bb129690d69ca3a62d2269445cd75a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:8e:7b:f9:e0:96:25:57:73:9a:d5:1d:53:
2d:56:82:57:b7:21:41:0e:84:7b:d7:cd:1e:4e:30:
84:8f:52:9e:e3:91:92:aa:af:d6:eb:ad:47:2c:c5:
5b:8d:11:11:bf:c5:e2:7c:d3:f0:63:2e:84:0f:94:
13:c7:40:03:3e:29:31:ef:2e:6c:d5:d4:ee:e1:0e:
66:9a:7b:ee:23:33:5e:bd:f3:31:e0:f3:9a:35:7b:
bb:45:82:94:35:ca:14:83:2b:fb:a7:b7:09:8f:3a:
30:ff:d2:31:b2:89:5f:c9:f2:99:cf:6d:ae:f7:56:
63:eb:c1:5e:82:98:90:b2:12:36:02:fd:77:ff:ac:
99:e4:64:a9:da:c4:d0:ee:41:7a:5a:10:69:32:c8:
aa:e9:4f:6f:04:eb:6a:6e:6f:88:13:e1:d5:73:9b:
6d:52:ad:fb:84:57:d4:3b:62:1f:9d:44:ee:98:5f:
30:d4:5b:d6:1a:42:08:e0:88:94:0e:21:e0:af:12:
4d:3c:a8:ba:a2:d0:a4:dd:c4:90:a6:a9:fc:af:f8:
d1:52:c4:c9:2b:cf:ae:88:86:e3:00:f7:4e:65:dc:
79:b1:ed:31:d0:4b:49:de:25:1a:ab:d9:c8:19:1c:
ee:1c:87:c1:92:51:bd:25:c4:d1:a0:be:b5:b1:3c:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:11:19:D5:BB:12:96:90:D6:9C:A3:A6:2D:22:69:44:5C:D7:5A:3E
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ad:3d:e8:57:5c:c6:ac:36:ee:3c:f3:34:46:47:61:da:21:
c4:0c:6d:b6:30:65:43:4d:50:29:8a:5e:66:28:70:4e:f6:df:
94:3e:52:fc:db:d5:42:d4:8e:fe:16:2c:4c:d0:8e:1f:64:57:
97:f6:b5:9c:d3:51:7d:5d:ac:9d:39:f0:4c:7a:a9:fe:4b:83:
71:03:ae:2a:b0:c5:7c:f2:5d:d8:9b:ca:be:49:8c:6a:03:36:
c8:d0:ae:70:6a:14:03:06:ff:a3:01:19:55:7d:2a:12:4b:a7:
e7:d7:3c:db:15:61:2f:6d:71:9e:0a:66:6f:f4:11:0d:3b:fc:
f0:c8:7d:7a:fd:17:a9:28:3d:95:4d:2c:cc:f2:59:73:af:52:
48:ca:92:f8:21:01:e0:c0:2f:9c:30:df:64:7b:45:98:84:db:
79:59:a5:b8:9d:6e:d4:8a:4f:33:70:ba:78:c0:90:21:f8:14:
6b:56:e8:d5:e4:d8:22:26:23:da:20:fa:c7:9f:82:78:f0:91:
14:ad:32:e5:94:05:84:4a:3d:fe:77:df:d3:3f:c8:f8:e1:b3:
81:b5:96:4f:fb:c1:06:25:67:a0:c9:e8:19:00:05:42:85:14:
19:d5:fd:94:1c:2b:51:eb:8b:28:6a:b1:18:34:9b:65:1e:4a:
06:bf:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:51:54 2025 by rpki-client