Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json)
Hash identifier: Lh9mPn2HC7KYyqDim0eHc8iMJE6nI2cX1EAfNIR2/hk=
Subject key identifier: 2B:DE:C6:5A:FD:D7:A3:F3:10:B1:66:50:E1:C6:C1:86:FE:73:E8:F7
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 0196BDB72FA37BF9FDDA3E2AA971AC9BBDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 05:00:21 +0000
Manifest this update: Sun 11 May 2025 05:00:21 +0000
Manifest next update: Mon 12 May 2025 05:00:21 +0000
Files and hashes: 1: Fxxp-LRkqvfLrMmhXHpze09Zypk.roa (hash: VeSras0PkAsQ1iWlGxVtQbCw1RAH/pLCo7L2bleBamo=)
2: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: /NDq/PgCc+UnrbTIZaNW/G4YDehd88ODuNpGx4Q/T/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:2f:a3:7b:f9:fd:da:3e:2a:a9:71:ac:9b:bd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: May 11 05:00:21 2025 GMT
Not After : May 12 05:00:21 2025 GMT
Subject: CN=2bdec65afdd7a3f310b16650e1c6c186fe73e8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:6f:f8:e5:ec:9c:18:94:c6:a1:78:bd:5c:
26:06:b8:37:83:97:2b:a6:39:af:5a:31:ff:7b:ef:
a0:94:3b:51:04:ea:67:31:46:19:3f:c0:0b:d5:8f:
65:94:33:e8:4e:5f:fe:9a:7c:46:ca:ab:fb:7e:cc:
b3:94:96:a9:d2:fa:d9:a4:c4:ae:15:dd:97:c4:02:
26:af:47:5a:8b:79:09:fe:36:c5:4d:04:ea:79:61:
f0:68:97:62:99:07:a4:45:90:70:18:7a:e7:5b:5d:
1d:a4:ce:32:5c:0f:fd:47:d0:08:57:07:e8:0a:d8:
83:48:50:15:90:c9:65:ad:45:0e:20:79:ed:9c:f8:
6a:55:bb:c2:78:16:a9:96:92:22:75:c4:25:43:a6:
61:48:9a:27:12:8b:24:a5:58:ba:72:2b:0b:0e:d4:
59:d2:f9:25:60:fe:08:5a:b0:7c:54:28:89:c9:c3:
a6:51:76:24:95:c0:3f:d1:7a:4b:a2:f8:42:47:10:
49:2d:b3:e4:87:94:5c:10:aa:81:82:ac:0b:bb:d4:
42:57:63:00:85:98:1a:ee:fb:62:76:6d:ba:20:bf:
95:97:b3:ea:72:d3:40:e9:b0:e4:16:80:d0:97:fc:
8c:ef:67:a7:ec:f3:d7:3d:f2:0a:bf:4f:39:2f:ac:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DE:C6:5A:FD:D7:A3:F3:10:B1:66:50:E1:C6:C1:86:FE:73:E8:F7
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:c0:1d:2d:45:a0:15:55:f4:99:64:9c:00:13:a5:f0:2f:
63:cd:b4:22:51:5e:72:98:25:a7:5b:68:53:27:7f:f3:47:93:
95:fb:ae:ac:aa:62:e5:85:2e:23:65:16:96:87:b1:60:fa:03:
10:43:dd:d0:a4:e8:19:23:0e:dd:5c:15:0f:28:8e:1e:ef:c6:
6d:5c:09:c5:57:51:5a:0b:0e:b9:d7:10:83:9e:93:e6:de:a7:
df:40:0e:9e:3e:0f:6b:0a:9b:24:df:d4:83:eb:3c:17:c3:1d:
ea:f1:3a:5e:6c:8e:62:8b:d5:f3:d1:9d:9e:ce:24:14:b6:99:
83:76:b0:a4:43:42:13:10:d6:27:12:38:34:f0:ec:5c:9d:90:
bd:31:b1:12:50:22:42:cb:3b:cf:21:4d:ec:9c:cf:7b:78:66:
f0:4c:75:16:3c:28:81:cc:81:ee:a8:a6:54:fe:57:eb:da:31:
a6:6a:49:f8:35:6f:7b:6d:a0:e1:c1:01:a3:25:2e:09:8a:8a:
8a:16:3a:65:74:b8:22:5f:d8:57:49:86:ae:da:a2:80:26:2d:
a5:66:5a:45:35:51:35:85:ea:53:97:b6:26:52:15:e5:06:ee:
3f:4c:02:a0:5e:1e:9d:da:e4:74:c8:04:f8:53:4c:cc:76:e6:
73:88:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:46:31 2025 by rpki-client