Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: 0vu1K3kWLOa0xi8bA758ee3/HEIlJtIxvOyXu6Eiswg=
Subject key identifier: 02:3D:1B:F4:7D:74:0C:D8:51:AB:02:93:81:17:B1:28:6A:CE:CC:34
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 0196AFFC68642DF51C36EDFEEFD52DEEF35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 10E4
Signing time: Thu 08 May 2025 13:01:16 +0000
Manifest this update: Thu 08 May 2025 13:01:16 +0000
Manifest next update: Fri 09 May 2025 13:01:16 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=)
3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: 3U4UT26BzdFUaDJmTo000/xqNoozvJnwsvf1pH7oGYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:68:64:2d:f5:1c:36:ed:fe:ef:d5:2d:ee:f3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: May 8 13:01:16 2025 GMT
Not After : May 9 13:01:16 2025 GMT
Subject: CN=023d1bf47d740cd851ab02938117b1286acecc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:50:d2:8b:3d:2a:83:2f:b8:8b:60:af:b1:
d5:c1:c1:32:f8:34:04:51:71:b1:43:49:e0:0b:b2:
3a:a8:15:3a:d9:08:c0:de:c3:a1:cd:8f:62:1c:fd:
5e:28:73:01:71:e8:a9:65:bd:4f:96:19:c5:4f:5b:
06:49:62:7a:b2:4a:41:a8:c4:90:7b:6d:54:0f:5e:
50:04:0c:21:5d:12:46:a2:4e:ec:70:76:12:77:ef:
ab:d6:39:58:d5:67:4f:e8:ef:cd:95:82:c6:3f:2a:
96:7d:a4:ce:6c:fc:f6:90:fc:a0:93:bb:7f:0d:f9:
d6:aa:32:83:6b:c3:2b:e1:1f:ab:43:e5:b6:56:7a:
68:49:2c:b0:fb:f4:7f:5e:25:c0:24:5b:55:b6:08:
fe:1a:7b:0c:14:46:62:29:79:cd:ca:90:6d:c9:85:
6d:93:68:e8:97:53:48:5a:d2:62:40:cf:71:dd:34:
89:96:5d:a4:71:5d:0e:1a:75:7d:49:85:f8:d7:e9:
56:e9:ac:d9:6a:7c:8a:70:22:2a:87:ef:83:e3:d5:
4a:8f:d1:da:31:bb:bd:08:d5:6c:91:be:83:76:0a:
48:60:34:cd:df:11:c0:d3:3a:f2:bf:55:0a:4c:93:
ae:29:33:e2:0e:24:55:dc:c3:64:b0:02:35:77:fc:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3D:1B:F4:7D:74:0C:D8:51:AB:02:93:81:17:B1:28:6A:CE:CC:34
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:23:0c:7c:87:10:bc:b8:e8:89:b4:74:7b:0e:3c:f8:35:cd:
8d:56:dc:fa:0c:cc:47:86:ba:44:33:f1:0d:87:e6:dc:d7:4f:
af:b8:c1:28:56:3a:67:8c:f9:49:3c:f9:02:95:d1:49:90:45:
9d:73:92:93:08:27:58:33:14:92:ac:a2:b2:49:6f:99:70:a6:
1f:8e:f8:4b:6b:3c:4e:7d:07:30:05:e2:04:5d:de:a0:ca:55:
17:87:2d:41:bb:3f:c3:a3:77:4d:2e:a0:44:e6:f1:6f:f4:36:
4e:2d:1c:fa:c7:3a:a4:bf:6b:5c:aa:f6:d2:ba:c4:19:a6:7e:
77:c6:58:7b:2f:19:c0:d2:54:cf:d3:e7:30:35:ea:d4:0c:62:
06:99:60:6b:df:cb:38:f2:07:4a:cb:05:2d:d5:51:a4:60:8d:
34:54:be:b3:41:26:c8:9b:04:38:fe:e9:27:d2:0c:28:91:78:
64:8d:2a:90:b9:a5:65:15:75:89:bc:86:95:53:d9:00:62:1d:
68:0d:3a:20:24:db:42:e9:ed:e5:f1:01:4d:4f:ce:e9:a3:a2:
f0:39:41:33:cc:0a:e8:b9:ed:5f:2b:b3:03:20:40:1c:a0:72:
6d:3e:2a:e4:10:c5:ae:d0:53:c7:69:a1:47:a3:13:12:14:bf:
35:b4:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:29:06 2025 by rpki-client