Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: LHiWkTG554De070V/qGQeAI1FkTtA9ih2AQEvwWutHk=
Subject key identifier: 00:49:5A:8C:71:05:75:14:44:F1:57:24:A4:38:A2:58:3B:B1:4E:41
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 0196B66C2FB208533D9CA40E0DF591CF8904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 153D
Signing time: Fri 09 May 2025 19:01:05 +0000
Manifest this update: Fri 09 May 2025 19:01:05 +0000
Manifest next update: Sat 10 May 2025 19:01:05 +0000
Files and hashes: 1: AtfXci6HfqgW5bPUw4r_4peQJN8.roa (hash: bfWMisPWb7sXo+UvRMwlanirwbdgOa6DfbdcUPCEoPY=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: Ooe3bvtxtM48BehrN2w5zbQSzRFoXW7mj7SkbMfKkwA=)
3: pxXuXU58X4H8fIZKv0CDHdg-Q8M.roa (hash: eTGcg3yr4CZi8oKJSwmwrav0KbRAU7TnVL+UEFP/RYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6c:2f:b2:08:53:3d:9c:a4:0e:0d:f5:91:cf:89:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: May 9 19:01:05 2025 GMT
Not After : May 10 19:01:05 2025 GMT
Subject: CN=00495a8c7105751444f15724a438a2583bb14e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:de:f7:1f:61:61:a1:a3:7b:6f:a8:f9:7a:11:
5a:a8:44:c3:d9:8d:34:d4:7b:63:31:2a:0c:6a:0b:
57:8b:31:b6:f1:0c:cc:52:2d:7f:ea:d7:18:32:28:
1e:48:4b:e5:67:f7:2f:f5:75:1a:c4:2b:19:79:a8:
ae:31:c1:c2:87:ed:4e:05:ab:96:78:0d:a3:52:05:
33:45:c7:0b:c0:a1:c3:6b:51:19:1c:08:7a:a6:1d:
2d:ab:8f:07:e4:6f:14:ce:5e:d4:4a:66:0a:f0:73:
ae:c6:fc:9d:df:1b:8a:36:4a:fe:33:fa:6c:a5:51:
09:9a:37:fa:68:bf:42:dd:2f:5b:dc:36:4c:0c:35:
f7:6b:92:4f:61:2f:fe:dc:9f:f2:bf:f1:04:0a:58:
7f:c6:6b:d9:7c:05:2a:00:0d:32:77:e9:ff:ab:2c:
86:75:d7:bf:97:56:3b:af:fe:01:9c:94:f5:03:88:
3d:2f:60:fc:fd:2c:c3:6e:bb:cf:b5:31:cc:29:b5:
99:18:25:95:94:a7:4c:29:96:cf:25:13:55:9e:8f:
e4:66:c6:fe:fd:51:af:96:a6:53:fb:9f:7d:0b:6c:
05:20:57:a1:36:69:9b:47:57:9f:9e:74:0f:6b:d7:
7a:bc:31:8a:7e:14:01:b6:3a:bc:33:3f:70:4b:58:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:49:5A:8C:71:05:75:14:44:F1:57:24:A4:38:A2:58:3B:B1:4E:41
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4b:e2:69:3a:3e:8a:95:aa:07:18:cd:0e:de:11:01:89:3d:
49:cb:fd:e2:dd:73:b6:ac:b9:b8:75:cb:1f:35:41:45:f7:98:
fb:a6:06:33:1a:4b:53:d0:60:50:c2:3d:d8:f0:46:4a:d7:6f:
7b:59:46:81:70:27:28:33:81:c9:3c:17:d6:74:7b:96:d6:86:
c8:d4:a9:32:2f:f7:6a:a9:9f:f1:a9:8d:71:9c:e3:09:e5:62:
dc:11:85:28:28:ae:01:2a:06:00:8a:43:bb:c1:dc:ee:94:97:
60:ba:6e:ea:ed:b8:3f:c4:3e:46:20:29:18:29:52:3a:1f:2a:
a1:ce:54:16:f2:86:2b:6c:c8:05:a2:7a:ea:a2:bc:9a:d2:8c:
f7:cd:c5:14:75:40:70:95:bc:cb:f8:a2:31:1b:6e:8d:88:3f:
de:93:16:6b:05:4b:12:81:ee:4e:74:54:9a:a6:bb:5d:a9:24:
9b:aa:6e:0a:69:a1:96:61:91:c3:13:bf:0f:55:49:ef:c7:e2:
78:8a:ea:96:bc:55:6d:f3:d9:29:f8:af:d6:ec:35:a1:b2:73:
85:eb:d5:c1:1d:ec:f9:18:e6:02:19:ee:67:ba:22:47:10:cd:
ae:23:f5:bd:97:bf:1a:f7:a3:ea:d1:73:77:0d:12:a6:c5:a9:
e5:9d:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:02:36 2025 by rpki-client