Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File: HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier: Ml/6JCrZk+ECoXZgteeNJXMWFoWGkcGybBh0dq9K/Eg=
Subject key identifier: B9:3C:AD:B2:7D:F5:8A:25:13:B6:D2:30:99:7F:38:2D:81:86:63:5D
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer: /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial: 01969FACE0FCB4C4A09853934D9AD95502AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number: 12B9
Signing time: Mon 05 May 2025 09:00:29 +0000
Manifest this update: Mon 05 May 2025 09:00:29 +0000
Manifest next update: Tue 06 May 2025 09:00:29 +0000
Files and hashes: 1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: AfBnPIt5j9Kq3/Xd0lxttrqQVcF8wpso8vIvCoJL9sU=)
2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:e0:fc:b4:c4:a0:98:53:93:4d:9a:d9:55:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Validity
Not Before: May 5 09:00:29 2025 GMT
Not After : May 6 09:00:29 2025 GMT
Subject: CN=b93cadb27df58a2513b6d230997f382d8186635d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:37:06:6a:c5:ce:00:79:31:0b:f0:04:94:
94:59:82:57:ff:f4:48:b5:6f:c3:83:d1:31:85:e2:
81:83:24:2e:a4:19:50:27:2f:0a:2f:07:ee:6e:db:
a3:43:03:a1:c4:b0:90:d0:1c:2a:04:2b:f0:6f:0b:
b0:20:15:cd:21:0b:c3:47:87:a1:e5:62:d7:3b:98:
7a:50:17:e4:a5:ba:05:b2:20:b6:36:dc:ae:18:7e:
3b:30:7b:5f:a0:0d:e8:82:17:fe:d7:ef:3c:8e:b5:
a0:48:e4:d2:4b:39:75:e0:13:d9:5d:2e:1d:69:02:
59:aa:35:53:5d:05:77:44:8d:13:c7:f9:04:97:03:
9f:bd:12:e5:a3:97:cd:cf:3f:42:d5:2c:db:22:53:
09:3c:f8:fd:4e:a8:f0:ed:09:ed:89:22:1e:b2:74:
f1:d7:e0:98:69:f5:cc:42:0c:2a:5a:78:27:1c:c0:
e3:53:d0:99:bd:07:bf:ef:48:d7:cb:d7:b1:52:ed:
06:0f:40:c3:16:49:d4:1d:74:45:5f:1b:a9:b9:11:
29:67:64:2b:79:97:ca:a7:8e:b6:c0:0a:44:50:43:
15:aa:63:65:52:b1:fa:43:30:85:da:68:07:79:75:
75:db:46:28:0a:18:a5:bf:3e:e7:dc:e6:95:9b:14:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3C:AD:B2:7D:F5:8A:25:13:B6:D2:30:99:7F:38:2D:81:86:63:5D
X509v3 Authority Key Identifier:
keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3a:f4:d1:24:fc:3b:8d:e7:49:43:4f:9b:2c:9d:9c:8e:f1:
13:e8:31:e5:8f:86:bb:85:e7:09:a8:18:9e:63:e2:a6:9a:60:
c9:0a:e1:e3:c4:45:f2:f1:51:bb:4c:1a:96:fe:43:ff:f8:e1:
d6:d9:2c:26:3b:98:48:c3:11:1a:ea:05:7f:ff:61:51:a2:ee:
01:29:73:24:78:66:c4:e1:99:da:ea:e2:ff:0f:b8:2e:30:78:
6b:0c:ba:1a:b8:19:23:cd:98:44:91:bc:7d:04:ec:71:d1:db:
42:39:2d:5f:93:78:9f:7a:59:70:db:30:df:5a:85:2e:21:9a:
93:be:d5:60:9e:a8:7a:92:95:a9:a9:05:5f:a6:33:53:fa:02:
40:d0:99:87:e4:7e:8b:a8:c5:1e:8b:9f:f6:39:c8:c8:e8:5c:
39:a0:57:51:13:0b:ef:9f:9a:8a:8a:c8:e4:ea:03:8f:cf:cc:
a6:58:d4:d9:0a:25:df:89:3c:f2:c7:4b:1c:62:a3:d5:47:65:
a1:03:f9:c2:c5:d9:67:69:e7:92:bb:48:78:f2:18:74:85:97:
52:77:39:fd:d9:de:21:b2:f9:84:bf:95:e4:d2:15:91:f1:8c:
95:37:60:64:9d:a3:b6:0c:b8:4e:cc:4f:2d:a5:43:ee:6a:74:
3f:e8:88:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:00:08 2025 by rpki-client