Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier: KM3+yWdJAMszpE+ou2BzBegq3PusbhcegHXmxr91Qzs=
Subject key identifier: DD:67:F8:75:D2:61:08:94:41:57:5C:53:A4:34:D0:2E:A7:7B:F5:11
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial: 0196BECA2C042D1D5CB9FAC2C3C910D4706C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 10:00:42 +0000
Manifest this update: Sun 11 May 2025 10:00:42 +0000
Manifest next update: Mon 12 May 2025 10:00:42 +0000
Files and hashes: 1: 9V85HLFbpWnoHuwfi3uBdYCY9ZM.roa (hash: sWuFEcVAMiwExmVPdpvYCkHmeYDgX5Tn0zMIqcTEx/4=)
2: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: 0rdkMaHqXRfd8rtOuzMvZhWCpavNNYTLNJrJ3xuVHa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:2c:04:2d:1d:5c:b9:fa:c2:c3:c9:10:d4:70:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Validity
Not Before: May 11 10:00:42 2025 GMT
Not After : May 12 10:00:42 2025 GMT
Subject: CN=dd67f875d261089441575c53a434d02ea77bf511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:75:a3:5d:7a:d8:81:a7:e2:1f:2d:1b:18:36:
fd:56:53:fe:3e:13:9e:dd:e9:98:e6:f2:f3:2b:d3:
86:76:2f:0f:b8:9e:0a:9e:ad:4a:1b:4b:ee:fc:e0:
02:ae:ee:17:91:14:08:45:d0:fd:2b:d4:25:45:78:
24:bc:6b:2b:0c:04:ad:1a:54:d0:1e:29:6e:ae:72:
2b:6d:60:45:ec:7e:8a:cd:bb:20:10:42:90:c0:72:
20:17:a3:96:92:d0:3a:b2:e0:18:e3:52:ab:8f:15:
55:a8:76:30:56:27:06:eb:ce:8c:75:f1:e4:75:d9:
42:b0:07:00:9a:36:cf:b5:ec:b3:bd:61:68:9f:eb:
31:33:c8:8a:35:bb:f0:3d:6c:26:1b:91:6a:25:8a:
10:de:0a:7d:38:eb:26:53:4d:4e:71:27:85:91:a8:
d0:cf:04:d4:9c:3d:6d:ce:b6:ae:77:e6:70:3a:58:
4e:97:24:c5:6e:f9:da:28:13:f2:90:ae:09:f7:47:
56:99:f7:a7:02:87:35:55:f4:43:8f:7f:ba:61:76:
21:34:a6:f5:a6:e0:69:69:4c:7b:0b:1a:15:f5:5d:
3f:58:db:80:07:cf:d0:52:fc:d8:c3:ed:c5:e8:20:
8e:d7:c5:ba:78:3a:c9:d2:f8:2f:78:b7:c1:0a:2b:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:67:F8:75:D2:61:08:94:41:57:5C:53:A4:34:D0:2E:A7:7B:F5:11
X509v3 Authority Key Identifier:
keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a1:3f:8b:6d:b1:3c:46:00:1f:c8:55:17:f4:08:db:e4:be:
0b:41:6a:dc:21:cd:b6:f6:71:78:d6:b5:3e:95:38:97:55:4d:
2c:72:32:74:7b:ac:05:ae:1d:25:25:97:ac:d8:78:09:24:59:
b1:20:16:f4:71:18:5a:34:c2:c4:bf:54:02:ed:64:01:c5:55:
7f:7a:f1:8e:d6:3b:4a:55:ff:d7:d6:ee:e8:a7:36:a9:84:a4:
6a:ba:c3:d2:f5:ab:22:21:9e:35:56:12:68:3b:ed:19:43:da:
69:aa:4d:2d:14:15:fc:a3:db:0f:c8:a1:ab:1d:c0:d9:52:4a:
9e:fa:50:e8:00:e5:cd:2f:7c:49:ce:4f:1b:62:60:a0:74:ff:
22:ae:26:cb:6a:5e:c9:c4:5d:9e:b2:39:46:4a:21:6e:c0:97:
9b:65:da:a3:63:40:eb:7b:db:b2:26:dd:c4:17:28:a2:7a:eb:
d4:34:de:d2:b2:de:1f:21:2e:6e:c2:3e:9c:3c:8c:8c:8c:d5:
6c:b1:4a:43:5d:0c:83:30:06:b5:8c:53:6c:dc:c4:31:9a:95:
6e:1e:fb:69:2a:a0:c6:eb:6e:27:a2:ab:a7:6d:b5:41:c9:30:
99:b8:7f:31:07:e3:a7:83:ae:39:dc:08:8f:85:92:ce:a8:26:
b2:9b:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:17:20 2025 by rpki-client