Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: xDB/o5iKdX8lN75ETVyf1bLNX1T4bCNNCdSpEvxQyV8=
Subject key identifier: FD:08:02:05:A6:31:A0:00:42:75:F1:6A:C2:C7:99:06:FF:46:E1:38
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 0196CDCF495E2DB2650E391A78864B51EAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 035C
Signing time: Wed 14 May 2025 08:00:36 +0000
Manifest this update: Wed 14 May 2025 08:00:36 +0000
Manifest next update: Thu 15 May 2025 08:00:36 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: a6jUJj06m0NM9VDW/iwY8t4BKWNfjoeaY2FDaiIq1Dc=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:49:5e:2d:b2:65:0e:39:1a:78:86:4b:51:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: May 14 08:00:36 2025 GMT
Not After : May 15 08:00:36 2025 GMT
Subject: CN=fd080205a631a0004275f16ac2c79906ff46e138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:71:4f:e8:0d:ae:08:27:27:65:9f:79:9f:
33:9e:51:27:d3:76:a5:82:60:99:26:4e:82:18:06:
8d:e6:0d:a2:89:bd:98:18:94:76:aa:80:5f:f5:7a:
bb:25:e5:af:73:e9:9d:cd:0f:c0:44:0c:2b:a9:62:
57:cd:98:c6:0e:e1:a6:0c:d0:f6:67:cd:9e:35:41:
b2:57:a4:e5:25:2c:26:ff:c2:51:24:77:6c:af:ae:
5d:a6:bc:05:43:21:5d:a0:0f:3b:ff:17:19:c8:85:
09:8c:94:cf:71:95:18:b6:07:76:99:44:57:55:52:
53:68:d6:68:3c:66:9b:2e:e7:93:2d:7d:68:cd:46:
54:41:94:4f:1d:2a:e3:24:03:02:67:2c:8d:7c:2b:
55:a5:d1:9a:66:bd:16:4b:d5:49:28:27:6c:d2:d1:
49:8c:b3:a3:ea:17:e0:06:69:24:28:9d:71:a1:87:
40:23:5b:9e:86:97:79:63:ce:3c:14:23:5d:ed:f5:
ea:6f:c1:70:39:01:cf:65:71:77:f4:c5:67:bf:a1:
30:b5:90:18:bc:05:76:9a:f7:b5:5e:94:68:ed:66:
cc:fb:1b:d2:44:27:47:87:a3:42:03:22:de:6b:e8:
57:42:a3:1c:77:48:e6:31:b7:67:20:d9:14:2c:f6:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:02:05:A6:31:A0:00:42:75:F1:6A:C2:C7:99:06:FF:46:E1:38
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2f:d0:c6:e1:3b:18:f4:a0:c9:86:3d:1f:b2:5b:a1:3f:5f:
dc:b6:fa:41:8c:3a:56:50:65:ab:2f:9c:73:a3:b1:6e:b8:36:
61:5b:21:88:ba:f7:dc:14:95:33:67:94:bb:bb:16:73:4a:8b:
7b:a5:41:52:07:15:cb:40:c0:5d:1c:ed:fb:41:f9:b3:f2:ba:
ca:2d:d9:2a:d1:01:2f:21:e3:ea:e8:a2:51:00:a1:6d:1f:e8:
bc:b1:1a:68:04:79:8c:fc:d4:23:6d:2a:18:d3:d0:15:bb:2b:
98:e5:e1:12:fc:2c:e5:bd:2b:7a:d9:d4:e6:7a:f9:1a:a5:ef:
19:9c:6a:70:8a:ef:c9:4b:52:d9:1e:a6:d8:39:a4:18:0e:e6:
66:fe:c2:fd:35:61:76:ab:20:52:77:51:23:7c:47:6d:de:56:
71:4e:bd:1e:86:8f:9d:a6:4a:73:9f:5d:22:df:03:67:17:07:
51:b2:d7:cc:9f:64:9f:31:75:00:c9:5f:be:32:82:74:d3:fd:
d4:ef:80:72:bf:fa:a4:fa:7e:b3:2d:aa:9c:33:2f:d9:fb:aa:
e4:3b:d4:05:89:f6:43:32:c6:69:f1:16:8d:7a:85:bb:76:79:
e9:38:f4:3b:7e:d2:27:4b:b6:fe:f4:8b:05:3d:eb:2f:45:83:
d9:5e:44:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:41:12 2025 by rpki-client