Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: EQs9rqUpEpch8QphJBR35AaOOf4k53cW08jPbq8eZWI=
Subject key identifier: F9:33:87:23:67:E1:23:C1:E6:2D:D4:9C:1B:C2:A6:30:99:F5:FD:55
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 0196A2405C14ED021E36237B5D5C37A58D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0186
Signing time: Mon 05 May 2025 21:00:48 +0000
Manifest this update: Mon 05 May 2025 21:00:48 +0000
Manifest next update: Tue 06 May 2025 21:00:48 +0000
Files and hashes: 1: BCpGmAAybEKlV3wOuVSBe587d6A.roa (hash: OMYJrykGqoEHSJmtTAAKG/WGPSWVW40cgEc5tVnY4H8=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: tW+1W8oQSBjYlABHw8RJdUTpoRG6UtegzaHMe65xAoY=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:5c:14:ed:02:1e:36:23:7b:5d:5c:37:a5:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: May 5 21:00:48 2025 GMT
Not After : May 6 21:00:48 2025 GMT
Subject: CN=f933872367e123c1e62dd49c1bc2a63099f5fd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:65:c5:d5:85:b5:9e:92:3a:92:5f:58:50:
fa:f1:22:95:bf:95:df:eb:3a:50:8d:be:22:fc:0b:
4f:46:b0:5e:14:e6:a3:1e:1a:c9:4b:5f:e0:01:25:
22:6b:cc:5d:28:59:40:10:1e:f5:01:96:62:f2:99:
20:0d:41:44:a8:29:96:97:2f:9c:51:70:74:ed:01:
86:96:bd:f2:f9:3f:12:1f:78:ff:9d:03:92:fa:fb:
f0:b2:3e:eb:d6:dd:02:9a:75:e2:73:99:9f:75:10:
c4:42:64:0f:14:30:f6:44:ae:06:92:42:69:61:54:
48:cb:7d:67:1e:a3:96:aa:47:87:2a:52:56:81:2d:
da:19:2f:d8:c5:cb:eb:ae:76:e1:c8:f0:84:13:61:
8e:ae:6e:b7:88:26:08:46:ed:07:ff:76:58:16:65:
2a:03:91:3c:9c:34:7d:e7:de:ce:09:ea:b2:8f:54:
08:89:7f:27:8d:df:c2:7d:91:1a:68:e3:54:22:0d:
82:a9:5b:2a:c6:ef:ef:3e:ee:46:0f:c0:d9:98:0c:
ca:4c:3d:e8:21:53:eb:2e:be:7d:71:6d:86:30:c4:
4a:b8:f9:38:e7:ad:c9:79:91:a5:9c:e3:4d:4e:e3:
be:21:0e:e3:4b:6d:e3:4a:c8:41:3d:9f:a3:7c:f4:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:33:87:23:67:E1:23:C1:E6:2D:D4:9C:1B:C2:A6:30:99:F5:FD:55
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e4:79:a7:60:84:87:1f:bb:ef:70:17:ce:40:85:fd:c0:a7:
4b:51:d1:c3:f9:4f:3d:08:b8:22:04:93:f6:11:6d:ea:07:6e:
3a:46:95:8e:c5:1b:f6:e8:15:71:3f:ce:93:a1:16:fe:6d:37:
4b:23:4e:15:ce:94:3e:bc:19:f0:2b:05:ae:be:a9:62:95:2b:
b5:e3:24:8d:1d:56:c6:5e:a8:7e:3b:a1:58:3a:86:ac:61:e7:
49:ec:0e:e0:46:a3:00:34:c2:f2:67:25:10:da:0d:78:f3:53:
c3:98:45:4e:e6:42:26:70:97:fe:82:1e:cd:de:72:ef:bd:06:
e5:95:9c:43:02:66:bb:5f:46:5e:04:5a:ea:5d:76:10:fb:e8:
44:11:43:d0:70:54:8e:4e:5f:c5:20:23:f6:bc:ea:86:f8:39:
af:24:80:97:02:7c:a5:cf:ae:26:01:ee:cd:b8:24:5b:e7:e7:
15:e3:53:08:08:df:33:ab:04:31:fb:4c:9e:55:8f:99:ac:d9:
c1:55:5f:63:56:d2:c5:f1:d1:df:dc:9f:b0:14:49:47:6a:7f:
e3:d3:16:9c:9f:be:a4:3e:5c:27:bb:c4:30:a5:2c:f0:b4:3f:
be:cd:04:1b:66:1b:1f:96:1e:93:6c:9a:c5:50:a3:e2:7d:47:
35:00:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:09:56 2025 by rpki-client