Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json)
Hash identifier: efJIMihH4+SNcgMHDdqWngzBdGAklhPK4rtuGKpKtBQ=
Subject key identifier: A0:2E:04:23:FF:52:4F:13:1B:56:05:B0:50:C3:08:E6:B8:9F:90:D6
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 0196C1CB69F8083B74F14BB9760C021D742A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 00:00:55 +0000
Manifest this update: Mon 12 May 2025 00:00:55 +0000
Manifest next update: Tue 13 May 2025 00:00:55 +0000
Files and hashes: 1: bo9Zt5WveGJLmto-uiWetgZCX7Q.roa (hash: zzs00ivzGHR02cC1o3Qz5YlQGqmECC+fSU4iyTugi54=)
2: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: rE7UCBHJZbhlSDenh4z4lt1tOmHe6sIAn+nGozf2zYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:69:f8:08:3b:74:f1:4b:b9:76:0c:02:1d:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: May 12 00:00:55 2025 GMT
Not After : May 13 00:00:55 2025 GMT
Subject: CN=a02e0423ff524f131b5605b050c308e6b89f90d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:ba:1a:7b:f5:ee:f5:5f:b2:53:60:c3:90:
8f:d6:04:d8:ec:74:ab:68:37:2a:da:6b:0b:2c:d0:
1c:d2:ee:40:3d:4f:da:62:99:14:f8:56:55:72:e6:
c3:c6:54:fe:8c:a6:69:22:dc:5b:00:f7:23:d8:eb:
27:0c:52:cd:f2:93:f1:f0:e5:0e:7b:57:a9:56:db:
a3:a8:63:8c:46:e8:fe:98:a9:8f:71:70:f7:4c:31:
2b:30:e3:73:ad:ab:50:53:11:75:45:81:2a:f3:ef:
75:1f:7e:05:e4:d0:09:0b:2a:ba:b2:88:e1:b3:a5:
23:3d:ce:08:69:6f:de:19:ba:77:e7:84:0e:1e:0c:
38:5d:a9:35:ef:c1:fb:75:f2:7b:07:af:53:70:94:
d8:62:51:8c:ab:94:82:99:a6:29:81:41:71:1b:df:
3b:35:c4:7d:7e:21:ab:cb:93:39:21:13:fd:42:01:
fa:79:7a:1a:d3:d7:d6:76:20:5a:eb:04:ca:b0:0b:
b6:79:a4:10:0d:f7:aa:82:89:39:83:03:e1:c6:f0:
99:07:a0:93:97:b9:4e:de:fb:2d:f3:7d:76:80:19:
94:d3:56:0a:a4:92:54:5f:ee:86:c6:4c:29:11:2b:
77:1b:71:57:ac:cf:0b:41:86:6f:22:62:4e:d6:5c:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:04:23:FF:52:4F:13:1B:56:05:B0:50:C3:08:E6:B8:9F:90:D6
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f7:eb:3b:3d:d5:e4:49:0e:89:06:d0:46:d2:86:d5:e4:a5:
88:a9:c1:ec:17:32:5a:3c:e7:99:a1:35:11:51:9e:3e:67:81:
24:14:bd:3c:c6:6c:9d:00:e2:d3:1c:93:5a:40:56:38:f3:60:
5f:f3:ae:85:34:6d:a1:6d:f4:09:63:45:f0:00:ac:1f:a0:1a:
ec:a4:43:b9:8c:6b:2b:1d:3f:3b:b9:ee:29:47:2c:31:ae:c5:
13:83:30:52:60:50:f9:40:77:20:66:e2:14:60:e1:40:67:00:
df:7e:32:e3:5b:02:16:10:a8:64:ea:91:19:1e:db:46:4e:1c:
fa:15:5b:7c:bc:83:54:52:45:53:62:a4:8b:53:79:bf:a5:0c:
8f:d8:6a:44:22:9b:96:94:3a:3a:72:17:cd:27:89:86:64:61:
fd:05:f0:11:d3:1d:95:e0:6b:88:e6:94:95:af:9e:97:bf:2b:
21:cb:17:1b:6e:24:0e:5a:24:c0:ef:ae:af:3a:28:1f:10:2d:
87:59:c0:fd:f8:48:6a:95:55:4a:f7:ed:8c:3c:a9:ac:fd:21:
bd:2f:96:e5:54:da:95:df:2e:9d:2a:39:39:d1:c9:9c:bf:05:
77:fa:f6:23:e8:f4:f7:d6:5a:a8:12:5d:b3:54:68:68:79:85:
97:c8:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:41:14 2025 by rpki-client