Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: Bcw0BH9yGZ1l4YTMQpdWOTTlIdl8Oi1vHSfabFWOHps=
Subject key identifier: 6C:86:74:0B:04:9C:16:E8:5E:C9:2D:20:85:3E:DF:AC:3B:DD:75:ED
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 0196C50317CAA5B0B4080652A09DE70AF724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 0EC6
Signing time: Mon 12 May 2025 15:00:36 +0000
Manifest this update: Mon 12 May 2025 15:00:36 +0000
Manifest next update: Tue 13 May 2025 15:00:36 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: eb+0xF/d2nmuhTdyk4odqZEsF+7UXR3gNigTGexeSfc=)
2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:17:ca:a5:b0:b4:08:06:52:a0:9d:e7:0a:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: May 12 15:00:36 2025 GMT
Not After : May 13 15:00:36 2025 GMT
Subject: CN=6c86740b049c16e85ec92d20853edfac3bdd75ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:cc:b6:16:64:83:fd:2a:f5:36:67:de:d4:
d5:34:3c:33:0f:7f:fc:a5:ca:03:08:c7:9c:5c:15:
6d:93:d4:74:02:09:d5:15:b3:b8:7c:c7:42:cb:63:
0e:2e:75:66:b4:5d:da:07:91:07:2d:3b:55:db:af:
83:d6:c1:09:d2:1b:88:38:05:f8:af:ab:c2:3c:7e:
29:b0:64:f3:18:0b:b2:dd:df:c3:80:3d:53:1a:94:
11:6b:02:e8:12:00:b7:c2:63:db:57:1f:62:51:8c:
07:d0:e7:4d:f6:57:8d:f9:65:f5:c0:41:c9:1e:6f:
b2:5e:86:b0:d0:b3:3c:70:5b:40:ce:c2:00:c4:c3:
36:c0:e2:03:65:00:a7:cc:a8:e0:21:f3:86:66:ec:
6d:58:91:67:a6:fc:b8:0b:5e:07:79:d8:3a:16:06:
52:fa:89:89:5d:f0:75:1d:c3:f9:c7:16:16:c7:f3:
65:9d:28:3c:64:cb:32:f1:b5:fb:0f:d7:0a:89:47:
c7:41:ad:91:1c:51:4f:c0:99:13:0d:26:69:cd:7b:
b4:9a:3b:4a:65:ed:6b:2c:a0:06:fc:a4:11:7d:4a:
36:6d:4c:00:e6:f2:3c:15:44:cc:f0:12:1a:1c:35:
76:19:dc:5e:2c:fb:4d:23:69:ff:55:fc:cd:ad:be:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:86:74:0B:04:9C:16:E8:5E:C9:2D:20:85:3E:DF:AC:3B:DD:75:ED
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:cd:e1:6a:cf:a8:17:50:e9:1d:0f:6c:98:29:2a:e1:7e:
d9:ad:04:c2:1c:ab:36:12:3a:f1:1f:c6:ed:f4:63:db:d3:3e:
0c:80:d5:51:a6:e7:f0:fe:d2:50:45:47:91:bd:86:a1:54:6a:
2b:74:c5:e3:73:b9:9b:28:7a:1a:29:50:dc:65:b4:db:db:a6:
6a:b9:fb:86:ab:75:e8:e2:fb:6a:a2:74:a1:6e:14:5e:8e:51:
57:44:6f:c0:82:c5:85:48:05:90:a0:f0:eb:42:01:dd:03:ae:
3a:95:b9:80:b3:49:3a:90:3a:84:2a:29:2c:3c:42:6f:34:6f:
27:bf:c0:91:21:c5:19:64:cd:c1:54:3f:c3:22:74:b0:3e:73:
c1:7a:26:87:c2:7b:48:c7:45:50:bc:08:78:e4:db:dc:38:86:
b0:7b:aa:2b:aa:6a:c6:2f:2d:06:2e:d4:53:83:06:35:ce:49:
d4:ba:66:1a:b5:5a:ac:8e:7d:03:bc:fb:f4:87:60:29:ef:18:
80:1f:be:22:ad:3a:4b:05:ad:d1:30:93:04:e3:95:88:96:28:
b1:15:83:d1:57:01:6e:fa:42:f7:3f:12:31:93:1e:8e:c2:7f:
f3:6a:94:9b:e4:d0:56:d9:2d:05:d2:fe:b5:c9:e6:cf:60:d2:
a6:a0:9f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:01:55 2025 by rpki-client