Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File: HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier: jblCT2CG6CvJeeKJptq/Uy+77ZOmIPxRiOIk4Y3c5G0=
Subject key identifier: 49:F9:30:EF:07:44:D0:45:73:9B:32:75:B2:E0:A8:68:0E:06:71:F7
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial: 0196B8C79B96CE77A36FCED98D2BBDF6CB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number: 0C27
Signing time: Sat 10 May 2025 06:00:11 +0000
Manifest this update: Sat 10 May 2025 06:00:11 +0000
Manifest next update: Sun 11 May 2025 06:00:11 +0000
Files and hashes: 1: 8seasK16GsaOFWr-SwwyW57ek-Q.roa (hash: qX7qnakcmcX1EuhGkXbf2jHBxhoO6I07uSRi1nBbABs=)
2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: PGPcEn3Sr4Vjief5d773XCtWIKuQwWJE0T5nKNCFFlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:9b:96:ce:77:a3:6f:ce:d9:8d:2b:bd:f6:cb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Validity
Not Before: May 10 06:00:11 2025 GMT
Not After : May 11 06:00:11 2025 GMT
Subject: CN=49f930ef0744d045739b3275b2e0a8680e0671f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:a0:a8:98:d1:c1:2e:41:51:8e:96:44:29:
c0:cd:15:60:12:fd:2f:8f:0e:22:6c:d1:a4:0e:b8:
f5:1e:a1:28:36:d4:96:ee:22:d6:6b:56:e7:88:e3:
cf:2e:21:a5:cc:0c:87:ec:de:45:04:dd:cd:e8:41:
9a:89:69:0c:27:61:60:81:ef:3e:87:12:40:02:a5:
83:77:57:11:ce:cf:f8:fc:b4:b2:fd:85:29:aa:67:
8f:2a:44:44:b8:fe:58:29:d7:da:ea:78:97:08:de:
23:29:4e:6c:c6:a9:e5:4d:b7:28:d7:bd:0f:63:ba:
55:47:0a:ee:55:c6:02:8c:1a:1a:cf:22:17:7b:a7:
82:5d:e7:3a:9d:72:04:76:71:1b:9b:30:3d:83:45:
c5:79:a2:fe:72:2b:6a:08:d1:54:a9:43:f1:e6:98:
4d:64:95:3c:5a:19:de:c7:39:ad:df:b7:48:c9:ce:
f3:11:3b:b3:08:ca:99:e1:8a:9f:c9:57:82:99:22:
46:df:b6:05:4a:bb:03:c8:be:33:34:1b:c3:9a:c7:
8d:b7:81:85:e8:f1:4f:d4:a5:9d:71:61:69:6c:69:
b8:a2:6e:04:8a:c1:06:47:6f:07:81:f2:7d:ee:ce:
d6:79:f0:d7:a5:f9:57:82:13:c2:be:b7:24:83:79:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:30:EF:07:44:D0:45:73:9B:32:75:B2:E0:A8:68:0E:06:71:F7
X509v3 Authority Key Identifier:
keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:f4:f8:ca:61:ff:ea:82:4f:79:c9:fd:fb:46:3b:ac:06:3c:
29:56:c6:b9:ee:a6:b0:dd:e8:0e:1c:60:c1:e0:c2:93:0a:67:
d3:be:08:f2:a8:58:56:78:0f:61:5f:09:90:42:f7:6e:d9:a0:
30:c3:da:8c:9d:22:ce:88:7b:ed:6a:2b:ec:47:75:54:ca:0b:
61:c0:e2:36:85:71:63:96:8b:10:9d:71:db:3e:a1:94:94:5b:
84:2a:86:d1:c9:75:e4:25:5c:d3:3f:bb:2a:53:7c:d8:91:f4:
91:d1:59:38:57:b4:07:9e:df:01:d8:72:84:c7:1b:a1:65:9f:
82:4a:ac:2b:19:c2:78:fb:4f:26:ee:b4:6b:2a:a3:7c:cd:a8:
4d:91:30:d5:24:c5:92:eb:86:51:7a:ae:32:f2:13:70:9d:89:
f7:ec:14:2d:37:90:f2:a1:f0:2a:fb:93:13:90:25:c3:4c:be:
73:3c:1e:1e:07:99:81:24:b5:0a:c8:db:82:a4:f5:6e:9b:a0:
f2:5b:66:f3:75:2d:34:d4:58:a3:e3:16:b9:8e:f9:a4:4d:86:
51:ac:c2:40:dc:5a:46:9b:94:36:68:6d:04:8e:c0:64:7f:79:
7c:28:b6:ef:4b:0a:27:df:d8:22:64:04:78:70:06:46:2a:a8:
a2:72:a7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:48:46 2025 by rpki-client