Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: 0FuF3vJugDyD2lA5St/LyDu/b66pAhdcm//3ttPNE9I=
Subject key identifier: 3F:6A:EF:06:CD:90:79:C2:6A:06:22:99:98:36:3F:26:0A:05:4F:1B
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 0196BE930B5985A06C35464D40B90B73E7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 111A
Signing time: Sun 11 May 2025 09:00:29 +0000
Manifest this update: Sun 11 May 2025 09:00:29 +0000
Manifest next update: Mon 12 May 2025 09:00:29 +0000
Files and hashes: 1: 38ChC54MipQ2oUyMl9LHxJPZyGY.roa (hash: oZd7O3FQ96+P+5QZC26B+0IWiqxNL14ov/QbnFUoZaY=)
2: B5goYls2pH3yBPe0gnzIkr6hsR0.roa (hash: f7c34+lBrPKMK3sy0aiejgFRmV5sKwVWcyjFvoePLVo=)
3: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: e4g2LQjjLc529aYvuSYm5NlWEfeSM02fTd8rg+EzyfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:0b:59:85:a0:6c:35:46:4d:40:b9:0b:73:e7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: May 11 09:00:29 2025 GMT
Not After : May 12 09:00:29 2025 GMT
Subject: CN=3f6aef06cd9079c26a06229998363f260a054f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:df:46:ce:85:7a:1b:dc:a9:9f:8d:68:d3:
9a:d1:dd:2d:f7:32:50:1a:fc:98:69:7c:d9:06:1b:
d7:13:9c:53:5e:ce:2e:60:b4:2c:fa:c7:69:9e:8e:
4d:76:61:59:e8:cf:72:70:4d:e6:80:67:b8:4a:32:
cd:18:67:33:06:78:03:32:b0:e2:bd:de:7c:17:e9:
25:5e:99:ae:8d:8b:b8:20:07:ad:76:11:41:4d:c4:
a4:12:6e:4d:b0:7f:89:bd:0b:24:cd:43:3f:34:a3:
ac:00:90:8b:88:de:6b:ae:83:52:1f:8f:ff:d7:09:
17:3f:94:1c:29:7a:2c:5e:51:be:47:f7:7b:27:81:
af:6e:5e:f2:03:d0:5d:e1:14:c9:b0:7e:9b:c2:17:
4f:48:49:3c:5e:dd:10:d7:e7:17:44:99:bd:36:aa:
17:8a:cd:22:c3:31:ce:8c:4e:88:da:37:69:42:97:
5d:81:31:d6:55:cf:83:48:05:09:80:9b:f7:d3:e6:
7f:32:e4:1e:3e:2d:7d:a1:86:ce:76:25:35:66:51:
e8:f7:23:a7:10:42:41:eb:f0:d2:80:48:25:09:c5:
9d:94:3e:10:a5:43:51:08:f6:2f:ed:4b:13:20:91:
c3:e5:f2:74:2b:f2:ae:11:95:23:5e:aa:ef:71:40:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:EF:06:CD:90:79:C2:6A:06:22:99:98:36:3F:26:0A:05:4F:1B
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:87:9a:5e:44:c4:3c:33:e5:28:a9:54:1a:ea:6e:19:27:fa:
1e:30:32:c8:1f:c0:96:00:07:b6:a4:6f:9f:b5:52:e8:00:29:
5f:37:9d:39:7d:d9:3c:44:c8:99:98:b7:9f:74:41:a5:1a:02:
34:cb:86:5c:77:98:1f:f5:27:dd:e0:f6:da:af:a2:55:d2:88:
4d:74:d8:7f:f4:30:2c:39:93:6e:4f:08:0b:bd:ba:28:bd:28:
90:dd:71:e0:98:f8:a7:9a:3c:3e:fa:d4:2e:7a:36:f1:05:e4:
d4:b0:3e:c1:72:3a:f4:70:a3:a6:b8:30:9b:99:2b:39:ec:51:
b2:80:41:c1:52:59:39:39:f9:30:49:41:ae:4c:20:c8:22:cb:
5f:5b:52:23:42:b0:9e:74:b2:a0:b0:d8:aa:2e:e5:20:f6:6e:
7a:c1:45:10:74:e2:cd:7f:08:e6:8d:56:fc:44:8d:97:43:c0:
f8:f5:02:c6:b0:71:1e:4d:f6:1a:8c:74:a0:65:d7:06:c9:94:
6e:54:c9:d8:68:84:2c:e9:5d:90:ef:9f:39:71:48:b3:d4:57:
b2:63:3d:32:93:ab:24:a7:06:df:25:61:d0:1a:e7:71:e0:c4:
fd:55:00:9d:dd:25:a3:1e:19:92:3c:39:b4:f0:b4:f2:74:2e:
c3:da:01:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:24:51 2025 by rpki-client