Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: FqqKR47vyaUOTxlBVMIjIYoO5JpZ8kIiYqkLBdvdGU0=
Subject key identifier: B2:EE:07:34:24:F3:91:AF:84:A5:80:A2:E8:EB:1F:02:18:06:06:14
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 0196BDEEBF3946539985D9B9933AD4A6918A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 1209
Signing time: Sun 11 May 2025 06:01:02 +0000
Manifest this update: Sun 11 May 2025 06:01:02 +0000
Manifest next update: Mon 12 May 2025 06:01:02 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: 465ibBQ1PMy5gxv68foSFV00zwrhjVrJ0xA6kfZDAvY=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: HiXwFWaPzRWDb6Zauf5Z5EdAs3E.roa (hash: 74lujDzOZ3dVJtH+CV4yLBEU59EeNeO0W4GkJWf9zl0=)
5: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa (hash: WKx5lXERuzuyJlW2GtZvrlS+h+sYN+rRqH+hf6H2l+Q=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:bf:39:46:53:99:85:d9:b9:93:3a:d4:a6:91:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: May 11 06:01:02 2025 GMT
Not After : May 12 06:01:02 2025 GMT
Subject: CN=b2ee073424f391af84a580a2e8eb1f0218060614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:26:5a:12:a5:2b:e2:3d:d7:fe:97:a2:d8:
61:31:38:00:2c:00:db:c5:63:3f:e2:3c:27:98:ca:
81:23:76:57:f0:b1:de:a9:ac:37:3d:00:7c:df:01:
b6:6e:72:5f:00:0d:0a:39:62:6d:9d:ad:d9:1a:66:
24:38:40:ce:1d:47:cf:f1:31:7b:2a:cb:32:3d:73:
7b:55:08:b2:fa:c9:06:19:77:28:51:4d:63:17:ee:
67:0b:15:41:8c:04:b9:25:1d:04:21:08:70:0a:7e:
37:e3:87:b2:7f:98:a6:8b:bc:c4:a0:8c:f2:22:10:
6d:ff:5c:0a:71:61:ed:ba:f3:75:b3:a1:e8:54:56:
f4:d4:98:3b:9a:1b:5d:3c:3f:ad:e9:34:8a:2b:df:
3b:04:93:c7:9e:92:cc:f0:56:6d:90:99:ee:cd:82:
64:ea:72:38:e4:3f:f4:1c:4d:4e:96:53:cb:e8:82:
69:0d:e3:eb:9b:0e:32:9e:68:64:e2:7f:ec:f1:e8:
d6:17:6c:e2:eb:af:a4:00:c2:44:f6:c9:b5:e6:63:
ca:31:0d:64:ec:ee:d2:59:06:bd:fb:2b:36:ba:0e:
95:de:8d:f2:65:57:12:44:c5:24:77:51:67:6f:62:
b3:93:fe:5b:8d:9b:07:a3:58:34:e8:1f:07:fe:be:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EE:07:34:24:F3:91:AF:84:A5:80:A2:E8:EB:1F:02:18:06:06:14
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:29:c6:27:81:e1:82:8b:ae:78:ee:25:85:52:1e:7b:4b:8e:
70:65:70:49:ab:aa:46:91:8a:6a:b8:2b:6a:13:49:37:c2:f3:
d5:b3:46:4a:24:ed:c5:61:7d:25:38:6c:3c:87:2a:76:21:2f:
8c:b4:7d:cd:ad:35:48:49:9b:e6:ae:47:c8:80:64:ed:b8:e2:
74:4d:ad:e4:7b:61:df:29:f7:fc:08:06:c8:4c:cd:34:c1:3b:
4a:60:10:ef:fb:3d:49:2d:a2:25:88:c0:dc:d3:e2:11:05:c9:
60:3a:fa:a8:9a:2b:57:66:b5:2f:c8:9e:59:fa:f6:71:5f:9a:
44:a6:71:76:2d:5a:82:6d:37:e8:f3:86:b2:b4:4a:f0:4f:6f:
8e:02:51:eb:8d:44:ff:cc:46:55:a8:82:52:8d:4a:bf:88:8f:
a4:3f:99:6c:a8:5c:9a:5a:78:65:d3:8a:82:13:0d:19:e4:a8:
b6:f6:bf:82:92:f9:ec:27:eb:4a:85:41:f8:9a:21:1e:3b:87:
4c:1c:72:42:c0:ee:d6:91:3b:ea:9c:44:fe:ac:87:1b:68:2f:
d4:57:ab:2c:67:2c:0f:7a:cc:bc:38:0f:b8:bb:7a:84:e8:ce:
de:76:b1:09:7e:d4:bb:f4:b1:15:cf:cc:f6:8c:17:03:39:9b:
58:90:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:50:09 2025 by rpki-client