Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File: HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier: HvyHuYsXKeY1b+qS/nvKvRo3yyYTu2Wsmjzjo15mCG8=
Subject key identifier: 81:99:C1:92:34:1E:E8:48:9D:F4:CB:52:C5:8D:7A:91:8C:70:99:0F
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer: /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial: 01969F3FAECF94A67EE5B8CDB4BD357D5801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number: 040F
Signing time: Mon 05 May 2025 07:01:12 +0000
Manifest this update: Mon 05 May 2025 07:01:12 +0000
Manifest next update: Tue 06 May 2025 07:01:12 +0000
Files and hashes: 1: 1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa (hash: 91Wi2oW4Wdmr3Kf24VCGVEfXWacp6jcVuiTMlTsIcZQ=)
2: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: JqmFhXPsGtaYrskFNgdJFhUh5yOka2UhW+wgmZNRVVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:ae:cf:94:a6:7e:e5:b8:cd:b4:bd:35:7d:58:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Validity
Not Before: May 5 07:01:12 2025 GMT
Not After : May 6 07:01:12 2025 GMT
Subject: CN=8199c192341ee8489df4cb52c58d7a918c70990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:19:01:fb:41:cd:c6:7a:1c:f0:7a:85:1d:
8c:37:cb:dd:82:32:ee:49:49:26:f8:77:ec:12:ce:
88:b8:fa:66:20:60:1e:53:2c:25:97:11:f6:61:d9:
b1:d2:46:52:d3:af:fe:df:12:1c:12:3b:5a:8b:80:
4e:0e:d6:99:50:0b:4e:87:ce:a8:2a:69:15:5b:6d:
bc:0c:f7:a7:7b:58:8d:3b:9d:5f:a3:2c:b7:45:d9:
d5:73:1f:2f:1a:c9:45:95:48:eb:f1:26:7b:68:d4:
3c:43:82:e0:0a:07:b0:07:2c:55:56:d2:ed:fe:9f:
99:17:24:78:a5:01:71:c3:4f:82:47:45:dd:74:c6:
99:44:a5:cc:ad:fe:31:bc:df:b6:8f:92:59:38:87:
6a:53:1d:41:29:13:29:76:20:7e:41:b1:43:91:c8:
a7:1d:3b:bd:e5:6b:09:e7:c4:91:8e:8f:41:03:f1:
c4:c7:1a:7a:0e:a5:f9:ca:f2:83:8a:93:67:89:f6:
24:d4:63:4e:49:0a:3b:6b:d8:c9:44:d7:aa:2f:7c:
e1:80:8b:37:03:9c:9c:fa:5b:42:27:24:77:ee:23:
bc:b8:71:88:1a:17:81:21:15:de:7f:6c:47:d9:34:
b6:0f:91:d0:2a:09:43:9e:70:94:a3:70:31:0f:ba:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:C1:92:34:1E:E8:48:9D:F4:CB:52:C5:8D:7A:91:8C:70:99:0F
X509v3 Authority Key Identifier:
keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b1:bd:6c:83:aa:20:9b:09:d3:48:29:71:5e:17:f0:a5:59:
d9:4e:b0:ff:33:69:e6:95:37:4e:1c:41:c1:64:97:94:0f:4c:
cd:93:03:87:cb:f1:4d:26:75:5f:20:d9:46:90:65:04:7e:bb:
bd:01:00:1a:5a:eb:3b:b4:3d:e5:b7:54:1c:94:83:2b:22:31:
87:c7:0b:1e:71:1b:d8:54:42:cd:ac:02:e3:52:6f:92:0c:35:
ac:34:b1:4a:55:0a:3e:94:05:e8:5d:31:1f:22:a4:82:cb:e3:
77:1c:a7:87:c9:57:d0:a0:74:a2:02:0c:3f:f0:e5:b2:a5:d7:
59:2e:12:e2:8a:a5:83:5e:82:09:c9:52:3b:b4:d0:a8:30:af:
1e:41:e5:65:04:cb:ab:55:41:05:2b:0e:34:98:e3:86:0d:1d:
e7:5c:a8:1a:dd:5b:32:b6:8c:d4:72:67:29:72:a6:25:d8:a0:
cf:63:a7:d5:af:b1:03:d4:c8:81:34:68:3d:2b:92:c8:c8:0a:
ae:09:c1:a6:1b:4b:bd:38:21:23:4d:16:30:35:50:94:87:9b:
81:88:af:20:fc:e0:3c:eb:46:d1:73:69:35:7d:75:7d:18:c7:
01:91:29:d5:e1:64:7e:d8:c8:6d:84:f5:60:83:62:ae:c2:9a:
1e:79:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:02:41 2025 by rpki-client