
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File: HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier: 20R3wgUe/bUpgHBvosncgjEFcWAxbGjdomFpcdTY6ls=
Subject key identifier: DB:0E:EF:CF:75:56:E6:B5:36:BA:E9:03:3F:B9:16:8C:9A:D5:0D:B1
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial: 0196C3B91BDF803C970F183DB02BEAE80E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number: 14ED
Signing time: Mon 12 May 2025 09:00:10 +0000
Manifest this update: Mon 12 May 2025 09:00:10 +0000
Manifest next update: Tue 13 May 2025 09:00:10 +0000
Files and hashes: 1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: bTaXQp7hEr0RXdgIx9wAvtr1XtGZ6PH2VsUAM479fuQ=)
2: QxYftvw4ScrdmE6izSAuqNiVV-s.roa (hash: Ug7LB4EKJVBqtTxRK9aYbiXduDif7sf/a25gAftWyKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:1b:df:80:3c:97:0f:18:3d:b0:2b:ea:e8:0e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Validity
Not Before: May 12 09:00:10 2025 GMT
Not After : May 13 09:00:10 2025 GMT
Subject: CN=db0eefcf7556e6b536bae9033fb9168c9ad50db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:d5:65:bb:e9:cf:c4:29:13:22:f6:1d:5a:
95:4d:48:a0:ea:5e:53:55:08:5f:58:3c:85:83:48:
55:86:44:70:f7:3b:05:3b:17:35:a2:a8:cd:6f:f7:
4b:24:82:1f:9a:d4:8e:e5:c0:e7:3e:f8:fe:3c:a6:
83:b3:54:23:a6:b9:65:d9:da:4a:54:8f:c1:12:cd:
76:b2:dc:f9:c7:67:73:5e:66:e3:f4:16:80:01:e6:
39:3b:c6:5d:a9:f9:f9:85:7c:e4:b2:7f:56:17:c5:
7b:aa:ec:dc:e4:24:32:1a:63:4c:2a:ee:2b:a7:7a:
65:f0:fb:42:81:a4:5e:07:e0:15:aa:91:87:c9:93:
52:9b:9f:b5:8b:89:73:ea:d7:e2:4c:23:2a:57:ea:
87:0c:94:75:dd:48:81:91:fd:34:a4:15:f6:b0:f1:
ee:7b:21:77:c7:2d:7e:db:cd:3a:c1:3b:37:b5:01:
1e:e7:64:e3:7b:bc:da:00:a7:ba:4c:41:fd:59:ba:
4c:c3:d8:9d:01:d3:bb:89:72:49:fa:9d:e3:74:e4:
de:3f:81:e5:6e:35:83:b3:19:b7:fd:e9:86:7d:86:
f2:07:7a:c5:a7:99:5f:b6:68:1d:9b:2a:aa:a8:c6:
85:b9:6f:75:cc:0a:1e:0a:29:83:61:59:42:1a:c7:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:EF:CF:75:56:E6:B5:36:BA:E9:03:3F:B9:16:8C:9A:D5:0D:B1
X509v3 Authority Key Identifier:
keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8e:bb:8c:8a:d6:9c:37:46:54:d2:96:79:bf:57:fe:5f:0a:
ff:45:c7:b0:6c:82:00:d2:1c:48:be:c5:2e:e9:42:49:94:40:
f6:1d:a0:35:9b:fb:76:4a:23:f4:b2:7a:82:f9:fc:00:97:83:
45:2c:0a:d6:c1:6e:f3:c3:aa:4c:e5:3d:3c:66:95:e1:fa:06:
c2:11:b4:fe:64:8c:7d:20:af:92:18:69:1d:52:59:18:79:28:
b5:34:29:fe:6c:73:ea:90:ce:4f:ab:6a:85:7e:7c:2c:04:a6:
ba:dd:b3:01:7e:4c:5e:38:84:6d:90:fc:d4:30:68:37:49:54:
f2:37:df:4a:87:df:c1:fc:3c:b8:f7:e1:c5:fc:46:6a:1b:50:
52:7c:d5:58:f9:d7:50:31:d3:5b:f0:3c:75:6d:eb:93:a7:f7:
20:4e:db:c5:76:bc:e3:42:45:ce:79:81:6f:57:90:a9:69:ff:
77:83:3e:5e:d7:b2:02:86:48:9c:c3:a5:0e:86:78:1f:c8:bb:
a1:e8:92:2e:54:37:10:fc:f3:c2:ec:07:b9:90:e8:06:46:4e:
3c:bd:68:46:8c:61:e0:42:d2:9c:a5:01:bc:1d:b3:6c:47:2d:
0d:fb:ec:00:d1:c9:45:99:e1:6c:0e:a8:b7:54:d3:1e:73:38:
19:00:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:04:12 2025 by rpki-client