Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: 15dCSgU+Y1MJ0G3CAXGkqpJFcsWAxHlieai8zsl4QrE=
Subject key identifier: A8:63:6E:1D:58:87:CE:E5:C2:ED:10:0B:CE:E7:94:C7:CD:34:27:E2
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 0196C94D9B67FDBB6FB5AD57E74D5E324C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0A38
Signing time: Tue 13 May 2025 11:00:28 +0000
Manifest this update: Tue 13 May 2025 11:00:28 +0000
Manifest next update: Wed 14 May 2025 11:00:28 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: P6q02sAiznygezOPYRqaPuLH3iS0pKOhwRf9v8RQQ/Y=)
3: RTuoPdvywC_wXQboVeXZhnsBE8c.roa (hash: eSP6Qd1xbWVau/rn0W/JU8IDdXr668CVKvYbLZet0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:9b:67:fd:bb:6f:b5:ad:57:e7:4d:5e:32:4c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: May 13 11:00:28 2025 GMT
Not After : May 14 11:00:28 2025 GMT
Subject: CN=a8636e1d5887cee5c2ed100bcee794c7cd3427e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:63:2d:3b:e7:d9:3c:56:9a:10:59:b7:6a:
83:0d:15:c9:2f:51:57:6a:00:45:81:73:38:81:e2:
84:83:40:ed:2f:fc:8d:48:13:9c:4a:27:46:a6:15:
01:8e:73:a1:ab:35:0c:ff:bd:0a:d0:60:d9:35:9b:
6a:ca:bb:62:0d:1e:a6:2e:e4:5e:dc:a0:2c:bc:f6:
47:c8:c5:9d:52:31:5c:32:3c:bd:bc:54:7e:86:f5:
13:9b:24:21:a4:2f:45:31:b9:bc:a2:d2:51:b5:e0:
9c:93:31:3a:74:1b:e7:8c:fb:a7:33:49:e7:3e:a2:
c6:d4:4b:aa:12:ee:cd:2e:76:e4:5d:d9:e0:51:c1:
1b:b4:ef:df:73:07:a6:aa:a3:90:6e:27:5d:b6:6d:
ff:85:10:e1:d0:6f:1b:c4:09:bf:80:17:cd:d3:e7:
b3:4e:b3:af:ef:22:54:83:07:62:ac:22:04:ce:d6:
58:05:b4:a8:69:19:06:4a:75:2c:17:8e:a0:3e:e7:
c3:84:ad:d9:ff:9f:d8:76:75:30:65:b3:49:e8:1b:
1f:92:26:12:8e:70:61:78:a2:50:20:79:21:f8:c3:
86:eb:21:b2:16:9e:38:f9:15:e2:2d:7e:49:9d:01:
b7:c7:ff:0b:c8:e0:d0:f9:ea:86:64:0e:63:f2:da:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:63:6E:1D:58:87:CE:E5:C2:ED:10:0B:CE:E7:94:C7:CD:34:27:E2
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:18:db:31:b5:a9:c5:5e:48:41:f9:3d:b5:22:52:d3:8f:05:
ce:b3:e5:e5:ed:53:47:55:66:e6:a1:af:7d:4c:9f:df:54:6c:
ca:d2:c8:7d:92:a5:e1:17:72:64:03:4a:75:73:13:08:6a:27:
ce:44:e9:61:69:46:34:f5:0d:c8:4d:bb:ea:eb:e0:67:42:1d:
37:22:71:98:1a:b1:9e:ce:fb:ca:1b:51:bd:db:97:bb:00:11:
b5:15:56:ac:a4:1d:60:10:12:f6:4f:01:fe:55:11:1f:b1:48:
ec:24:e0:f5:34:57:8f:48:d9:fc:b8:53:1b:87:38:dd:9f:8b:
a2:f0:9c:87:80:aa:44:5a:9e:50:f3:e9:6e:17:7a:4c:6e:d2:
8f:b1:29:25:86:09:7a:c8:78:d6:2f:2c:9d:e8:2a:ff:30:5d:
71:29:ce:2a:42:d3:63:19:9e:34:10:bb:bc:ff:de:d9:a0:97:
e0:97:79:8f:68:25:32:a0:c2:6e:1c:d7:b5:13:81:2e:33:89:
30:6a:be:79:e2:03:ee:ac:83:fe:4a:b0:a9:c4:a8:97:d0:e6:
67:58:4d:72:2c:7d:b1:f7:9b:09:bd:0a:50:18:8d:e8:ab:0d:
ca:0f:c9:7f:8e:bf:c9:d8:19:5b:af:c4:60:05:52:9a:d6:17:
af:1f:1c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:32:37 2025 by rpki-client