Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.mft (raw, json)
Hash identifier: oeITdW4EAuqCoIOYGN9RmVwo2oU1OGC3LVd/5pqEzUg=
Subject key identifier: BA:23:7D:56:EF:C7:90:33:A8:98:F9:3D:58:4C:38:09:D9:4B:62:94
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 0196B8C7F91848A291105FB08A3F4F161D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
Manifest number: 12D2
Signing time: Sat 10 May 2025 06:00:35 +0000
Manifest this update: Sat 10 May 2025 06:00:35 +0000
Manifest next update: Sun 11 May 2025 06:00:35 +0000
Files and hashes: 1: 0mGXGaCdx8b0IvVKiGo7317nAQw.roa (hash: JBoOppkoR2+2kdzZgQYn1vdyTCQusp5l9Um4sKeOKzw=)
2: 1HawBjUaL5zyqROG3lDOJ_FVBZU.crl (hash: 3nShkD7uzyJDtY/TRsnIyT2tPmHRQa4k0ct/J11nU7o=)
3: P3rY7Cmn84Ni11FziReIJTvis6Q.roa (hash: SHFkgztCNHhWPjHt5nCk5Bgx6ribEhAmnRifNZCrpkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:f9:18:48:a2:91:10:5f:b0:8a:3f:4f:16:1d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: May 10 06:00:35 2025 GMT
Not After : May 11 06:00:35 2025 GMT
Subject: CN=ba237d56efc79033a898f93d584c3809d94b6294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:1b:08:61:96:9b:4d:6e:9d:a3:6f:30:9d:
2e:4d:24:1c:95:10:6d:fa:cb:a5:93:cd:46:d3:e6:
10:f0:85:a3:d8:6b:18:57:01:27:95:48:4e:78:27:
75:77:19:a0:e9:48:1a:7d:c7:53:0e:38:8e:4f:92:
84:5a:6b:14:02:41:34:8b:91:21:81:57:69:65:11:
ba:40:b4:4b:2b:b6:1f:b5:02:39:ed:ff:d5:4e:36:
91:5c:38:04:27:35:5d:68:17:86:d5:57:e9:9f:bc:
4d:fc:90:4a:b8:61:c2:44:65:ac:16:da:4b:60:97:
75:a2:29:f2:54:21:bf:db:05:05:c1:ab:7b:f3:22:
23:8f:b6:98:ed:07:88:86:5f:7d:55:32:75:a6:9c:
45:bd:a6:82:52:ac:e4:37:38:32:7a:5d:7b:29:db:
6c:8e:77:52:dd:e0:1f:16:ac:e5:c9:e0:e6:30:f2:
d2:02:cf:a3:e9:e5:4a:32:2c:aa:32:fe:5d:63:6d:
33:54:c8:16:2d:5c:46:e5:f6:ca:57:ec:80:5b:64:
86:99:9b:33:1e:11:c8:61:16:7a:2a:d2:a9:26:f0:
e8:7e:78:ed:9a:e4:3a:0d:c9:48:e3:a4:f0:fb:20:
d2:82:f4:bb:3d:f9:ce:93:56:c6:39:a9:6c:45:07:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:7D:56:EF:C7:90:33:A8:98:F9:3D:58:4C:38:09:D9:4B:62:94
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c6:c9:8d:d9:a9:05:b4:8a:b1:b4:b0:f4:8e:b1:8b:58:35:
6f:f4:d4:ac:ce:8f:13:08:95:24:58:98:42:0a:5e:d5:08:1f:
a2:e0:91:19:73:a8:6c:36:c1:9d:d4:64:ee:8c:a9:17:2e:ad:
3c:e3:78:56:64:c9:f4:32:4f:58:27:d8:05:91:2e:41:d9:43:
bc:5d:f6:cc:55:24:18:f4:ea:91:4d:be:7e:0c:1c:b5:e3:56:
4d:66:2a:6a:f2:a3:f6:76:97:ce:46:1f:fd:89:a2:94:a3:67:
4b:58:0c:37:5f:5d:c6:3d:10:d2:ca:11:e1:2d:32:57:93:60:
85:ad:e4:a0:43:57:f5:11:ec:2a:f6:45:ff:54:2e:f6:ae:a2:
01:26:02:97:6e:ad:35:6d:a8:c1:aa:bd:d2:17:40:4d:f2:1a:
21:5d:52:7c:50:dc:1d:ca:09:9c:33:1e:9d:4d:a4:bf:40:21:
38:df:d2:38:ee:58:04:da:dc:08:40:d2:64:a9:f6:bc:30:d9:
2d:85:79:d3:c9:49:28:39:50:6f:98:7b:8c:37:3e:77:f6:c5:
e8:34:9a:60:a9:5a:44:37:a2:03:b8:ff:17:f9:a4:6d:04:b5:
9d:db:6d:fe:52:c0:d1:66:87:d4:c7:05:57:18:d0:e6:cf:d0:
bf:27:a9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:49:51 2025 by rpki-client