Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: 6fMkaE5VwOKkxcev3byySx4fSJ3qFfGnRZRZulPBUTw=
Subject key identifier: 5C:5A:08:40:51:C5:9B:87:AE:AE:6F:3B:53:19:E3:1C:07:0F:CC:DE
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 0196BE25798B00BBF40B077B4B7E5B2710BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 0A7B
Signing time: Sun 11 May 2025 07:00:49 +0000
Manifest this update: Sun 11 May 2025 07:00:49 +0000
Manifest next update: Mon 12 May 2025 07:00:49 +0000
Files and hashes: 1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: bOYbi5yMp0vLmAGY5lHzfOZ8xk7Th3P5a5wdEySSy9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:79:8b:00:bb:f4:0b:07:7b:4b:7e:5b:27:10:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: May 11 07:00:49 2025 GMT
Not After : May 12 07:00:49 2025 GMT
Subject: CN=5c5a084051c59b87aeae6f3b5319e31c070fccde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:0c:f7:42:d5:02:04:fc:2a:8c:f3:db:53:
53:75:d9:ad:6e:59:9e:79:f8:30:ba:ef:33:85:68:
6f:fc:53:1b:e2:15:9e:85:a8:89:cf:0b:7b:0c:cb:
8e:bc:3b:0e:30:2e:41:89:ca:35:a4:05:cc:f6:45:
35:cb:ff:7a:73:07:88:a9:62:ff:3b:5c:5b:52:91:
96:7a:86:0c:36:16:59:09:88:97:98:47:41:c7:cb:
ba:26:19:fe:33:7a:af:84:97:de:6d:5d:22:f2:35:
f2:a9:6c:31:86:05:2b:f1:62:c9:29:9f:53:3a:53:
b3:ce:31:ea:d0:d3:c8:fe:76:45:d7:13:b3:22:bf:
22:06:78:a2:4c:bc:c5:26:e7:33:c2:33:7e:81:63:
af:44:d8:3e:79:8e:95:ba:be:31:27:c9:78:6a:17:
d2:22:9f:85:0a:7a:93:63:81:59:03:1d:0a:1a:bd:
e5:c2:e8:69:3c:61:13:2a:d6:17:ed:aa:9a:0e:6c:
34:e3:fc:2f:01:2a:8e:12:cf:4e:c6:7e:a0:b8:07:
1e:4b:37:40:2a:a2:a0:1f:91:9a:5b:87:60:ac:66:
13:3b:a3:13:b0:8d:39:d6:57:48:d0:6a:49:4e:fc:
14:16:6f:ac:12:f7:d3:3e:ba:76:e8:95:db:95:64:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5A:08:40:51:C5:9B:87:AE:AE:6F:3B:53:19:E3:1C:07:0F:CC:DE
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ec:04:be:7d:a2:e4:06:36:7c:9f:93:0a:0e:a9:91:f5:07:
26:87:1e:a4:15:7a:78:85:c8:3a:6e:86:60:07:61:32:6d:f3:
a9:06:bf:4a:cb:ad:04:79:86:82:60:e2:4b:94:a0:e9:21:26:
25:6d:17:d7:97:a7:2d:d7:5b:dd:c6:3b:45:b4:a1:86:11:a9:
e4:a6:3d:2f:c7:73:ca:a0:b7:96:1d:66:04:10:15:89:5b:3d:
7b:e5:82:2a:65:98:9a:7e:cf:4f:10:c8:85:9f:a0:7e:98:53:
67:80:66:9f:5a:e1:d3:1a:cb:bc:fe:c7:b3:b4:d3:8e:26:16:
01:fc:ba:df:b9:cb:0b:c1:a4:65:55:39:52:aa:40:d8:93:b3:
98:ab:cc:83:eb:05:e5:69:c1:b3:be:a7:b0:ce:8a:4b:ff:27:
8c:28:04:37:c7:ea:c5:31:35:60:5d:c6:77:59:3b:9f:cf:bd:
c4:eb:9b:05:e5:f8:7b:4e:2c:6a:60:17:a4:70:8d:6c:74:e8:
11:dd:94:e0:af:1b:96:98:98:3c:f0:1a:d1:79:6b:38:bb:79:
6d:14:e1:f2:53:2c:4f:5a:4b:4c:79:f2:19:b3:8d:92:b6:e3:
39:09:56:da:76:af:fa:f3:bd:ac:86:68:8d:d0:6c:8d:e8:11:
1e:87:bb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:09:31 2025 by rpki-client