Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: XvJZXECX5wDqJcVKxnMQSnAKyfp2lKHqIbx/mxvJiAg=
Subject key identifier: 4B:40:3E:59:03:83:83:DC:59:8A:FE:5A:7B:25:0D:06:D1:67:88:BB
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 0196C0B867BDD7B088ED1047E2BDFE871F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 19:00:32 +0000
Manifest this update: Sun 11 May 2025 19:00:32 +0000
Manifest next update: Mon 12 May 2025 19:00:32 +0000
Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: /BdFmWhyFGnSztq06FqbmWD9KnZW0wpdowaiiBv4TyQ=)
3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:67:bd:d7:b0:88:ed:10:47:e2:bd:fe:87:1f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: May 11 19:00:32 2025 GMT
Not After : May 12 19:00:32 2025 GMT
Subject: CN=4b403e59038383dc598afe5a7b250d06d16788bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4e:61:88:c6:06:7a:af:38:2f:05:c4:96:9c:
7e:1d:4c:af:bf:e2:b8:c7:cd:04:f4:c3:a2:e2:31:
5c:03:72:e2:fb:48:88:43:58:0d:3c:f1:c6:48:27:
b8:79:e1:f5:9b:7a:67:31:b6:60:b0:d6:c7:f7:8a:
5b:c8:36:11:d3:55:85:86:29:5a:a4:fc:0f:20:8e:
96:02:fb:eb:5f:8e:7c:06:6c:2d:9f:fb:5f:a2:7f:
71:d1:a1:80:c9:25:28:83:f4:2f:0f:54:62:8e:fc:
4b:82:0e:45:3c:d7:cb:2f:54:80:a7:7e:16:50:49:
04:7f:b2:b0:18:4f:29:91:61:86:a6:f4:d9:3b:6f:
d1:bd:6e:d1:07:ff:3d:02:f5:0c:79:6b:0e:32:5f:
12:22:dd:30:3f:f4:70:b5:94:ba:1d:6f:1b:73:44:
cd:ba:60:d5:66:dd:bf:d4:dc:52:b6:5e:58:b7:0b:
6b:c4:37:8f:9a:3a:11:a5:7e:e7:62:52:b1:89:fd:
5d:ea:b5:80:d6:e4:e6:6e:98:0a:a1:93:e0:2f:06:
9b:d2:b3:d9:b6:34:e6:ab:09:f7:0d:1b:15:e8:8b:
46:a4:0a:a4:9d:b2:fe:cf:1c:b7:68:72:85:d7:f0:
41:38:80:e2:5f:b2:8a:35:7b:34:7f:65:51:6c:d5:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:3E:59:03:83:83:DC:59:8A:FE:5A:7B:25:0D:06:D1:67:88:BB
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1e:15:fd:b0:14:45:81:6b:df:b2:32:5c:04:a1:ea:e5:23:
9a:b8:8a:f8:ba:ba:ad:6a:c3:3e:a9:88:23:40:4c:90:f9:e6:
4e:5e:79:35:0f:83:a9:a8:58:79:37:da:1f:89:37:99:0a:07:
f6:f9:77:22:e0:37:0a:cf:97:bc:6d:0b:6b:55:c2:35:83:a9:
7d:15:bb:6d:98:06:a1:dc:fa:d8:c1:12:b5:1d:d2:db:93:65:
6f:61:f8:5d:ed:24:89:dc:3d:5d:97:5d:ae:3e:2f:db:f9:5d:
63:3b:bd:8f:6e:8b:70:0a:97:ba:73:66:61:6d:9e:6f:fd:a3:
4e:65:6f:ba:6e:3a:00:0f:f0:cf:26:9b:a5:6e:a4:16:6f:86:
32:01:63:7d:9e:fc:a7:e3:af:c4:47:af:23:51:bd:eb:50:47:
d1:ae:72:3d:fe:90:73:68:62:a9:29:da:23:bd:04:87:3f:c3:
eb:b2:b8:c9:1b:b8:71:b8:87:64:b8:0d:24:b3:8b:06:8f:2a:
a9:69:c9:c0:e9:a7:95:f8:23:8b:19:70:d1:0c:db:7e:33:fd:
9a:a9:1f:67:74:c4:c5:3f:33:1a:84:47:eb:09:d6:c7:ac:17:
bb:e8:aa:68:18:b7:bb:be:1d:bb:13:cd:2d:69:c5:67:89:2c:
fb:66:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:12:24 2025 by rpki-client