Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: jZRLu0EbZZ7J29NOHTjLb04MNANo8ZdNtrjfwMU+t+U=
Subject key identifier: EB:6E:E5:92:A4:34:91:0A:7B:3C:83:FC:5E:26:40:51:AC:C1:40:79
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 0196A0516D38C5F89D961451458B8BA02923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 14B7
Signing time: Mon 05 May 2025 12:00:13 +0000
Manifest this update: Mon 05 May 2025 12:00:13 +0000
Manifest next update: Tue 06 May 2025 12:00:13 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: a2EH2/I+LCRrcVhsJL6r8gIyy2zKzExgC3Yl/wbT41A=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:6d:38:c5:f8:9d:96:14:51:45:8b:8b:a0:29:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: May 5 12:00:13 2025 GMT
Not After : May 6 12:00:13 2025 GMT
Subject: CN=eb6ee592a434910a7b3c83fc5e264051acc14079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:5a:90:f4:f8:88:99:57:c0:d0:62:e6:77:
6d:73:98:a6:64:54:e4:78:61:cb:fa:33:71:68:1a:
c7:dc:ab:ee:04:59:f8:29:c9:12:ff:df:03:24:20:
03:7c:59:b4:05:42:d8:e1:dd:8f:75:1c:e1:be:99:
66:15:e7:09:54:db:15:d5:2f:a7:42:d5:9d:3f:7c:
f0:1c:61:90:be:0c:e2:f2:1e:dd:0a:d1:82:f3:fb:
52:fc:35:90:54:bc:e1:ff:8e:79:34:2d:a5:be:26:
72:86:00:5b:76:6a:22:84:83:8c:09:42:78:86:31:
37:f4:3b:e2:99:91:88:52:ec:fc:46:27:72:ef:1e:
9c:86:eb:1a:f5:49:a3:01:db:1d:81:ec:9c:9f:66:
2e:00:29:8c:65:0b:62:3f:6c:bb:48:14:19:26:60:
a2:a2:f8:8b:e5:58:99:08:57:53:cf:4d:7d:a0:a0:
dc:8e:96:c6:a2:37:e1:f8:57:29:e8:09:17:c5:45:
40:9b:92:ad:e2:92:aa:d1:a7:b0:31:ee:98:7d:58:
e5:3b:95:df:15:6b:77:52:b1:91:5a:58:24:fc:6a:
55:09:c1:dd:63:03:6c:cf:66:cc:5a:38:79:69:85:
84:74:b4:14:b6:90:80:06:a1:39:70:f2:e2:af:2b:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6E:E5:92:A4:34:91:0A:7B:3C:83:FC:5E:26:40:51:AC:C1:40:79
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:fe:2a:9e:94:c9:dc:65:1a:2f:e5:5f:30:35:de:b8:2f:25:
3e:59:4e:cb:34:b5:ae:d1:97:85:93:12:a4:dc:77:87:58:d8:
a1:d0:d6:dd:6c:d2:84:e6:50:d4:d4:10:c8:03:33:09:39:b0:
01:c5:da:6b:b6:35:57:fb:f1:19:11:2d:a0:0d:48:c9:6c:58:
fc:95:37:a4:bf:6b:c2:cd:d7:3f:82:f9:6a:ca:bb:c3:68:19:
88:8a:0f:92:41:82:4e:b5:a5:98:10:eb:60:42:4d:62:fe:90:
df:33:6a:8d:cb:44:96:b3:8d:f0:fa:b1:11:e7:1b:94:dd:7c:
ac:f7:ae:ff:d4:0b:72:c3:d0:4f:d1:90:eb:bc:f0:fa:55:99:
79:a6:f2:c9:46:4e:57:9d:26:bd:00:e6:34:ba:e2:03:ea:18:
32:ff:4b:4f:a5:c5:50:ad:dd:68:d7:00:86:1d:76:4d:fd:b4:
ba:f3:ee:ef:7e:5e:64:22:0d:8b:27:dc:0a:9c:3c:0c:78:37:
b3:6d:d4:ed:e4:16:4b:fd:d4:24:62:c2:0c:79:d2:d0:17:06:
27:8e:37:17:17:6d:ac:a7:e7:16:bc:03:c9:b0:0d:c5:c0:ce:
00:be:d3:79:ae:cc:67:9d:b3:87:02:2e:87:07:e0:c8:0d:e3:
65:1e:85:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:23:20 2025 by rpki-client