Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: x3ptZr+gIsMceDORQ7YeKaFzTWRt+Aaj0x3c7WZpqw4=
Subject key identifier: AA:FA:84:2C:E8:A9:DF:BD:74:41:F1:C5:A6:69:3F:8C:82:9D:B7:77
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 0196BB5B3CDF1DDE45B15E513A96365EC978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 139A
Signing time: Sat 10 May 2025 18:00:40 +0000
Manifest this update: Sat 10 May 2025 18:00:40 +0000
Manifest next update: Sun 11 May 2025 18:00:40 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: wYgiASJwjeCorlVEboGyETNTTKYSI4OcRH2kchp8eU4=)
2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:3c:df:1d:de:45:b1:5e:51:3a:96:36:5e:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: May 10 18:00:40 2025 GMT
Not After : May 11 18:00:40 2025 GMT
Subject: CN=aafa842ce8a9dfbd7441f1c5a6693f8c829db777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:93:19:ce:d1:21:0a:9b:0e:1f:cf:22:71:
dc:35:7c:ed:c0:c9:fa:04:a6:c7:e1:1a:d9:ba:10:
41:b4:25:10:98:39:be:de:03:26:c6:4f:8e:58:a4:
ed:4b:6e:4e:e1:0d:6a:6b:51:30:83:51:93:ec:d6:
c8:e4:49:11:fe:b0:d0:25:b8:f6:29:f2:39:96:33:
7c:1d:a0:07:de:24:56:d1:d9:0a:d5:17:d1:13:6a:
16:5d:9f:bd:c9:91:64:6d:5a:65:da:6e:11:55:6b:
51:8f:4e:53:ea:4f:df:a6:9a:dc:aa:59:5c:c3:4b:
36:61:d8:1e:4b:84:56:be:c3:73:0a:37:2d:de:60:
21:2d:78:8d:2d:03:c6:48:f9:10:4c:f9:dc:40:db:
cc:d7:ef:9f:0d:99:4f:b6:19:a8:eb:1e:d5:fa:fc:
25:28:08:35:35:9c:5d:75:4e:37:a7:f8:48:06:ae:
d1:0d:13:a8:c4:44:52:7a:12:f8:0b:98:27:0a:35:
e6:74:02:32:99:28:73:ad:7f:c7:04:a8:86:8a:af:
b3:51:9b:e5:df:08:d4:16:8a:88:fb:37:d9:03:92:
8e:93:76:d8:32:bf:9d:17:7c:98:c1:23:2c:26:15:
06:97:89:02:01:ac:14:f8:e8:61:92:d0:d9:39:b2:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:84:2C:E8:A9:DF:BD:74:41:F1:C5:A6:69:3F:8C:82:9D:B7:77
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:60:20:54:be:ee:61:f7:62:fb:be:a0:61:d8:f8:db:93:c8:
9b:9e:ac:02:ff:89:7a:ae:28:a8:b4:97:4f:b6:a1:c5:76:70:
12:ee:75:43:fa:55:38:b4:ec:fa:63:c4:2e:68:b8:a5:4c:fa:
cf:7b:07:e5:29:19:c0:dd:f0:c5:84:39:c3:78:48:44:b7:b7:
f2:08:25:db:c1:d6:4c:40:70:45:44:17:f7:84:09:ab:bf:3b:
a9:f3:2c:ef:c7:76:f5:c0:23:5d:aa:96:c0:1a:10:9a:0c:88:
79:e2:3e:94:1e:47:bd:29:54:6a:db:4b:24:f8:f6:d4:9f:fb:
0d:cc:94:9c:79:4c:13:a7:ff:7d:76:26:5b:6d:97:c5:c2:8e:
88:5c:5b:c2:3a:cd:f7:bb:cf:99:c4:62:e1:10:e4:65:c2:ba:
3f:7a:13:78:c9:fe:26:f4:48:52:78:87:9a:b3:3e:50:8f:c8:
64:31:d6:8f:e4:5f:af:9e:a0:8d:21:db:32:40:37:25:2f:4c:
bf:17:89:1b:de:5a:d2:52:05:26:66:fb:9e:2f:1e:bf:a5:cb:
a2:86:52:fe:d8:4d:29:e6:90:24:ed:b3:57:52:a7:ed:d6:99:
98:e5:04:05:b5:0c:8e:18:83:bf:be:04:eb:e4:a1:f0:24:73:
2c:b8:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:11:31 2025 by rpki-client