Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: g2aPB9NA4HhgPpZPY4q5eA3T6aG3NTMhr2tKcHf1hO0=
Subject key identifier: CB:89:CE:85:79:6E:E5:1F:9C:A3:E3:51:74:06:6E:67:3B:5A:FD:47
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 0196B5592D963111BA57617578F61F20FD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 1533
Signing time: Fri 09 May 2025 14:00:42 +0000
Manifest this update: Fri 09 May 2025 14:00:42 +0000
Manifest next update: Sat 10 May 2025 14:00:42 +0000
Files and hashes: 1: 0EXTA2fh52m_pdzndlQONOR-ALo.roa (hash: 6rMWco6WBnZhVNOyIqX9uMPGJDuagIsvvOicEopd/aI=)
2: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: g8pJZVA0C4m3r+5dIHiXv+M4Gina1BX6NWCUGx/pGFA=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:59:2d:96:31:11:ba:57:61:75:78:f6:1f:20:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: May 9 14:00:42 2025 GMT
Not After : May 10 14:00:42 2025 GMT
Subject: CN=cb89ce85796ee51f9ca3e35174066e673b5afd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:61:1f:e9:87:7e:05:ea:2c:9d:70:c0:8f:
24:fb:12:ae:ba:63:b3:45:94:59:9d:3d:a9:91:9a:
c4:be:aa:81:1d:f6:b8:f6:41:5f:b3:cf:f8:4f:aa:
26:ca:c0:c3:f4:93:ab:27:93:79:29:4b:33:6a:bc:
ba:7e:dd:78:56:a2:0d:00:ac:c6:56:6e:df:fe:85:
91:8a:34:53:7a:7a:92:6f:51:32:aa:87:f3:f5:83:
87:31:80:6f:85:e0:e7:e0:11:9f:64:1e:ef:2b:12:
2d:2d:ca:f7:27:cd:c3:e0:ba:4b:2b:03:36:64:14:
11:29:98:da:71:10:3d:15:af:ea:6f:4f:68:28:bb:
f0:5b:18:23:be:b2:aa:a5:cb:9e:97:96:11:ce:03:
19:58:06:a9:46:2f:27:28:70:9e:9a:11:0f:48:3a:
b2:9e:6f:75:21:e7:90:b3:b6:bb:9c:14:14:61:e3:
67:6e:7a:6b:3c:6c:8f:56:26:2b:bd:3c:09:c9:cd:
c6:c7:a2:0f:ba:d3:52:ce:b9:6a:fb:af:19:70:19:
a2:5b:b8:a6:5d:fd:d2:82:79:c5:d5:21:f1:32:78:
b9:38:90:99:24:06:e0:f9:79:4c:5c:81:26:fc:78:
30:43:5c:8f:1e:3a:e4:e6:3d:59:e5:30:df:70:da:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:89:CE:85:79:6E:E5:1F:9C:A3:E3:51:74:06:6E:67:3B:5A:FD:47
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ba:86:29:45:f9:26:f2:b2:96:36:1a:07:86:ea:4d:a9:80:
bc:a6:a5:c2:5b:fc:14:58:86:20:ff:f1:58:23:a7:8a:25:ac:
4d:3c:f8:db:c9:b0:1c:c3:8e:53:e2:bb:4c:78:b9:86:7a:10:
12:9a:67:88:cb:4b:66:49:0b:89:c0:6d:ee:4a:a8:b8:e4:98:
66:52:54:8d:c9:b2:8b:7a:db:03:d2:81:be:79:49:12:91:5c:
af:0a:1f:12:09:69:a6:03:ce:4e:24:2d:22:b6:a1:0d:b9:13:
4e:9b:9b:dc:69:3f:cc:57:e4:74:69:5f:22:20:ed:d1:82:0d:
65:00:e1:ce:ed:96:43:dd:57:73:55:be:19:6d:d7:c0:80:af:
1c:eb:c7:a2:b1:39:ad:b1:cf:11:1d:33:9c:1e:7a:91:70:20:
06:1f:37:2c:42:ef:3e:12:d2:48:26:1a:ec:cc:b4:2e:6a:e0:
9a:32:b4:06:2b:5c:70:8e:f9:f7:54:9e:d1:83:f9:1b:8f:09:
35:d3:a1:1e:79:6a:fa:1f:75:0c:ab:9c:90:a8:de:2d:cb:e0:
6a:e4:ff:68:d2:b2:24:79:99:6d:ce:fe:7c:4d:14:7a:74:4d:
68:9c:c8:f0:96:c9:bf:71:2b:ce:4a:31:a3:b4:28:39:f5:3f:
ac:fb:99:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:42:01 2025 by rpki-client