
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: 08xIwOgDCc52e5ZCvCCmh+8GLvzCnJa5Id3XpD9gAfs=
Subject key identifier: FD:53:67:F2:46:B5:33:D1:D0:D7:2C:15:92:53:30:33:0C:86:F9:1A
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 0196CD61A9708B5FD609E98FDACA7A105B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 06:00:51 +0000
Manifest this update: Wed 14 May 2025 06:00:51 +0000
Manifest next update: Thu 15 May 2025 06:00:51 +0000
Files and hashes: 1: heJEz4aIV8pCovQNxPGHm98CLzg.roa (hash: oSOD/5s+DowUJTv2duSzog5oYqkTO1A7yRox3C69klU=)
2: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: +IZ040NtIiSMPgzaPLRNnft101KprJuPt2iUFqRHI5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:a9:70:8b:5f:d6:09:e9:8f:da:ca:7a:10:5b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: May 14 06:00:51 2025 GMT
Not After : May 15 06:00:51 2025 GMT
Subject: CN=fd5367f246b533d1d0d72c15925330330c86f91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:c2:76:26:bf:63:de:ac:21:c2:b7:df:15:
6e:9d:ba:52:4a:f9:fa:30:7a:7b:95:b7:b6:c7:f2:
e5:8d:83:2b:b2:87:c7:de:28:cb:64:b7:f5:05:a7:
26:ee:13:47:5a:dd:f6:b6:03:fc:3c:98:a4:6b:bf:
2c:db:28:ff:b6:e1:1d:5d:86:5c:20:1b:db:b1:aa:
7b:2f:a5:a9:58:47:d8:2a:50:2c:fc:13:dd:c9:5c:
77:82:53:7b:96:8c:4a:6a:52:f8:27:54:62:8c:89:
14:25:d2:9f:15:58:3a:d9:d7:22:73:39:b5:99:ad:
bb:ce:a9:ce:31:70:1b:bc:06:b4:72:39:80:01:ee:
8d:f2:9b:89:59:4a:ff:83:05:31:6d:07:c6:25:a7:
a8:2d:6e:81:70:82:ca:05:db:3d:29:ee:81:0c:41:
b1:18:f2:f8:dd:e0:61:42:7f:51:e9:e2:c5:4e:bb:
01:3e:79:fd:55:cb:8d:ec:c3:18:b9:7f:21:2a:5f:
50:e2:3b:1e:9b:ae:7d:15:50:97:81:de:a2:e8:23:
55:e3:10:b0:b9:51:1d:ea:52:be:07:44:94:02:3d:
36:da:5b:49:42:56:8b:d3:9a:9c:d5:78:21:fc:f0:
ac:2a:9f:46:c7:48:bf:f5:84:8c:53:26:26:80:97:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:67:F2:46:B5:33:D1:D0:D7:2C:15:92:53:30:33:0C:86:F9:1A
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b9:16:ec:1e:2b:29:27:fc:4f:50:9b:a3:b6:b7:0a:6a:cf:
0e:8e:10:35:b2:a7:1d:18:df:02:59:2b:fd:11:c5:e5:0e:82:
62:9c:d2:d8:09:1f:fa:12:bd:58:ba:3d:96:eb:db:d4:35:25:
28:d2:ab:ce:56:f0:66:4e:92:24:3d:8f:76:d3:0a:09:46:a0:
d9:da:dc:62:3e:9e:d0:22:1c:88:77:3f:ac:40:d9:a8:29:53:
ca:6a:5a:ab:7e:d0:6a:02:96:f7:fd:5e:9b:25:2c:24:79:f8:
bb:1b:12:7f:c7:e8:bd:3f:59:50:e7:bc:b9:27:b0:ed:25:f3:
20:13:a2:66:d3:1e:94:87:d7:b1:ec:17:e5:ea:e9:30:1d:ac:
6a:26:15:b0:51:2e:9d:93:83:f7:5f:aa:fd:a5:de:e7:91:18:
2e:86:c1:72:c7:56:20:c7:cf:fe:9a:98:ba:30:0d:f0:65:07:
e9:e9:a8:de:a5:53:0d:9f:d2:92:8d:46:88:9d:23:0b:23:6a:
49:a1:46:a9:83:f3:d8:d2:d9:0a:2a:67:ff:0a:87:c5:03:23:
20:f3:41:27:1b:a5:55:51:1e:b9:d1:4b:1d:45:e5:8b:b3:b5:
dd:aa:31:f8:04:66:c5:bb:0b:0e:b9:db:5e:eb:6e:58:8b:9d:
41:4d:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:39:54 2025 by rpki-client