Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: Iwn3BHb7e7z5jhd9lN/yOqpaKx2nSjL0gq3TSp0lPSE=
Subject key identifier: 8D:A9:08:1B:EE:57:D9:C8:81:F4:51:5E:C0:D0:17:EB:B4:04:74:36
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 0196C0EF59B6418D8D47E25B13F72C0834D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 20:00:33 +0000
Manifest this update: Sun 11 May 2025 20:00:33 +0000
Manifest next update: Mon 12 May 2025 20:00:33 +0000
Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=)
2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: H2+/NHf3YI09TQxmWBSLjJ/QbdT8OzS9K9KazLnCmCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:59:b6:41:8d:8d:47:e2:5b:13:f7:2c:08:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: May 11 20:00:33 2025 GMT
Not After : May 12 20:00:33 2025 GMT
Subject: CN=8da9081bee57d9c881f4515ec0d017ebb4047436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:6b:de:da:4a:7b:ca:58:34:51:bd:62:b3:
8c:f4:89:e9:7a:e8:e9:30:d5:fd:ee:f1:63:47:f3:
eb:73:79:5a:ba:3b:c3:ec:cc:85:50:9b:1c:b6:e3:
49:98:27:97:0b:5b:12:88:f2:73:dc:e4:61:33:53:
57:4f:a0:dd:ee:e5:da:4e:9b:1d:27:b3:12:cf:1d:
e1:16:54:42:60:ac:b4:5b:96:2c:f2:11:e8:26:a2:
53:bd:f6:db:0a:d9:2d:8e:78:34:71:32:ea:71:f6:
80:e4:2d:0b:ef:a2:b2:ea:72:45:a1:b5:8c:96:d2:
8d:d5:1a:72:93:43:85:a7:30:21:64:33:43:b7:7c:
92:6b:96:e7:73:fa:06:fd:43:05:96:61:97:9a:4a:
8c:b4:2a:69:3c:8a:12:70:3c:97:64:20:3a:33:c1:
f6:59:f7:d3:ca:cc:47:f5:9c:ce:32:b7:25:26:30:
7e:56:fe:42:cf:a2:51:20:7e:96:c3:c5:87:82:93:
44:c2:40:de:ad:aa:cd:4d:48:8f:4b:e1:81:d1:4c:
d1:6e:1d:1c:4d:05:a7:40:9b:52:f9:18:9c:ad:cf:
9a:07:6e:19:3a:9e:bb:c2:2d:a5:68:76:a5:2a:ee:
11:14:34:e2:3c:76:e6:84:5a:32:1f:b3:f7:ee:44:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A9:08:1B:EE:57:D9:C8:81:F4:51:5E:C0:D0:17:EB:B4:04:74:36
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e3:b1:18:46:94:ea:32:8a:ea:06:19:7d:92:3d:f3:25:0e:
5b:8c:0d:2b:93:79:e5:9d:be:a5:46:02:34:2b:65:a3:0c:40:
bf:09:4b:7e:dd:e4:d7:c7:81:9d:41:a9:98:ca:51:08:b2:8c:
f7:e2:c6:a0:d2:9b:60:19:96:8b:d2:cc:4a:bc:47:bd:6a:90:
94:6b:2b:06:76:11:83:aa:00:cd:9a:07:bc:a8:25:02:2b:d1:
27:6b:fd:49:87:ee:5f:0b:c8:20:9c:05:f8:84:c8:65:21:3e:
72:8f:1e:ae:42:a9:de:38:ec:50:4d:87:18:89:65:a7:ff:59:
82:89:b5:f9:93:fa:f7:d2:b9:e2:bd:06:14:2a:a1:2f:f6:00:
91:e0:ff:bf:82:b1:35:14:a0:5a:b8:97:a8:27:4b:42:17:7b:
99:13:6d:db:63:2d:8c:e1:4e:36:be:f4:71:bd:37:80:8e:3f:
b9:7f:7e:06:ee:45:f6:f3:fd:61:1f:67:e3:86:e2:60:b1:30:
b3:16:a5:11:dc:a6:0d:1b:2b:85:c2:be:44:15:05:da:1c:2f:
57:11:3b:9f:bf:36:49:33:a1:bf:da:e9:f0:f8:52:c3:98:ae:
2b:7c:7e:71:9c:70:97:a0:23:71:ce:1c:d8:4f:3f:69:f3:6c:
a6:df:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:22:15 2025 by rpki-client