Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: 4zvJVYEpAbxzP7fcc/Ex444fCV7ncNNNx6nU6y+1jQ4=
Subject key identifier: 2C:20:BA:61:FA:D0:3B:DE:5F:61:82:EC:48:AB:C8:29:4A:59:06:AE
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 0196BECA52CD0A9F772C4BA57318B0AA283D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0125
Signing time: Sun 11 May 2025 10:00:52 +0000
Manifest this update: Sun 11 May 2025 10:00:52 +0000
Manifest next update: Mon 12 May 2025 10:00:52 +0000
Files and hashes: 1: 3y3U3qwdmO2kk7QDF8OpeEvGmYk.roa (hash: SYsIHbZxcsCIobtYof4JiLY0CTjM81pe5pDZopAZEhE=)
2: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: j91yYmUYGM1OS8RW2We8B2xm3OA70aEDtiDIRzaniQU=)
3: S1nE70948dC5DoQ6HvBbscWKaKw.roa (hash: rrKy+sC3QNlyr1Y5CMFJM8t+NCjq84nz7sTi50q+o50=)
4: k6nJrNo-jSsvVeSK6lSiaksWG5g.roa (hash: Fp7Ix9hoBLeGuJ2csDPwYQazA7zbD4nTOxDU/7xjqIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:52:cd:0a:9f:77:2c:4b:a5:73:18:b0:aa:28:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: May 11 10:00:52 2025 GMT
Not After : May 12 10:00:52 2025 GMT
Subject: CN=2c20ba61fad03bde5f6182ec48abc8294a5906ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:4c:50:90:7d:60:a5:0a:a5:5d:85:42:e9:
16:e5:31:00:b6:1c:34:53:55:7a:34:67:af:45:5d:
4d:a3:80:5b:ca:d3:ec:7b:7a:3c:21:b8:0c:70:ca:
1d:f4:0d:25:45:f5:29:6d:42:85:01:6c:13:09:35:
c6:7e:5d:bc:67:3c:50:19:55:cc:76:bc:61:25:24:
63:d1:86:dd:9e:c4:b2:72:c0:f1:df:e3:eb:a6:2b:
02:d0:58:3c:7f:a1:e6:43:3f:e4:6c:3a:f0:0e:c9:
85:ab:04:20:6d:8d:de:c3:7f:23:ec:4a:6a:0a:19:
21:1e:44:10:1d:c3:f6:e8:25:7f:4a:f9:a9:af:cf:
3f:74:df:54:ae:ee:81:41:13:1b:49:24:f7:f7:50:
0a:e8:6f:11:a4:50:fe:ff:5e:4c:4a:84:8b:bd:98:
4e:d3:35:c9:22:fb:ce:2b:9b:3d:7a:9e:9a:02:b3:
1e:a3:16:cb:65:01:1e:8d:3a:10:36:c3:04:57:54:
f1:9f:e8:83:a1:a2:05:8d:cf:d8:67:a6:fe:c0:d0:
c0:8e:4a:55:34:c9:a7:a6:44:4d:49:7b:dc:b9:56:
8f:3b:42:d9:69:f4:c4:0c:45:2a:1e:ef:a6:83:b7:
8f:a3:5f:9b:48:15:d9:c9:12:d4:98:a5:9e:09:b3:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:20:BA:61:FA:D0:3B:DE:5F:61:82:EC:48:AB:C8:29:4A:59:06:AE
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c6:33:e7:2d:2a:d5:6b:17:b0:03:a0:d8:cc:05:b1:98:a0:
52:27:12:45:ab:ff:25:db:fb:fb:73:62:51:71:53:e3:37:00:
bb:1c:e8:a9:c0:f2:da:38:93:d4:53:77:56:c3:b0:28:76:07:
92:1f:7a:99:ac:82:f7:39:74:e5:80:63:8c:c1:85:c4:07:2d:
d0:72:8d:59:82:b2:da:a6:0d:6b:e6:eb:8b:24:1b:a4:eb:38:
c9:ac:b7:e8:8b:8b:db:bf:c4:49:a3:89:ce:07:2a:5a:f6:b7:
66:68:d4:ce:3e:00:7f:d7:ff:94:c5:3a:09:f3:ca:74:4d:9a:
41:da:c8:75:1e:3b:a7:56:8c:1a:2f:21:d2:86:1e:bf:c5:21:
f1:dd:86:a2:12:5e:3d:90:ba:19:f3:61:18:28:1e:88:32:ed:
8c:55:8b:e0:da:5c:3f:97:7c:3c:60:75:0f:7a:b9:e9:49:ef:
b0:da:48:47:72:42:c5:18:62:f5:05:e6:08:96:57:b7:64:8b:
c9:9e:66:53:89:17:6b:65:07:55:75:99:9a:51:d7:b7:e7:4d:
03:85:c7:50:7c:e7:4c:b3:5f:4d:60:fa:79:76:0d:fd:a3:67:
ad:45:e7:c9:dc:bb:8d:38:df:03:ec:d0:61:a4:6d:74:14:74:
3d:dc:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:49:36 2025 by rpki-client