Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: ZIm86aAJk4K5Q6ndg/4NRe4kUPiKuUThuyeeSWJD7pE=
Subject key identifier: DE:0C:B4:88:DB:01:01:E4:0D:12:18:4F:65:99:1A:A8:1C:AE:06:2B
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 0196A19B36E7DDE5334CF6AAF87B86DA69FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 18:00:25 +0000
Manifest this update: Mon 05 May 2025 18:00:25 +0000
Manifest next update: Tue 06 May 2025 18:00:25 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: y+ykyZyWK/nCM7ZV/VN/CH+Uq8fDutWSKrSy00zDtE0=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:36:e7:dd:e5:33:4c:f6:aa:f8:7b:86:da:69:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: May 5 18:00:25 2025 GMT
Not After : May 6 18:00:25 2025 GMT
Subject: CN=de0cb488db0101e40d12184f65991aa81cae062b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:e6:8f:16:0c:3e:f6:2f:c1:a0:d4:3f:cd:
6b:be:c3:71:19:d2:a4:4d:5e:83:ae:a6:6b:73:dc:
b4:25:f2:e3:cf:b3:c0:02:1b:ca:32:e2:09:1c:80:
06:a9:62:56:e7:7f:86:fb:b7:27:44:65:19:aa:fc:
2c:3e:73:e7:d9:69:78:7e:1f:68:65:03:16:2c:5d:
f4:98:cd:65:65:ea:24:02:18:0e:85:14:92:97:f9:
b7:fe:fe:24:21:e1:6f:5e:96:f5:49:5c:06:cb:08:
81:2c:7d:2e:fc:57:65:2c:a1:2c:c6:85:74:d5:03:
70:2c:29:84:0c:58:f7:c6:ce:8c:94:76:28:0a:88:
f8:df:89:34:13:e4:bb:bf:19:e3:6c:06:11:2c:41:
e5:39:81:c3:ae:51:11:48:bf:ae:40:e5:2a:3b:a2:
0e:9f:0c:74:d7:d0:42:6e:d3:8f:5e:c5:1f:00:da:
5e:66:50:38:95:fc:92:0f:66:23:b5:6a:f1:4e:5a:
07:18:25:a4:67:13:16:40:ae:ac:51:01:cd:8d:57:
a3:18:98:fa:c6:f2:ac:6c:b4:ea:2a:c9:6f:25:72:
fe:f2:3e:ac:30:3e:d5:a6:7a:c6:23:b1:ff:01:dd:
be:78:3c:58:84:36:e8:e1:de:4c:da:86:12:fd:7f:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0C:B4:88:DB:01:01:E4:0D:12:18:4F:65:99:1A:A8:1C:AE:06:2B
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6e:f0:96:e9:f4:6f:19:80:d7:55:0e:b3:15:f9:72:60:47:
e7:65:91:ba:22:c5:07:c4:da:79:58:30:65:d0:b9:57:9a:bc:
8b:13:d4:d4:80:9c:30:87:ea:c8:58:03:22:05:bf:cd:67:6d:
58:65:4c:5a:6f:db:7f:96:34:04:29:39:b1:c5:4e:3f:59:92:
0b:40:62:b3:b3:51:37:4f:ed:ab:62:c6:d1:ff:2f:34:a6:55:
44:b8:e1:d5:bf:ce:70:54:eb:27:cd:f8:71:ce:b1:4b:72:09:
1e:78:11:f4:bd:a5:2e:de:a4:2d:74:86:f4:f6:d6:56:cf:e1:
53:57:78:28:14:6c:cf:4e:9a:63:5a:78:a0:43:df:0e:a0:0a:
12:72:94:83:5b:c0:66:2e:b1:ef:5f:5b:2e:ae:35:0d:df:0a:
2e:06:54:f6:67:04:46:73:96:09:ee:d3:83:e1:4d:73:11:99:
08:17:b9:26:ce:32:c0:49:94:39:eb:2c:c8:69:e4:c4:34:5e:
49:12:62:aa:08:df:6f:20:31:ba:fb:40:26:f8:82:fd:aa:f1:
c5:b6:bf:33:f5:3d:d8:71:67:95:e5:6c:6e:6b:d3:1f:97:b6:
9e:06:c3:28:ce:8f:d5:43:ad:3e:93:b7:7b:8f:d1:df:e8:12:
7a:db:ab:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:51:32 2025 by rpki-client