Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
File: HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json)
Hash identifier: 1KxDiMjIYiAtQPx1Gw5khw0EcDsmQYo6Egsh2KEL0lY=
Subject key identifier: DA:D6:6D:79:5E:CC:5C:12:74:0B:8B:C4:42:24:C3:16:82:EF:C5:02
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial: 01969E9A7A5C30256B5B77A3718DD4B02A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
Manifest number: 059E
Signing time: Mon 05 May 2025 04:00:46 +0000
Manifest this update: Mon 05 May 2025 04:00:46 +0000
Manifest next update: Tue 06 May 2025 04:00:46 +0000
Files and hashes: 1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: 4dnpuhwpv8XE07XlhJZJ2cCdX1TN1HUyBhGOkt3qqYA=)
2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:7a:5c:30:25:6b:5b:77:a3:71:8d:d4:b0:2a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Validity
Not Before: May 5 04:00:46 2025 GMT
Not After : May 6 04:00:46 2025 GMT
Subject: CN=dad66d795ecc5c12740b8bc44224c31682efc502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:03:19:9d:f3:c1:de:30:9b:64:cc:bd:e3:
b2:d0:8d:12:9d:b1:6a:d2:15:9e:89:be:1c:df:dd:
25:f8:82:a5:0f:94:cf:ed:23:90:c7:d3:7f:8e:7d:
d0:88:2a:ca:c6:10:82:e7:0e:90:4c:78:21:91:34:
08:2d:15:88:71:b9:bc:42:bb:1f:3d:75:bf:b3:66:
ff:91:76:07:61:03:0a:a3:b0:d0:f1:b9:e1:7f:b3:
2b:10:3d:17:54:38:dc:52:97:b0:1f:21:95:aa:a3:
16:bc:f1:83:84:6c:32:b9:4a:9e:17:d3:3f:15:98:
6a:fd:39:cb:88:3c:e9:fa:21:71:1e:67:fc:ab:12:
e7:c1:31:38:6f:03:75:ae:2b:7f:36:a3:1d:6e:ac:
99:fb:ae:17:95:ab:0f:94:73:58:39:a3:bb:e6:45:
b6:0d:7b:0b:95:c8:45:b2:6a:7f:82:bb:ce:96:b3:
ea:4f:b5:93:7c:f3:d5:1b:5b:18:45:ef:c4:a6:23:
08:22:28:a6:cf:8a:90:52:cf:2d:9e:ab:d9:3d:7c:
61:fc:0b:2f:b0:d4:45:a5:b1:5a:b0:8f:44:f7:08:
af:9f:d9:ca:bf:f4:af:6b:dc:7c:64:31:74:8d:5d:
af:9a:ac:26:05:89:48:45:62:17:f1:9a:72:cd:7b:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:6D:79:5E:CC:5C:12:74:0B:8B:C4:42:24:C3:16:82:EF:C5:02
X509v3 Authority Key Identifier:
keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:62:40:be:25:b8:ac:fd:5f:eb:a5:09:90:0c:d7:77:24:d3:
3a:1f:0a:2e:ee:c6:ff:64:fc:09:a9:21:b4:4e:4e:28:92:49:
62:70:5c:de:9b:f4:c8:a0:b0:83:ec:1b:aa:b9:0e:7b:d6:82:
74:87:ad:14:68:ba:40:d4:86:30:6f:3b:15:25:6e:2a:66:bc:
d8:3e:fd:a0:a1:79:f8:15:0f:aa:3e:0d:72:3c:32:e1:5a:df:
04:6d:21:df:83:78:7b:d6:49:9f:f3:fb:0b:b7:70:98:4e:54:
ba:5a:9f:98:d0:3c:d4:c9:fa:ff:1b:52:2b:72:42:9f:2e:af:
6f:5a:44:1f:2f:0c:dd:92:3e:61:86:a7:d9:91:4d:06:96:3f:
3a:7a:0d:ae:11:ef:df:de:24:b8:37:82:c6:aa:70:d1:23:43:
7e:fa:95:6e:5d:67:88:2e:d4:df:a3:62:be:7c:e4:0a:c9:28:
09:74:05:e4:14:11:30:d9:ea:dd:cb:df:68:22:28:94:5c:0b:
68:50:e3:46:fe:85:24:98:49:93:21:c5:8f:07:e3:98:2b:ba:
5e:4c:b2:71:14:1c:4a:67:4e:a6:8c:7c:ea:93:9e:80:54:ca:
84:f7:0b:3d:44:44:c5:80:ad:fa:92:2f:88:5d:58:f9:23:8c:
2d:99:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:53:47 2025 by rpki-client