Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier: LmgqLnJSkgZ1gCmo9wDnYEum+WY8gLqGq8MgQ8kmfKk=
Subject key identifier: 1C:7A:79:0C:CE:AA:56:AF:86:AD:E7:DC:5C:E0:22:CB:44:C8:04:24
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 0196C04AAB47538CCE421AD95FEE8F576610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 17:00:41 +0000
Manifest this update: Sun 11 May 2025 17:00:41 +0000
Manifest next update: Mon 12 May 2025 17:00:41 +0000
Files and hashes: 1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=)
2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: oEzrYGVMK1qlogZrL3l7+hgWvi9xbptxntHHlOERw9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:ab:47:53:8c:ce:42:1a:d9:5f:ee:8f:57:66:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: May 11 17:00:41 2025 GMT
Not After : May 12 17:00:41 2025 GMT
Subject: CN=1c7a790cceaa56af86ade7dc5ce022cb44c80424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:c9:b9:96:d2:3c:bf:43:13:fa:9e:62:b4:
53:e9:a6:b7:c6:5b:93:41:c9:5d:e6:d3:38:a5:c5:
28:92:5b:aa:06:bc:80:b2:6b:71:dd:e7:0b:5d:c6:
db:70:bc:ea:f2:f0:9e:03:b4:f7:61:43:1b:19:af:
ce:90:87:c6:de:6d:a3:3c:c8:5b:2e:ce:a1:41:48:
ad:a8:fc:23:99:03:47:8c:90:0e:46:a4:20:2a:13:
c0:d0:a8:e1:c8:9b:82:bc:d2:a5:eb:26:25:48:8d:
b0:8d:0b:04:97:5b:62:a3:ab:a7:f0:99:b7:63:f8:
2b:ce:d6:fd:60:30:aa:2e:1c:e8:d9:a6:c3:66:5c:
d6:09:9b:23:79:78:51:af:ed:29:46:c4:da:15:a7:
d9:fc:7c:67:7c:9a:0c:55:75:a3:db:f8:6f:32:4c:
8d:9e:09:a0:6c:28:76:f3:7f:71:7d:ec:ad:1d:d4:
44:ef:9d:c5:13:62:f0:6d:6d:41:2c:70:8c:33:73:
0b:cf:0a:06:a6:7c:ca:81:bd:3e:de:2b:de:6d:a5:
d8:c7:cc:fe:e4:9e:28:4c:7c:17:dc:9e:0c:da:5d:
c7:6f:b1:d7:4f:1a:a3:88:f4:2c:f5:a7:63:1c:b6:
58:45:4c:ca:04:ac:65:bc:fd:be:a8:8f:49:e5:bd:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7A:79:0C:CE:AA:56:AF:86:AD:E7:DC:5C:E0:22:CB:44:C8:04:24
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6d:57:a5:12:81:07:08:88:00:d1:66:39:97:2b:cc:49:a0:
6e:eb:19:bf:5b:af:9f:2a:57:07:52:ce:41:47:cf:da:13:a8:
db:dc:4f:76:ad:c2:cd:6d:ce:aa:04:d9:77:a5:14:a8:29:94:
08:2e:59:a7:5a:6c:eb:27:36:8a:2c:4e:3d:d9:7e:d5:86:46:
8e:5f:3a:92:df:32:e2:d1:32:4b:41:21:9e:7f:c2:40:96:54:
27:05:a9:7e:2e:15:81:fb:82:4c:18:24:44:05:4f:f3:8e:20:
b1:69:9e:7e:2c:df:42:77:89:55:86:e1:f7:ff:a9:b0:53:b2:
02:bc:98:19:4a:df:1b:ce:fe:d1:15:3b:37:0c:ee:d4:25:e4:
72:16:c3:b5:0c:99:40:97:76:91:35:82:85:22:5f:a0:79:c3:
eb:6d:a3:98:6d:ec:e7:80:ce:71:d6:b8:69:7e:7e:43:7b:32:
a4:0e:5d:81:79:ab:4c:c0:74:1a:a0:a2:37:60:84:c1:ac:08:
51:39:14:02:04:7c:64:e7:f3:8b:a0:3b:15:09:74:68:4a:48:
3d:bd:0d:61:ce:17:e3:37:9e:77:ca:41:06:b6:69:4d:f4:3c:
ca:be:df:04:b7:3b:a8:1a:bd:80:00:4f:89:d2:70:2c:d4:19:
6d:7b:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:25:06 2025 by rpki-client