Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: pd9rcztFI1giBsiROTcCLHOq7RWV7Ex/2frGro3n3AM=
Subject key identifier: 44:33:B8:70:93:46:87:2B:0F:B6:EC:FC:A1:4C:97:FC:68:58:34:BE
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 0196BBC8D2DF8744C0E2BF9B245B729439A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 0619
Signing time: Sat 10 May 2025 20:00:22 +0000
Manifest this update: Sat 10 May 2025 20:00:22 +0000
Manifest next update: Sun 11 May 2025 20:00:22 +0000
Files and hashes: 1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: 985UvW+DyIPyTgplo5OYbCZ30ZNBRPr7ki4Eu+WiCxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:d2:df:87:44:c0:e2:bf:9b:24:5b:72:94:39:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: May 10 20:00:22 2025 GMT
Not After : May 11 20:00:22 2025 GMT
Subject: CN=4433b8709346872b0fb6ecfca14c97fc685834be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:99:5c:c4:25:ee:c3:36:6a:9e:9c:df:29:
f0:c7:10:f2:32:bf:a2:3c:20:e9:fa:3f:23:fe:dc:
01:d0:cd:6d:27:98:8f:c6:d5:0e:05:fa:08:e8:8f:
4d:4f:e0:5d:ad:9b:d5:b7:c9:7e:c0:23:ad:f6:b5:
d9:c5:00:0a:a9:1b:b6:ad:9b:c4:3b:55:de:59:b2:
02:ed:7a:5c:9f:f0:3b:b8:9c:57:0b:36:69:df:b7:
ea:7a:d0:7d:f6:c5:a3:9c:7d:d0:66:85:80:b2:34:
89:96:29:17:eb:49:91:34:2c:c8:1c:14:b7:4e:28:
51:2a:76:6b:54:bb:42:d2:77:93:f2:36:61:9b:7b:
47:45:bc:31:05:05:26:65:c5:f0:d4:eb:bf:24:33:
df:f3:3f:8e:08:dd:11:26:62:5b:b9:d7:fd:c9:c1:
b8:fc:e1:80:a3:14:41:e7:b9:59:ab:e9:e2:c7:d9:
98:2c:69:a4:de:ca:74:c0:62:3c:70:bc:f2:3a:59:
ab:d2:e3:28:78:7b:c4:1a:12:70:e9:a1:e5:c8:49:
25:bc:d0:69:74:a8:db:96:26:51:12:ba:a5:3a:d6:
d5:06:e5:d5:f6:38:55:cd:e3:2c:d8:8f:cb:fe:bf:
1c:e6:f1:3f:a0:0c:ce:78:e6:4c:8a:63:6c:05:43:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:33:B8:70:93:46:87:2B:0F:B6:EC:FC:A1:4C:97:FC:68:58:34:BE
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7e:f7:35:26:fc:57:62:bc:62:04:9b:af:d1:fc:e9:7b:2b:
57:61:fc:06:c1:1c:12:4d:df:3b:cf:4e:43:57:62:72:d3:c7:
fd:63:0f:57:3e:3c:e1:9e:36:9d:1d:59:c0:f8:6c:67:06:5f:
bd:e1:80:38:c5:f6:37:c8:cc:b2:00:18:db:c3:9f:61:68:a1:
2a:7e:ac:d6:cd:56:5a:3f:10:f0:38:b2:e4:53:84:8b:61:b0:
2b:1e:35:bf:5f:f9:99:a4:9b:55:f2:69:9d:4d:94:ff:3f:4c:
41:eb:20:c7:f8:7a:4f:66:f8:dc:1a:ad:f6:00:f0:9c:c1:17:
cf:4a:bc:65:4f:cf:24:34:53:95:29:90:18:51:0e:5e:e4:02:
9c:0d:fe:d1:be:f7:55:8d:ae:61:15:9f:05:2c:b0:24:8e:ee:
3b:97:86:e5:fc:f8:29:c3:d7:6d:82:07:ea:ab:73:84:3a:44:
7a:bc:f9:4f:32:78:64:fd:ba:16:ff:d1:67:cd:c8:33:a6:9b:
d6:d6:52:aa:17:e9:2a:81:e2:8c:10:b4:f2:ff:07:b6:9d:81:
eb:22:a1:37:c3:f2:4d:aa:be:1e:b0:67:1c:2a:97:66:8d:fb:
a3:e8:a4:a9:28:f8:5f:4a:f3:5b:6f:49:78:a8:c9:70:19:68:
e7:ec:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:24:14 2025 by rpki-client