Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File: HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier: GAgL++j/AcN5l7AMLOIzsXWwNleMdzFJ5B8v6LOL8jc=
Subject key identifier: E4:41:23:50:B0:BE:63:23:6A:99:FD:BF:40:8D:28:26:48:DC:06:57
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 0196AFFCB285D38CFA0C11967E8E497E4938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 13:01:35 +0000
Manifest this update: Thu 08 May 2025 13:01:35 +0000
Manifest next update: Fri 09 May 2025 13:01:35 +0000
Files and hashes: 1: G0-RDDt_Q2lP0Ew3poyGeMZve3U.roa (hash: LkKmmsoeH2tMjWHQsJIhgAzVX6WvQGsEQCrntj06Zuc=)
2: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: V4jyrsZXTX0k1EmLakbCHfsmTsZ3PkIA58TC5ACatHg=)
3: JrMu8Fv-EJ0gYHcDKiU_A3eevzc.roa (hash: 6s6fSOnj2fawBTt5pakrIRbKDkLV0dgDjLyUP/ka7Zs=)
4: sZOw6ZmAV-eW5usk1RjXBfJwu3k.roa (hash: xYRWDuxjHSuoMKKmk6k/DnQlZPxerY0wU1cLVyqv9fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:b2:85:d3:8c:fa:0c:11:96:7e:8e:49:7e:49:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: May 8 13:01:35 2025 GMT
Not After : May 9 13:01:35 2025 GMT
Subject: CN=e4412350b0be63236a99fdbf408d282648dc0657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:9e:9b:8b:87:17:b0:d9:9a:64:cf:f8:b4:
1e:b0:64:1b:11:05:31:32:32:db:72:ec:c7:f2:43:
d1:88:65:95:59:73:7b:9c:ab:20:1e:81:ea:94:24:
f8:d6:73:3d:5d:3a:26:09:f8:20:b4:e3:74:c2:ef:
1f:b1:e9:05:96:6d:e1:60:ee:ec:ed:66:c8:d6:53:
ce:bb:4c:d5:16:1f:68:af:d6:a0:dd:b4:ae:74:90:
40:e2:44:0e:cf:78:bb:64:e2:91:68:14:9c:9b:58:
03:d4:58:e7:d8:1b:f1:9c:6c:2a:a0:d6:e3:ec:0e:
b8:b4:15:56:14:4b:c2:03:f1:e4:c9:b2:28:0b:77:
bf:9c:25:cc:89:e1:43:9a:f4:32:8b:14:f0:e4:35:
3d:9d:61:09:da:6c:69:73:f5:2c:d7:74:eb:8c:10:
87:e4:a3:54:cc:28:3a:7e:d7:74:99:05:a8:db:08:
10:d2:84:cd:a8:0d:3d:19:c8:42:4f:7b:48:65:5f:
f1:ac:38:12:7b:e2:d5:8c:7c:ae:66:5e:30:80:83:
1a:05:7d:14:fa:02:91:b6:4a:08:70:41:77:29:fe:
ed:cf:64:cf:02:4c:d2:f2:ee:4a:be:9f:c0:b2:84:
a7:48:08:8a:b5:a4:2e:cd:4a:8a:75:4f:43:34:37:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:41:23:50:B0:BE:63:23:6A:99:FD:BF:40:8D:28:26:48:DC:06:57
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b4:22:c8:45:ed:0d:be:21:ff:5f:b9:6d:ac:0f:ea:8e:5d:
a6:c7:15:34:4d:fa:9a:80:cb:46:03:18:01:94:44:9f:1e:b4:
34:48:60:39:3a:b2:86:5a:fa:1c:f2:4d:3b:23:c3:b2:f8:0b:
73:d6:16:28:4a:43:ad:36:bb:a8:40:7a:58:26:7e:5a:93:a0:
13:34:b2:b9:fe:69:2a:65:37:84:9f:af:58:a5:bb:26:f8:fc:
b9:e6:c9:b6:aa:77:4c:7c:60:6e:a1:9b:16:3d:6d:59:65:7e:
45:a8:57:82:aa:07:e7:65:01:38:d1:3e:db:58:a6:56:5d:65:
7a:86:33:4b:22:82:d5:38:79:aa:3a:a4:95:09:f0:0a:8a:c3:
4e:e7:c2:58:0f:cb:ae:72:f7:61:cd:93:a9:c3:9f:23:ab:ba:
42:36:16:bd:c3:45:bd:85:2e:42:f5:1c:47:bd:75:fe:dd:00:
2d:fc:cc:0e:f5:72:af:a7:fe:42:91:eb:62:08:6b:f4:f3:c2:
fd:13:8f:86:41:45:dc:f3:e0:7a:67:ee:e7:26:c1:03:93:41:
6b:b9:db:e5:07:f8:bf:96:75:78:c8:e2:43:e6:88:7e:79:b0:
70:87:42:5b:4a:11:d1:86:57:7d:8c:62:e2:b3:cd:58:83:62:
ec:e0:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:28:48 2025 by rpki-client