Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
File: uwKqn6RfyXvbLm3I_Ap_A3HITek.mft (raw, json)
Hash identifier: nH+iFJJrlAwCEXtMNQZCgv4iJq4hEHoEJRTqHpBn4Oo=
Subject key identifier: 09:E6:38:13:88:10:E8:89:D1:17:BA:67:B8:52:E5:A5:E6:BB:12:24
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial: 0196BB92FFF1DDA748B4DE62C6130BF6A06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
Manifest number: DE
Signing time: Sat 10 May 2025 19:01:35 +0000
Manifest this update: Sat 10 May 2025 19:01:35 +0000
Manifest next update: Sun 11 May 2025 19:01:35 +0000
Files and hashes: 1: R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa (hash: ir5koZmhGGNuMOajWDB8hvuKf0qBoIQa1qm6cPf+lx4=)
2: uwKqn6RfyXvbLm3I_Ap_A3HITek.crl (hash: elrMOZ9fFlREJCEeekvn79r8OKSJR7tNGcUPc4Q55dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:ff:f1:dd:a7:48:b4:de:62:c6:13:0b:f6:a0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Validity
Not Before: May 10 19:01:35 2025 GMT
Not After : May 11 19:01:35 2025 GMT
Subject: CN=09e638138810e889d117ba67b852e5a5e6bb1224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:02:c7:26:ff:93:4d:e9:47:72:f7:21:2e:
eb:e7:1e:f0:ee:fc:ee:2c:25:9b:13:9f:e9:0d:02:
df:36:06:a2:b4:8a:2d:f1:34:d4:98:a0:ae:e9:ff:
56:c4:83:b8:a9:63:28:5c:20:7e:d0:22:74:83:2f:
45:15:10:a9:d0:34:ae:ea:62:7d:6a:0e:68:ce:b2:
e7:b7:cf:a7:b5:20:52:ba:8c:21:31:56:70:01:ba:
c2:e7:be:0f:35:fc:cf:62:c6:7b:d4:1f:32:3f:d3:
f9:f3:d7:f0:fb:f8:c1:3f:ea:4e:c1:9b:64:99:20:
ee:8e:8c:38:35:2a:ec:7d:32:aa:87:97:e3:50:d2:
95:c4:4b:87:ae:86:77:e2:24:d8:78:85:ce:42:e7:
4d:e1:1f:e6:bd:ff:5e:5a:e7:af:a7:ac:fc:72:fc:
1a:2d:8b:9d:aa:ec:ad:9f:05:b9:5b:f3:f4:bf:16:
9d:68:b1:06:fd:87:31:41:c3:88:be:e2:ec:6d:6c:
86:cc:a5:81:e3:66:f8:7f:81:e9:c3:34:ad:f1:7f:
8b:8e:40:83:b3:3d:da:bf:50:1f:6f:ba:38:7f:4d:
e4:51:e8:6c:f7:b0:fe:64:db:be:db:6f:65:21:53:
9f:8d:1c:f3:e9:65:e7:d1:81:0d:6a:40:57:f1:af:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:38:13:88:10:E8:89:D1:17:BA:67:B8:52:E5:A5:E6:BB:12:24
X509v3 Authority Key Identifier:
keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:6e:fb:b3:f4:b3:58:4d:ce:c6:cd:23:2b:90:97:5e:72:f6:
9b:3b:7d:47:73:0a:4f:9e:83:1a:bb:f6:38:7b:6e:f3:d1:88:
cf:a8:92:da:c6:68:36:5f:b1:cd:15:46:2b:d6:af:18:52:e7:
f5:55:85:cf:65:ed:43:33:af:df:50:0c:76:56:75:60:16:1d:
4a:b4:53:5c:3a:05:ce:13:7f:c9:e0:69:a7:e2:2e:24:06:ec:
5a:69:67:ba:5f:9e:0b:51:98:38:d0:79:f7:66:80:90:15:57:
87:cd:c8:05:58:61:a4:46:3e:30:75:2f:a8:65:b2:1a:8f:02:
1f:47:1b:35:fe:af:b6:b4:14:7f:b9:f4:a7:c3:a7:10:ff:32:
62:74:33:15:fe:7e:13:39:30:52:b2:43:e4:d8:a5:55:f9:a6:
27:85:8f:9b:4a:07:eb:00:8d:85:b2:c0:80:30:64:a6:22:d4:
cc:1a:74:9d:3d:ec:f1:53:86:b4:e4:ad:02:31:cd:4e:43:3e:
6e:5c:73:d9:33:64:9a:e4:06:e3:80:f0:a3:a4:29:e4:21:ea:
62:9b:c1:36:b0:d8:66:29:69:b3:14:0e:ea:b7:0e:fb:b5:26:
e7:c9:78:54:53:6e:f7:38:a9:0c:4c:e1:25:4f:95:a5:52:69:
82:79:18:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:49:54 2025 by rpki-client