Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json)
Hash identifier: ZS7YTb8mE95grWejcZ2kkEwEyvnEMexJwbpTnC4uPIE=
Subject key identifier: 6F:EA:C8:FE:3D:E8:2B:F3:E8:D7:03:56:80:7A:DD:78:81:AA:D3:B8
Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Certificate serial: 019655388AB56AAEB6B3D03E55A559554F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
Manifest number: 102A
Signing time: Sun 20 Apr 2025 22:01:30 +0000
Manifest this update: Sun 20 Apr 2025 22:01:30 +0000
Manifest next update: Mon 21 Apr 2025 22:01:30 +0000
Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=)
2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=)
3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: nwOX3zIB2aWSMzb0jaBPbXwggoG8iNRQxDHq3blIhJY=)
4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:8a:b5:6a:ae:b6:b3:d0:3e:55:a5:59:55:4f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e
Validity
Not Before: Apr 20 22:01:30 2025 GMT
Not After : Apr 21 22:01:30 2025 GMT
Subject: CN=6feac8fe3de82bf3e8d70356807add7881aad3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:f5:0b:d3:b1:d0:4b:72:5d:36:f7:e1:19:
c0:7c:30:d8:ba:35:f3:37:07:a6:df:2f:80:ec:bc:
26:cd:d5:d5:b4:5b:3f:54:03:db:38:53:e2:6b:6f:
c4:e9:f9:c0:9c:8b:8f:3a:3b:74:e0:ae:47:3e:21:
27:ed:25:4b:fe:6b:24:e7:8c:39:f1:fd:66:15:09:
20:45:eb:5c:34:64:d8:61:9e:b6:f8:7c:90:f9:a9:
7d:13:44:72:2a:e8:cd:2d:4e:88:7f:9f:8d:34:33:
ec:30:84:a4:0e:f4:d4:ce:98:4a:16:a5:96:6e:27:
21:e6:71:38:69:fe:40:02:8d:d3:f2:a1:04:53:de:
43:0d:79:24:03:74:c9:78:7c:8b:4a:ff:0f:b5:57:
9d:47:e5:9e:17:64:ae:78:d0:e8:15:08:58:cf:15:
f2:4e:b6:be:78:78:41:cf:5a:67:78:7d:a0:55:85:
9b:66:dd:8f:a9:a9:f1:c4:c8:87:2e:16:bc:b9:cf:
f6:f8:0c:40:29:ef:38:32:2c:44:2c:65:cd:c7:e6:
c6:68:11:74:f5:d5:b4:bc:5a:55:35:90:c4:a0:f8:
2d:87:e3:30:f7:95:60:08:60:b5:97:9a:14:fc:c3:
b8:92:3b:b9:5b:a6:49:4d:ba:d0:f5:0a:05:43:b8:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:C8:FE:3D:E8:2B:F3:E8:D7:03:56:80:7A:DD:78:81:AA:D3:B8
X509v3 Authority Key Identifier:
keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:47:88:3d:3a:f3:88:8b:71:21:94:9c:83:de:18:13:f0:e7:
84:6f:0a:86:49:be:ad:ca:04:c7:3b:97:eb:f1:b9:a3:a0:e1:
77:1f:bd:95:21:27:a3:e0:e4:c7:8d:42:74:5c:59:15:b7:15:
7c:30:fe:62:ea:ea:3b:a9:e7:f6:20:dc:28:67:67:e8:55:19:
24:d3:4f:21:2c:55:d1:a1:d1:72:44:14:a3:95:e8:0a:19:9e:
42:b1:c0:be:6e:a9:e1:2b:3f:f1:8c:3f:9d:7e:44:02:07:f8:
2f:44:91:07:05:cf:61:71:79:76:68:65:ce:cf:46:77:a9:9e:
67:f8:1d:57:2d:66:cc:99:20:f5:ee:79:ef:eb:24:63:76:60:
6a:be:68:9a:d4:b9:bc:ad:23:2f:b3:e6:0e:2c:1e:4b:16:28:
5b:19:1c:fa:ac:25:9f:0e:ff:d4:c4:42:0f:00:03:aa:ea:11:
c1:03:a0:33:7d:fc:76:ef:f6:6f:c4:88:21:09:76:ec:1b:7b:
6b:62:e0:b0:03:75:2a:77:6c:24:14:2c:93:0e:45:48:da:2b:
b4:27:ea:cf:3d:f4:53:7f:41:ec:ee:29:d7:6c:ef:09:1a:65:
d0:4b:cc:49:4c:28:8c:a5:7c:fd:55:a0:29:4b:04:25:e8:48:
fa:73:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:57 2025 by rpki-client