Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
File: _HlIirThrA9L1GfStNNiHGsY7qA.mft (raw, json)
Hash identifier: 2wBsn/6unNT85HKfLlReyqN4cVboqca00ZpIfxau6WQ=
Subject key identifier: 0B:8A:41:F3:98:5A:86:02:70:B9:3C:3B:10:1D:CD:DF:F2:F6:8A:2C
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 01965B399B4B0C7F0CE896CB0D1246A1E14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 02:00:23 +0000
Manifest this update: Tue 22 Apr 2025 02:00:23 +0000
Manifest next update: Wed 23 Apr 2025 02:00:23 +0000
Files and hashes: 1: Fxxp-LRkqvfLrMmhXHpze09Zypk.roa (hash: VeSras0PkAsQ1iWlGxVtQbCw1RAH/pLCo7L2bleBamo=)
2: _HlIirThrA9L1GfStNNiHGsY7qA.crl (hash: nlhCQ6AYfLHFZqCOvF4pq4sN0PXCD5aXMLXCoONX3uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:9b:4b:0c:7f:0c:e8:96:cb:0d:12:46:a1:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: Apr 22 02:00:23 2025 GMT
Not After : Apr 23 02:00:23 2025 GMT
Subject: CN=0b8a41f3985a860270b93c3b101dcddff2f68a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:73:0c:d4:d1:b7:39:5c:db:24:a9:f4:18:
07:27:5f:fc:af:2e:df:dc:b0:6f:fd:62:73:27:55:
1c:b6:2c:dd:bf:60:b4:2e:a1:59:ef:32:6b:d0:d8:
7b:75:ad:83:63:72:83:13:ff:86:8f:12:25:7e:8e:
0a:5a:2b:84:3d:3e:46:84:04:e0:1d:a2:ab:a7:4a:
af:fb:f7:6e:51:7d:22:b2:fd:f7:61:cc:13:bb:2f:
7f:bf:a3:fd:63:38:2f:c1:95:71:cd:bb:43:7b:70:
b6:5c:6d:1f:54:d3:76:62:1b:f4:50:73:ce:35:3c:
01:49:9c:fb:3f:b7:26:13:b6:2f:e3:85:bd:0c:f1:
c8:ae:3a:84:3e:91:20:e7:b7:86:b2:5a:dc:cd:fe:
1a:46:88:27:c6:3c:5b:09:38:33:0a:61:2b:49:82:
8f:f4:36:31:a5:67:e4:22:cc:3c:b6:b9:af:e2:58:
6b:61:5f:5c:e4:4a:14:ea:0e:a4:cb:02:68:ea:3a:
91:04:5a:34:b6:99:e7:11:4b:9f:db:8d:5f:20:c1:
2b:11:7b:b3:3d:04:50:2e:c6:b7:08:e5:12:86:b5:
88:99:3b:b2:dc:a1:39:fe:3a:d1:de:23:a2:59:77:
4e:cc:c1:88:7e:e5:2e:30:56:59:ad:7a:0e:73:cf:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:41:F3:98:5A:86:02:70:B9:3C:3B:10:1D:CD:DF:F2:F6:8A:2C
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:85:d5:18:45:57:64:fd:19:83:3a:a3:e4:b6:a1:5d:94:18:
81:54:ce:a6:fe:40:2b:23:87:1c:0b:3d:f4:aa:54:b6:47:d2:
71:b8:5d:77:9f:0c:21:46:1b:5a:e4:9c:18:f7:1a:ea:ee:e4:
61:ff:67:64:76:61:f7:60:ff:31:39:0f:9f:6e:5b:c7:a8:1e:
e3:c4:87:bc:c7:91:ba:f1:95:88:fb:b0:ed:75:3e:01:f0:ff:
e6:80:d5:c7:e2:c5:ff:e9:e7:b2:95:88:87:37:7b:f2:0b:47:
77:56:aa:ab:87:84:6f:17:8e:ec:14:bb:e7:70:cf:17:0f:4c:
57:53:8c:f6:2f:d8:e4:d2:b4:7c:52:ad:62:af:c7:69:f0:b3:
40:2e:8b:18:65:c8:0a:06:39:81:31:b2:7b:2d:df:55:9d:b8:
a9:a1:e3:2c:dc:31:39:80:f3:e6:db:02:d4:90:02:bc:11:30:
f2:a0:62:1d:ea:bd:be:48:34:4a:f5:5b:bf:87:85:b0:29:59:
48:71:d6:d3:61:57:fa:d1:7e:cf:35:3f:24:98:3c:8e:bc:c5:
52:cd:aa:27:f7:e5:9e:3d:89:70:a0:78:3c:d2:9c:7f:04:4c:
29:69:52:26:b7:39:c1:27:3e:61:05:67:f2:79:88:4b:f0:59:
50:09:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:05 2025 by rpki-client