Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File: HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier: V/HtQlg9v8cVmVxlBz7LNlsG/g+7yEyY5pFRoUYF1LA=
Subject key identifier: CA:61:57:D8:68:46:82:98:34:99:1B:9D:2A:E9:15:28:14:55:6D:4E
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial: 01965F84AB34C97C49B7FAC3A8A260BD16DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number: 1509
Signing time: Tue 22 Apr 2025 22:00:52 +0000
Manifest this update: Tue 22 Apr 2025 22:00:52 +0000
Manifest next update: Wed 23 Apr 2025 22:00:52 +0000
Files and hashes: 1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: 752v6lJN/8NiHiv/PAsr58Ys8HSBGHA22y0KpO1kl/w=)
2: HNpMhKMf-UOKB_2xrTd5Ah5Jh4E.roa (hash: wTidaPS7G17Hoeusbm7EV9pgsdks7oYQI4PUUl46YEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:ab:34:c9:7c:49:b7:fa:c3:a8:a2:60:bd:16:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Validity
Not Before: Apr 22 22:00:52 2025 GMT
Not After : Apr 23 22:00:52 2025 GMT
Subject: CN=ca6157d86846829834991b9d2ae9152814556d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:e5:90:cd:30:c0:73:02:ca:dd:ee:25:73:
8f:a1:23:af:2b:f1:a7:25:26:58:d1:80:64:ac:00:
01:fd:5e:82:09:70:0e:ae:37:d6:a2:f0:99:88:f4:
03:e8:27:91:b8:58:f5:9d:e4:c4:f1:e2:5a:4a:b5:
0b:84:01:32:92:0b:0d:43:78:c2:3d:b6:68:6a:65:
62:8e:4c:1e:0e:e1:80:bd:d5:26:b7:ae:5e:85:63:
12:59:a9:48:bc:3a:55:95:6c:cb:6d:fa:49:30:89:
83:5c:5f:d6:07:6b:21:df:40:5f:3c:8f:09:d6:63:
86:0b:15:86:4f:80:2b:18:ea:d4:fd:1d:81:3a:47:
15:d6:65:27:51:40:38:1f:40:7e:95:6e:7a:69:b6:
c0:66:cc:e8:95:17:ce:87:ce:7b:2e:84:1b:dd:7c:
d8:23:f1:87:6b:3e:6d:1e:79:c1:f1:b2:97:09:42:
e4:96:1e:b5:da:4d:02:19:e7:dc:87:a6:93:01:45:
d7:fd:fb:3b:a6:07:9c:3e:48:2a:03:d5:9d:06:fb:
92:7e:a6:3f:0a:42:26:6b:3c:97:e7:75:96:46:a2:
7b:3b:4e:dd:a1:5d:07:d0:81:bf:49:c7:4e:f7:f2:
3f:cc:c2:57:c7:55:c7:90:9c:37:7b:05:1e:b0:e5:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:57:D8:68:46:82:98:34:99:1B:9D:2A:E9:15:28:14:55:6D:4E
X509v3 Authority Key Identifier:
keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:36:ad:23:c0:1d:f4:8c:59:0c:dd:07:4b:b3:4c:2e:5b:
5b:27:a1:d8:f1:53:db:bb:89:4e:c8:cf:1b:dc:5e:6e:13:f4:
de:42:77:4a:7d:ce:56:82:e4:e7:36:0e:f5:5f:52:17:50:62:
55:76:22:15:85:ad:60:68:56:b6:51:44:2d:3d:1c:f5:d2:0f:
68:a5:2f:6a:01:88:a2:f7:d6:47:40:7b:ba:e5:d3:15:aa:5e:
f3:86:f1:bb:8d:f2:a8:47:90:e5:6d:29:57:5e:c0:24:12:28:
16:dc:3a:ce:9f:4f:2f:52:f7:b9:12:fb:c9:09:18:12:4e:e1:
cc:bb:21:65:a7:1b:05:a3:6d:7f:91:f5:c6:2a:2f:94:35:4a:
b5:cc:3a:b4:2c:6d:1f:ff:5f:58:fc:c7:e9:c9:f9:7c:1b:cc:
c7:a5:11:8e:36:89:9d:6b:eb:55:3b:0a:d4:c1:d1:1b:f4:83:
20:a2:2e:8a:1d:46:bf:2f:29:1e:1c:61:6e:18:c2:d0:4b:75:
2e:c3:26:fb:92:7c:73:94:74:cb:96:9f:65:7c:9a:9c:4e:a6:
eb:1e:3b:4d:90:12:1f:ca:ed:73:cd:05:bb:64:e4:74:d1:52:
65:b9:d1:d1:56:84:94:f9:3e:5e:85:c3:71:44:e6:93:e2:18:
87:d2:b3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:29:29 2025 by rpki-client