Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File: HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier: bPCMZZM43+QxrFmvW7JZet8awJOBWhvvPlM0yUtZD2c=
Subject key identifier: FF:23:64:81:E6:E1:DA:96:0C:87:2B:9E:DB:6C:A2:31:F6:8E:35:DE
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer: /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial: 01964CA253BD95C8683DF26193C554D7EEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number: 128E
Signing time: Sat 19 Apr 2025 06:00:28 +0000
Manifest this update: Sat 19 Apr 2025 06:00:28 +0000
Manifest next update: Sun 20 Apr 2025 06:00:28 +0000
Files and hashes: 1: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: 5IgSCZGgSjprxYaYxZ7CgUdP2nt4yLGPoa9FnET/wZk=)
2: efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (hash: Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=)
3: xFzbq7zegADAXEC3JlJ8gW_VXDA.roa (hash: NRYhSLCd0Q4zIkCT1UgOQ1E2p+RPP3+6wGhkQgIto+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:53:bd:95:c8:68:3d:f2:61:93:c5:54:d7:ee:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Validity
Not Before: Apr 19 06:00:28 2025 GMT
Not After : Apr 20 06:00:28 2025 GMT
Subject: CN=ff236481e6e1da960c872b9edb6ca231f68e35de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:62:40:70:5d:97:50:9b:2b:60:3a:85:cb:
91:5a:88:2e:e3:0f:91:7a:89:f6:ea:9d:48:6d:a1:
dd:6b:69:03:b8:a7:25:b2:76:91:78:52:42:d9:d5:
42:e8:b3:50:be:96:d6:02:ef:53:aa:de:e5:62:14:
a7:39:57:ef:c2:61:ee:2f:8a:4e:1d:a9:07:a2:64:
6d:76:e7:33:f8:ed:de:21:cf:cf:f8:e6:45:3c:cf:
69:18:9a:2f:cf:fc:a5:99:3b:3f:7e:72:10:59:96:
42:fc:af:48:ae:9e:7b:f7:57:aa:d3:de:4d:b2:dd:
84:7c:ef:2e:cb:5e:db:ad:0f:43:0e:17:36:05:21:
c4:2e:82:3e:b5:b1:2c:00:89:9d:ce:2e:38:8a:66:
a2:cd:f9:1b:66:88:e1:28:de:82:0f:af:01:ee:d8:
ad:00:c2:35:2a:03:45:c9:36:2b:97:00:bb:d3:de:
7b:37:eb:bc:8b:cf:a5:e8:cf:85:3d:02:59:a5:7a:
48:b7:82:0d:75:b6:ea:c3:1d:14:bf:38:e0:3b:3b:
e9:ec:f1:ca:b9:5c:04:51:b7:23:ff:bf:6a:f5:c1:
4a:18:3e:14:b6:e0:c5:58:59:d3:4b:9f:2c:6a:86:
0c:df:37:00:ba:fc:ed:48:29:ba:bf:03:e4:d0:44:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:23:64:81:E6:E1:DA:96:0C:87:2B:9E:DB:6C:A2:31:F6:8E:35:DE
X509v3 Authority Key Identifier:
keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:68:1e:0c:09:7a:fb:11:b5:3e:34:23:f0:09:cc:cb:60:71:
04:f4:7e:52:29:64:30:90:6c:a4:ce:38:35:79:d1:9c:67:8e:
47:19:5a:8c:51:03:10:40:a7:72:93:c8:01:db:97:bd:fc:2e:
ce:10:17:4a:cf:87:32:29:ce:89:41:76:6c:d2:66:47:96:a3:
af:23:b2:b7:ba:59:f7:f6:f0:9d:3c:7c:01:a9:33:3c:e6:f6:
77:2d:b0:cf:e6:05:09:55:c2:87:1d:fd:bd:e5:34:e4:23:c8:
99:2d:44:78:c6:b0:06:70:66:34:7a:fa:91:d2:03:7b:46:32:
57:61:b0:a8:d8:02:9a:db:3c:b3:83:28:4d:ce:66:86:b5:72:
38:79:f3:45:16:fa:65:ee:cb:c9:c6:6a:72:70:b4:71:3c:12:
13:6b:d7:f1:3d:eb:57:80:48:4e:aa:f0:4c:6e:f7:5f:9d:51:
4b:ee:2d:90:6f:df:2b:a8:67:a2:5f:44:f1:56:5e:96:89:6a:
89:19:91:05:e9:d6:fd:3a:86:e1:5d:19:94:5e:9c:d8:fe:6b:
87:f9:32:0a:96:ee:26:f9:9f:8c:0a:5f:f3:3b:2e:98:ab:74:
8d:e3:06:e0:06:a9:0c:f1:76:bc:b8:05:de:2d:c4:a7:6c:55:
91:9b:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:10:42 2025 by rpki-client