Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: Ft7ctfpNN9VR/DutcWgGVqfpnSa8vVk2qO6xhwP2WQw=
Subject key identifier: 48:27:63:80:2B:58:C3:D3:BF:55:99:0C:05:E9:85:DC:9F:19:2B:91
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 01965424E849E4BAB8EDBF0AFA4B266ED78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 17:00:26 +0000
Manifest this update: Sun 20 Apr 2025 17:00:26 +0000
Manifest next update: Mon 21 Apr 2025 17:00:26 +0000
Files and hashes: 1: FjIahcKt09OuzmKTy1-sTrhxfJE.roa (hash: vdC0TpdFOFzZCc1CfiRmwTujlsmnztXNdvUzRtn8G+A=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: KkzErmIkdGMuSKO0Yd3nLj9siW8jn64m2YfbK9g/DMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:e8:49:e4:ba:b8:ed:bf:0a:fa:4b:26:6e:d7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Apr 20 17:00:26 2025 GMT
Not After : Apr 21 17:00:26 2025 GMT
Subject: CN=482763802b58c3d3bf55990c05e985dc9f192b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:33:8d:9b:8d:be:ec:12:90:07:a3:42:89:
41:0d:0e:ac:ea:ea:fc:23:16:46:0a:61:37:0c:79:
9a:6e:18:14:d6:55:a9:c1:e3:0b:cf:d9:3a:27:e6:
27:b9:df:a7:56:ed:e9:14:2f:64:7d:2f:c7:ed:b1:
57:30:85:6f:0d:31:bb:2c:44:95:14:78:46:72:f0:
bf:8f:3d:5a:81:4c:82:46:9c:1e:9a:a6:3f:32:a2:
e6:3d:b7:cf:09:f3:31:bd:cf:23:42:e7:fb:d7:3e:
3d:06:03:41:ff:75:ca:03:30:cd:3d:e5:a3:2b:7f:
5e:0c:15:24:b5:c3:6a:99:1e:6d:f8:a3:ea:94:e8:
5f:88:f1:83:58:f1:eb:e9:fb:04:09:08:35:99:1b:
4c:bd:68:e9:21:5a:d8:f1:dc:26:62:7a:a4:db:21:
22:a0:36:07:51:1c:7c:54:f7:dc:9d:2e:fc:dc:34:
94:f6:e4:00:3b:6c:48:15:c5:6e:c7:3e:70:ce:9e:
22:37:4f:ef:54:27:f2:3e:43:19:0c:2a:10:0a:40:
f2:49:8c:49:33:a4:20:8b:1b:c0:89:92:ae:1a:c0:
bd:e7:4d:51:eb:53:c9:c7:b4:88:29:b6:09:78:a5:
a6:81:f3:73:6e:54:96:4e:7a:53:bc:ec:fd:1e:fd:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:63:80:2B:58:C3:D3:BF:55:99:0C:05:E9:85:DC:9F:19:2B:91
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:36:0a:dd:ea:95:df:f9:8e:21:f1:08:3b:28:a8:17:16:
26:71:33:d7:4e:f4:ec:1b:23:27:25:76:b4:c7:35:57:a1:2c:
fd:c0:57:b7:68:95:75:01:3b:6f:43:4e:30:c1:2d:07:35:51:
61:9d:56:d9:3d:41:d9:1d:5d:f4:74:68:68:63:12:e7:b7:03:
4a:d9:49:f9:e0:50:94:45:f1:80:1c:4c:47:99:37:d6:39:df:
38:9d:70:16:40:bd:25:b9:43:33:2e:48:51:7c:19:fc:0f:b9:
ae:0c:f7:26:cd:4a:7a:fc:66:d5:0d:01:a4:4c:0a:37:a9:81:
5b:42:17:04:a5:ac:06:6c:08:bf:90:51:4d:15:34:f4:a1:b5:
9d:83:e5:63:52:e9:49:01:a9:14:c5:25:80:fc:3b:cd:ca:55:
26:8b:da:44:8f:97:0a:f4:b0:ac:5a:d6:c8:6a:8a:17:38:f2:
34:89:6a:aa:cd:f8:d9:2f:4e:5a:0c:d6:35:14:57:86:bd:7b:
0d:4e:47:28:3d:81:8b:f8:ce:4d:12:6d:59:92:99:99:e8:a2:
69:f8:a7:6a:0d:0f:8e:30:d7:07:25:43:09:6b:b9:1e:a8:66:
67:bf:8c:2a:f4:3e:fc:42:d4:85:6b:8d:24:76:54:a9:d6:e7:
16:72:44:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:07 2025 by rpki-client