Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
File: HjXAaowG1d1k_nawkKPh4qSZbcg.mft (raw, json)
Hash identifier: tKtBIKI24KjAndjHrlMlvRv9j0yxGfXCxnZ6mZsBH10=
Subject key identifier: C8:88:48:3E:65:EF:D9:D5:CF:E3:80:D2:07:D4:84:90:51:36:D8:36
Authority key identifier: 1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
Certificate issuer: /CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Certificate serial: 0196545C25D3C022EFB3796A1F750DF36EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 18:00:47 +0000
Manifest this update: Sun 20 Apr 2025 18:00:47 +0000
Manifest next update: Mon 21 Apr 2025 18:00:47 +0000
Files and hashes: 1: HjXAaowG1d1k_nawkKPh4qSZbcg.crl (hash: y8Yp5Ado9kq71wfZR1o0cdTayy3xMRVh44cAaldQR1I=)
2: R12AgdneGd4IinauuD2IQCzaNdo.roa (hash: 0Vf4DfoprRpqIbS3viTk0elhBi8JnCMTTU8OHnzZBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:25:d3:c0:22:ef:b3:79:6a:1f:75:0d:f3:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Validity
Not Before: Apr 20 18:00:47 2025 GMT
Not After : Apr 21 18:00:47 2025 GMT
Subject: CN=c888483e65efd9d5cfe380d207d484905136d836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:84:3f:3e:60:50:65:b0:33:77:87:11:0a:
77:81:e5:f2:53:cf:1d:5a:e4:24:d4:c8:6d:4a:1a:
d5:a6:91:8a:87:2f:18:95:b3:4c:d0:61:47:25:fc:
89:fd:16:f4:c3:db:ef:b3:71:61:96:8c:23:71:57:
bc:3d:79:0c:9e:6e:89:44:8f:2c:a7:d7:82:44:e4:
09:05:58:a8:7b:cd:80:08:e7:be:97:fc:35:74:47:
e9:58:05:9c:b2:6a:25:f9:a4:dc:dd:67:ad:bb:06:
81:e9:5b:41:40:eb:ce:49:ec:ad:e5:12:87:fe:f9:
33:8c:7d:96:6a:ce:fa:c3:02:9a:ff:3e:45:26:c4:
9d:9b:59:29:53:bd:3c:3d:b3:7b:8b:af:7f:d8:29:
f7:00:70:53:95:01:37:6c:37:2e:b6:ea:a2:27:48:
d7:37:28:20:c9:d5:73:84:18:c6:8c:c6:85:07:9f:
03:f2:17:91:56:a7:ad:a1:83:40:fe:b0:22:8a:8a:
02:4f:ff:02:c1:aa:1a:7c:b9:85:71:c5:01:f9:7e:
ff:a8:28:a1:75:03:c9:4c:cb:ed:45:05:46:77:40:
fa:86:ea:7d:b1:aa:b2:96:1c:96:57:42:83:fa:9c:
31:a4:76:f8:09:6e:08:48:c1:ae:ab:07:16:da:91:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:88:48:3E:65:EF:D9:D5:CF:E3:80:D2:07:D4:84:90:51:36:D8:36
X509v3 Authority Key Identifier:
keyid:1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:09:fc:b3:e6:6e:e3:59:1d:8c:bb:ae:ef:1a:66:8e:84:30:
3d:a6:59:f1:0a:7d:2d:33:cf:f2:a0:5a:52:01:b3:72:9f:60:
8d:d1:50:a7:4a:c2:57:51:4f:6b:0a:f2:d3:95:64:52:b6:0d:
30:e2:18:fa:f0:25:d1:dc:42:2d:ce:af:75:aa:65:2d:10:fb:
95:d9:0e:86:ed:64:7e:ab:5a:4b:c6:c9:d9:d9:af:6d:0e:79:
55:de:be:8e:bc:97:65:21:c8:7d:7b:fd:83:66:15:d1:1e:70:
02:82:4e:e2:60:66:b7:38:4d:b4:e7:3d:fa:66:34:f1:54:24:
99:d6:1b:ac:b6:30:b2:f6:35:1a:3d:08:d6:78:25:0e:dd:48:
67:d8:96:5f:fb:29:89:4a:cf:f5:d1:7f:f8:e0:df:29:d1:3c:
f6:ff:bd:d8:f9:54:be:1d:9c:3b:37:30:6c:1f:b5:ab:78:0e:
d9:35:2a:3d:98:90:ef:fd:ad:d3:97:33:b6:23:61:ce:d0:44:
d6:74:82:9e:15:32:f5:a6:40:97:43:74:8b:e8:6d:56:b8:25:
d8:40:9e:6f:d2:9e:34:68:f9:98:72:5f:7b:70:51:ea:12:56:
0b:5e:de:24:90:e7:08:2b:23:7f:fd:37:85:22:b4:58:53:c9:
b2:6d:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:29:46 2025 by rpki-client