Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: dYK/d2ph0JxChoCqgwiShOgX0j+OGpDZivR3XxeZgxM=
Subject key identifier: CA:AE:94:CA:71:A9:6F:41:53:4B:23:F4:7D:A5:A0:F7:33:18:11:B9
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 0197469DEDBE82F674B5ADD07BE2C74ACEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0C56
Signing time: Fri 06 Jun 2025 19:00:44 +0000
Manifest this update: Fri 06 Jun 2025 19:00:44 +0000
Manifest next update: Sat 07 Jun 2025 19:00:44 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: OEfNGUhSpNvkplBwCvaeiNUU2591V5qixKGUgP51l5o=)
2: eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa (hash: o8SV6r5/m90uv9RNHtmHfhH9wPKwfjIhitnoqSV/JH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ed:be:82:f6:74:b5:ad:d0:7b:e2:c7:4a:ce:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Jun 6 19:00:44 2025 GMT
Not After : Jun 7 19:00:44 2025 GMT
Subject: CN=caae94ca71a96f41534b23f47da5a0f7331811b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:24:c1:7c:25:1a:54:0b:b1:3e:51:81:3d:
f7:5f:19:2d:c1:6b:11:8b:1e:d4:b6:f2:8d:82:87:
12:98:46:95:39:f7:41:cb:12:9e:ff:cd:72:78:56:
92:b2:35:45:d9:48:44:28:40:c1:a0:85:ff:1a:6b:
f0:e0:2e:cb:5e:3e:61:14:ad:1a:7f:d4:69:68:3b:
bb:ce:8e:91:c5:a8:3d:e4:15:71:e7:c6:05:d8:57:
fe:67:ca:cc:51:99:ec:52:1c:62:16:05:6f:aa:aa:
e5:94:93:5e:11:e6:ff:72:7c:fd:ca:40:99:7f:80:
8c:3c:5b:2f:14:51:6a:cd:a5:99:ae:c0:93:de:f1:
b0:09:20:66:85:7b:7d:24:1b:cf:cd:e8:2c:09:1a:
46:48:7a:a8:52:9c:c6:92:a5:05:9d:27:03:9b:a0:
63:c8:01:8c:03:3a:f3:a2:8d:02:a8:61:15:73:5c:
9b:30:0b:ec:26:38:9c:2e:59:2b:a8:e8:c7:52:db:
33:c7:5a:fc:6a:b1:2b:d3:cd:8f:e3:87:a7:f6:53:
1f:4c:0c:11:6a:83:2f:a6:ae:2c:f5:8f:a4:30:5c:
3b:8e:66:d4:29:ac:df:31:d8:cf:b3:6b:bb:8a:19:
11:bc:96:28:9a:95:f4:50:3a:99:b6:46:b7:6b:4f:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AE:94:CA:71:A9:6F:41:53:4B:23:F4:7D:A5:A0:F7:33:18:11:B9
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bf:51:df:69:6d:ca:46:90:55:5d:81:01:cf:f7:1b:e6:a3:
84:94:29:dc:68:18:4d:c9:0e:8d:6c:f0:4a:7a:99:8c:aa:6e:
50:13:af:41:bb:5b:d0:7d:99:d5:a2:09:15:f4:72:c9:d2:b9:
f9:31:16:f6:99:e0:d4:38:e8:ff:5a:36:67:6f:3a:1d:1a:dd:
e4:d0:70:21:60:d5:07:56:a3:b7:c3:c1:4f:91:3f:c6:68:58:
c8:8f:0a:86:a5:9e:ed:4a:9a:2f:2a:89:ea:11:27:9d:57:b5:
59:fc:51:90:0d:e6:68:bc:a3:fc:a2:7c:fd:4d:ad:8b:33:07:
97:26:06:02:51:97:15:1e:0d:da:c2:7a:7a:ad:9b:2b:f9:59:
dd:b4:ca:81:aa:38:cf:d9:1d:27:0a:68:92:78:0c:dd:0c:52:
58:64:94:79:50:51:5b:5e:6c:e7:f3:7c:fb:d8:60:53:62:41:
e1:d8:dc:fb:84:a3:5d:b6:50:ee:ea:87:e9:b1:22:e9:73:68:
ac:7d:66:12:db:b6:6a:8a:2e:d8:43:98:6e:f4:2f:5d:5c:c7:
a5:40:83:94:89:a2:a7:73:f6:52:cf:6f:44:9e:50:97:f0:ef:
08:41:35:52:6a:46:c8:ff:41:12:78:b6:a0:dc:1a:a5:b3:11:
26:d4:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:01 2025 by rpki-client