Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: SaftvTYZ7yaFN4MM7xmDbJ5DpgfNbqyH/GcpNo3ySSY=
Subject key identifier: 93:11:A4:0F:44:7B:A8:66:F0:A3:1E:DE:E3:F0:2A:D8:64:29:DD:95
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 019645C457B91916343A80370271F395A00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 22:00:17 +0000
Manifest this update: Thu 17 Apr 2025 22:00:17 +0000
Manifest next update: Fri 18 Apr 2025 22:00:17 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: AkRLWbWiN6favkZdoc8z/FSwEF3pV/NN74U7Gv8q9EM=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:57:b9:19:16:34:3a:80:37:02:71:f3:95:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Apr 17 22:00:17 2025 GMT
Not After : Apr 18 22:00:17 2025 GMT
Subject: CN=9311a40f447ba866f0a31edee3f02ad86429dd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:b9:bf:7b:df:b9:f2:0d:b5:20:55:65:b9:
92:b5:73:44:69:7d:22:a7:bd:2f:10:ca:e7:52:d0:
01:b2:90:21:c0:ca:a6:cb:43:ab:14:e5:b7:0c:67:
07:5a:42:4e:4c:be:59:7b:93:5e:9f:c0:f4:93:e9:
67:a1:23:33:d3:bb:c2:81:06:ca:b7:9f:5d:6d:e3:
53:3c:9a:12:0b:72:bc:34:0e:01:fa:e3:d2:a6:b6:
99:af:9d:f2:a0:34:7b:95:4e:05:d4:e2:4b:e1:9f:
cf:f4:ce:e4:cd:73:bc:dd:9e:c1:82:34:15:11:1e:
5f:f5:3a:85:3d:74:3e:cd:cf:38:b1:dd:69:b2:f5:
73:aa:dc:78:8b:f7:5a:1d:be:28:fe:70:aa:e7:0c:
49:12:77:e4:21:39:50:a0:28:61:fc:33:73:f9:21:
af:db:49:a4:b4:65:c9:57:45:54:8c:35:e8:08:d1:
89:18:53:73:a1:ee:2b:1f:88:b3:71:46:77:5a:76:
fc:9e:2f:fd:d5:5e:0a:6b:63:4c:47:56:bf:50:58:
08:f5:83:9d:38:6c:4c:cc:d5:fa:1f:d1:80:2d:b2:
67:8a:f6:d5:ea:69:2e:97:75:30:51:68:06:90:0b:
02:cc:9c:f3:73:84:11:95:3f:b4:52:80:40:14:3d:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:A4:0F:44:7B:A8:66:F0:A3:1E:DE:E3:F0:2A:D8:64:29:DD:95
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e7:33:5b:ad:17:e3:ac:d3:81:44:47:e4:96:12:a9:30:79:
a5:db:73:c6:de:4f:7c:df:42:9e:0e:4b:c5:4a:d1:1f:51:2a:
19:83:80:96:f3:7a:57:1a:f0:5e:10:5e:65:2e:9f:4f:36:d5:
29:15:3e:0e:af:3d:36:e8:ea:6c:c9:94:79:09:8e:00:32:63:
e1:18:7d:46:49:96:a7:d0:97:87:32:67:26:a8:c6:d3:10:b8:
5b:db:33:95:b7:48:80:48:22:94:0e:5b:56:40:f6:45:fe:4f:
2b:38:99:57:4e:04:9d:e1:df:37:96:54:54:db:ad:f6:ca:4d:
25:55:fd:6e:47:c3:81:0e:ce:a8:18:fa:93:7c:24:fb:c5:37:
95:a4:fb:5a:23:bc:29:44:e7:05:5d:61:82:42:15:69:ab:96:
2e:1d:51:da:26:d1:ec:ca:5e:25:cf:b2:82:64:ee:fa:8c:aa:
23:9a:a4:38:4a:9e:d9:44:79:c8:a8:c1:56:9d:47:85:97:7f:
d3:25:36:9b:26:d7:98:d9:c6:8b:06:2a:5f:77:87:04:63:79:
6c:09:43:57:b0:de:9c:21:cb:9e:be:87:2f:5d:c6:49:4e:36:
a6:4d:eb:be:96:c6:89:6c:d1:77:4d:12:82:98:4d:53:fc:25:
68:99:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:45:11 2025 by rpki-client