
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: XLAMstsApYUmhrdk/9L0CYuM5gDByGEZ64qLkRKkCxc=
Subject key identifier: 65:17:2C:61:82:2B:9E:94:25:2D:08:B9:D8:14:65:58:BD:88:E5:05
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 01964443EE45A4F869C60A55FF362E98C9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 06CF
Signing time: Thu 17 Apr 2025 15:00:24 +0000
Manifest this update: Thu 17 Apr 2025 15:00:24 +0000
Manifest next update: Fri 18 Apr 2025 15:00:24 +0000
Files and hashes: 1: Cng8TcnIXSMG5gaf3EVbnwwbQjk.roa (hash: SlPAu0/v+q9AU8NTLPmY4PB0nlmzfGz86P4I7oW5+Ns=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: taudvm1wnXiffUIFo5i3OKRqDXIAhFchd5Ykow2P3oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:43:ee:45:a4:f8:69:c6:0a:55:ff:36:2e:98:c9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Apr 17 15:00:24 2025 GMT
Not After : Apr 18 15:00:24 2025 GMT
Subject: CN=65172c61822b9e94252d08b9d8146558bd88e505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:b0:85:8b:1e:b4:7a:2e:91:1f:65:48:98:
d0:16:60:5b:38:0c:86:f6:67:32:9e:84:7e:f9:6c:
2a:5a:62:19:c1:e0:58:58:2f:99:48:2a:91:6d:3e:
48:90:ad:b1:fc:30:64:8d:15:c2:0f:0b:0d:85:01:
63:c4:3f:14:b2:d1:24:f6:de:08:09:0a:1b:34:28:
03:da:72:5d:3c:b9:c0:1d:d4:a1:41:f6:c3:d1:dc:
c1:46:c2:60:c8:87:a4:2c:28:db:e7:44:47:69:1f:
6e:7f:71:9e:65:1a:4b:38:db:07:2b:0c:1a:bb:82:
9f:68:27:2a:ae:6a:08:9c:36:d8:99:13:2c:2c:51:
f3:5d:3e:56:36:1b:9a:10:26:ba:4a:ad:f1:a3:90:
23:bd:6d:5b:2c:34:fa:6b:d2:17:04:fb:70:e0:94:
39:4f:4d:d6:89:5e:6b:be:09:b5:00:c4:13:1e:43:
4d:e4:01:52:f8:38:c0:c9:20:1b:c7:58:34:bd:8f:
55:6b:b2:e4:42:2a:9f:20:d2:98:8d:e5:f5:1e:21:
7a:72:e6:72:bb:86:6a:6f:0d:67:10:e5:ca:e0:b3:
61:98:42:84:3a:67:9b:f1:d7:2e:12:d6:ea:70:06:
ed:ef:9c:86:4a:35:fd:29:d2:e6:dc:9f:fa:25:cc:
c9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:17:2C:61:82:2B:9E:94:25:2D:08:B9:D8:14:65:58:BD:88:E5:05
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d3:29:a9:42:a9:3b:db:cb:29:37:51:cb:67:55:b7:16:d8:
5b:9a:d4:cd:04:26:cc:0d:0a:37:7f:fa:d1:1d:08:98:43:1d:
05:ce:e9:40:7e:98:81:4b:e8:66:aa:5e:af:2b:5e:54:ce:5e:
57:26:fe:31:34:43:f4:20:50:e1:87:e8:86:c9:6e:f3:df:9a:
34:c4:f9:d3:4d:43:0c:3b:05:19:00:6e:e0:61:1e:38:6a:c6:
56:bb:ec:b2:f2:5b:c0:10:b2:f6:07:a7:0b:a1:54:b0:ca:57:
c9:50:ed:84:f0:32:06:79:99:88:02:be:ee:51:b2:33:6c:29:
69:b0:b7:b0:e5:a2:0e:cd:87:ae:fb:0c:54:03:c9:cc:be:bc:
5d:90:7c:25:84:45:b8:43:a9:37:54:f7:6d:47:56:8f:a2:a9:
03:a9:a0:fb:f1:8d:b6:d2:9c:b2:84:ff:a6:54:6f:33:ba:ad:
51:c6:61:60:27:1d:e6:a8:4d:a1:de:2f:d3:1c:07:e6:2b:c6:
7b:9c:58:9c:ad:61:0b:c9:b6:da:1c:0b:de:08:87:f5:1d:80:
d9:88:d2:c3:c8:02:ad:e5:e5:a7:18:cf:d5:0f:31:d4:85:e0:
ee:d8:5e:8f:cb:3b:ab:c6:0a:f1:42:60:1b:a6:bc:4c:6b:d8:
73:0c:87:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:38 2025 by rpki-client