Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: IHQjXbIaqG6i3kgp1fEXINJgxs0VCP79riC5EpVbtbw=
Subject key identifier: F9:85:79:C4:BE:AF:40:34:31:E8:7C:B9:8A:03:56:BF:61:3E:EF:66
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 019653EE0358AB7522E48D81F4004896C013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 0384
Signing time: Sun 20 Apr 2025 16:00:29 +0000
Manifest this update: Sun 20 Apr 2025 16:00:29 +0000
Manifest next update: Mon 21 Apr 2025 16:00:29 +0000
Files and hashes: 1: 0UKc3c6_AlpjqrUNJh3DwStXrec.roa (hash: OhWloYhHA/1vQyymMhBSWvWrUFfn2iV/XlUJ3vQrur4=)
2: 4gvK6UAte4i_DJjE1TPbFT1Ok98.roa (hash: GoLsyVhZqQfvGCGN6U4GMh9d59SyLh07nIkIOiePbx8=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: 2KBs97OgwsZTeU3Qjsnc/TLAf4uKrg5Dd2WdAEeHYeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:03:58:ab:75:22:e4:8d:81:f4:00:48:96:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Apr 20 16:00:29 2025 GMT
Not After : Apr 21 16:00:29 2025 GMT
Subject: CN=f98579c4beaf403431e87cb98a0356bf613eef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:53:ea:ba:6d:c8:96:44:09:6e:2a:9a:49:
b9:42:26:19:f8:f6:4e:0e:0f:f4:eb:dc:a2:9d:99:
49:33:5b:36:69:ab:e7:02:ee:02:67:3e:1e:52:f8:
97:f2:ef:c6:02:e4:17:87:07:1e:e0:4d:a7:34:c3:
02:04:74:d3:8e:09:70:b5:01:e3:fe:91:16:30:d1:
f3:33:8f:f1:c7:ca:e3:84:de:e6:57:50:0c:9f:04:
0f:13:89:3b:52:78:2f:0b:5f:f8:5a:28:2a:d2:ff:
3a:46:56:60:02:22:04:cb:d1:33:fc:fe:ef:c3:f3:
0b:ba:53:b9:9d:8e:b1:5e:d0:e1:2f:42:96:08:7f:
57:46:c7:cc:08:32:fb:b1:35:c0:58:f1:72:d2:3a:
3f:ed:0b:d0:2e:f8:9f:2e:64:c7:8e:5b:b7:ef:25:
ba:75:5c:f7:4f:6c:13:41:e0:b9:b4:be:b1:50:8a:
ff:69:d6:63:84:de:09:b0:c0:c3:bd:94:e8:91:78:
b2:cb:3a:79:1f:f0:6a:1b:94:5f:7b:f7:ea:75:94:
1e:fc:53:35:8e:da:3f:e0:58:0f:68:8e:20:c2:1f:
6b:60:c2:05:87:27:8e:09:1c:06:15:d5:f6:23:b3:
15:16:77:75:8d:83:7b:ba:de:c8:1c:d2:02:79:b0:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:79:C4:BE:AF:40:34:31:E8:7C:B9:8A:03:56:BF:61:3E:EF:66
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2d:e6:0f:5a:fb:4b:18:8f:03:61:75:73:9b:6e:28:9b:2b:
75:92:0e:3a:ca:a9:b9:6c:95:48:e0:28:6d:75:b0:ea:1a:78:
cd:83:1b:2b:28:a7:43:57:6d:b9:8f:24:3c:62:cd:74:3b:54:
ee:84:42:e9:6e:ba:69:6a:a0:06:0b:8a:9b:ab:a2:fd:4d:3f:
39:71:01:2c:07:04:3a:ab:8c:22:aa:8d:ce:a8:73:d0:92:cb:
85:95:b9:0c:8e:31:12:c7:85:6d:52:f4:32:15:b0:85:12:05:
4a:7e:4f:10:c7:e4:37:18:ef:1d:8a:ae:97:46:bf:90:2c:f4:
54:46:42:a9:0f:f0:6f:42:a9:07:01:e3:6d:02:e1:80:7d:63:
f1:5e:cf:c4:e0:ae:55:08:42:f4:1b:83:6f:7d:8f:b4:c6:c0:
75:88:f5:d8:5b:cf:f2:2f:a7:73:ac:24:87:6e:69:6a:11:e2:
32:78:bd:c9:43:c1:58:17:b6:a6:13:ad:ae:32:a5:f6:ce:b8:
1e:e1:8e:f1:cd:76:71:bf:87:63:3c:bf:3a:6c:79:7a:95:f8:
55:7d:16:43:0c:14:f1:1c:f4:ba:96:19:a6:63:6e:64:f2:82:
e8:26:fc:41:b4:af:7d:85:3a:22:28:6f:36:07:bc:f6:59:8f:
82:8a:3c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:24 2025 by rpki-client