Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: BV1n43WFfWft7EXs96xJISp7mL9H+Yc0DudqVwCCghA=
Subject key identifier: 69:49:D9:EC:FD:4E:7B:EF:C6:B9:5D:E2:3D:58:7F:A5:43:EA:51:C8
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 019650B66D8F275D7EBB50F08E3EABE4D017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 0378
Signing time: Sun 20 Apr 2025 01:00:54 +0000
Manifest this update: Sun 20 Apr 2025 01:00:54 +0000
Manifest next update: Mon 21 Apr 2025 01:00:54 +0000
Files and hashes: 1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=)
2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=)
3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: oJnLaQYAdCuDbH8lZAqdfpCBNitCI90OA6JzFVc/odo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:6d:8f:27:5d:7e:bb:50:f0:8e:3e:ab:e4:d0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Apr 20 01:00:54 2025 GMT
Not After : Apr 21 01:00:54 2025 GMT
Subject: CN=6949d9ecfd4e7befc6b95de23d587fa543ea51c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:57:f5:f6:b6:3d:d8:c1:38:d3:da:e7:d2:
5f:02:f4:5f:17:95:a1:16:cd:f0:a0:be:c9:37:74:
fd:68:4f:8e:f1:f2:c9:06:59:d2:9c:57:00:12:c9:
22:e2:40:eb:27:76:cd:b6:15:3f:c4:ef:79:61:8c:
92:8a:36:7e:84:9c:93:d1:cc:2b:6e:5e:0a:eb:43:
68:b8:ca:41:8d:86:c7:a6:29:fc:7d:c9:8a:7d:1f:
dd:4b:74:c3:7a:57:b9:de:54:d7:0d:48:66:dc:46:
97:67:ad:f6:9d:ce:2b:7f:d7:ae:46:ff:ee:56:57:
28:6a:45:e4:9e:35:05:07:42:17:9a:e8:72:ec:c7:
49:27:eb:48:21:af:cb:61:51:6d:8c:87:93:09:dc:
f2:0b:da:1c:95:d2:74:7b:ae:df:77:2a:cd:9d:df:
41:aa:9d:c2:b6:46:1c:ba:e7:96:81:02:ad:92:38:
f1:86:91:18:1c:e5:5b:1a:67:cf:94:c2:8d:89:ba:
5c:0b:9a:c1:98:03:37:31:64:d0:2c:4b:7b:2a:0b:
f0:ef:5f:c4:39:0b:eb:7b:ae:f4:da:63:4b:17:36:
44:c3:49:e0:c4:f3:b0:e0:af:54:a4:2d:47:50:9e:
e9:cd:c7:eb:64:51:01:5a:d7:60:d2:35:c6:3f:cb:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:D9:EC:FD:4E:7B:EF:C6:B9:5D:E2:3D:58:7F:A5:43:EA:51:C8
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:74:4e:35:46:92:66:40:9a:66:1f:e5:3c:ee:18:42:87:52:
a5:b5:fe:c5:15:31:2c:25:55:d1:0a:6d:6a:dd:a9:0a:1f:f3:
9f:17:cc:85:a6:3a:53:7f:b7:97:f0:e1:e6:5c:f6:7a:93:cb:
70:2a:8f:b2:7f:a5:9d:04:4b:b7:59:14:fa:28:76:75:a4:30:
0e:23:88:bb:07:4e:71:0c:17:e7:95:3d:62:ae:70:d6:7e:63:
f2:09:ed:25:25:53:6d:69:b8:8d:41:bc:17:0a:a5:a9:d2:4d:
19:56:df:6a:a4:a7:91:4b:f9:32:89:46:d0:da:87:d0:72:ea:
0a:c2:4a:1a:39:3d:49:fa:bc:d4:2d:a3:de:f3:51:64:c0:78:
f1:aa:89:94:92:28:77:87:a8:1f:b7:cc:41:83:66:41:ea:08:
5b:3f:bd:2f:7d:ce:b7:a7:3c:a5:ca:d7:ba:7b:d2:2c:5c:2a:
fd:a6:2e:6c:6e:3e:bd:a6:6b:10:96:1b:f5:11:52:a5:64:24:
be:c3:bd:31:00:0a:47:83:45:46:f0:a8:24:c3:32:ee:16:2d:
98:30:fe:0f:d7:0b:eb:19:cc:9b:cd:f3:02:ae:4b:5c:d9:c1:
78:f1:c2:02:ff:28:d4:2f:c9:7c:13:c2:f4:30:61:44:6d:b6:
29:bf:41:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:31 2025 by rpki-client