Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: OjoYGvhubLGWi+JxrxJ0sydiNE5ZKA3NiuLfoBN3eig=
Subject key identifier: 06:00:40:58:E9:72:10:09:91:D7:05:C3:86:56:76:25:BD:B0:A6:7E
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 01964E5A48942B74796B5D90BB3BC38FFC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 1149
Signing time: Sat 19 Apr 2025 14:01:01 +0000
Manifest this update: Sat 19 Apr 2025 14:01:01 +0000
Manifest next update: Sun 20 Apr 2025 14:01:01 +0000
Files and hashes: 1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=)
2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: Ps8be4nv6VtnSl/gpJOGhXqW+kFjSjYvqxWSiqCpgBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:48:94:2b:74:79:6b:5d:90:bb:3b:c3:8f:fc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Apr 19 14:01:01 2025 GMT
Not After : Apr 20 14:01:01 2025 GMT
Subject: CN=06004058e972100991d705c386567625bdb0a67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:1a:b7:c8:1e:96:1c:67:3b:44:e8:79:db:
b9:14:ff:68:5a:e5:ee:67:9d:b3:13:7e:9b:5a:76:
bd:c8:21:8b:37:92:11:eb:0b:89:9f:43:16:28:ef:
43:5e:00:9c:d6:6e:a4:b4:02:07:28:9b:7e:34:d4:
df:4f:c7:97:28:16:c8:ae:30:d8:3f:65:ae:5d:c6:
26:8f:cf:31:0d:73:b1:db:27:92:b0:22:d2:5b:79:
fd:87:25:d8:04:34:ad:ff:cc:63:49:23:6e:4b:57:
55:22:e7:e0:f6:1b:a3:72:7e:df:35:7e:89:0e:67:
3a:29:18:75:36:81:be:cb:32:0a:a3:7a:41:fd:56:
95:c5:12:d2:2c:59:cc:a3:f1:b3:fd:05:36:5e:6e:
6b:a4:c2:8b:a9:05:f0:f5:a8:df:3e:52:dd:56:45:
a5:94:67:92:ce:3d:0e:77:a4:8f:c9:f9:94:a5:f2:
01:7d:e7:55:2e:5d:80:cc:e8:d7:63:dc:d2:52:cd:
7c:29:74:8f:71:df:73:29:b1:e4:1f:36:89:20:86:
64:65:43:a6:d8:00:f3:59:00:1f:1c:88:10:7d:2f:
b1:c8:f5:3e:aa:ee:75:f8:cf:cb:9a:ef:aa:fa:da:
9d:72:ab:2c:36:d8:77:41:05:f4:43:22:6d:2c:51:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:40:58:E9:72:10:09:91:D7:05:C3:86:56:76:25:BD:B0:A6:7E
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4b:ae:c3:41:fe:8d:9c:4c:1b:ac:32:b6:5f:fd:5b:a7:c3:
f6:cc:5f:df:ae:00:d9:a3:9d:2e:23:09:d9:9d:23:a4:56:91:
7d:86:64:73:93:cb:a3:40:94:8b:21:07:82:70:43:53:3d:51:
56:bc:de:32:e9:ea:a2:de:65:0f:5a:85:5f:85:60:cd:1b:a5:
39:42:a8:ae:70:f4:bd:c1:53:85:4e:98:fc:c1:3e:75:ac:9a:
a0:5a:0e:0b:83:92:7a:fb:ac:66:91:77:a2:21:f9:fc:a4:1b:
c9:5e:9e:f7:eb:22:f2:6a:89:a9:c0:6b:8f:8a:c9:60:8b:ad:
ed:2c:6a:e9:20:cc:a9:e5:7a:3c:01:88:e9:76:d5:35:1f:55:
da:54:f0:fa:9a:16:5e:1a:41:25:7f:b1:cd:47:38:36:f5:44:
71:35:d5:8a:0e:43:e4:12:4a:36:d1:0b:73:47:72:82:29:29:
4d:7c:f5:21:89:f0:db:05:b3:b0:38:ef:52:55:10:1e:83:3e:
14:ef:9e:d2:07:9b:90:51:60:d3:6a:3d:81:1a:e1:c2:e4:12:
5a:30:c7:09:5b:ea:ca:9f:f3:0e:5a:1a:cb:07:7f:6c:1b:49:
0c:82:94:f7:ce:e3:c8:2d:6c:7b:a3:7b:f1:89:55:b6:dd:a1:
a9:f4:05:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:14:06 2025 by rpki-client