Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: buDE4yEK1lfAZOVO8mf92MlUJVJkiX1eSyE9M/IuHCQ=
Subject key identifier: 30:EC:CF:58:64:CD:BC:AE:3E:13:21:37:2C:47:0B:CF:FA:04:7E:4C
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 01965DCD13295E23D002168EBCBD5CD3274F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 14:00:42 +0000
Manifest this update: Tue 22 Apr 2025 14:00:42 +0000
Manifest next update: Wed 23 Apr 2025 14:00:42 +0000
Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: IEtT16eTpq++DZZIUpkzaQdbtPC4F55lErjlz1dRqKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:13:29:5e:23:d0:02:16:8e:bc:bd:5c:d3:27:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Apr 22 14:00:42 2025 GMT
Not After : Apr 23 14:00:42 2025 GMT
Subject: CN=30eccf5864cdbcae3e1321372c470bcffa047e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:a2:56:b7:77:02:3e:b9:99:42:d4:be:a2:
67:08:41:a9:8d:c1:f0:e7:15:93:e9:5d:a1:23:3c:
ee:fb:2b:7a:7e:12:2b:c4:3d:d1:ad:81:fd:e1:28:
33:67:70:5f:e0:3b:60:55:45:88:c6:c8:6b:11:6d:
f3:f6:b3:d1:e4:3e:64:9b:c8:b2:b1:bd:8f:4f:14:
83:22:26:c0:e7:b5:a3:62:44:49:fb:52:23:6f:8d:
dd:c0:a4:09:f7:17:a9:12:a9:18:d6:a4:68:e2:4d:
8e:66:76:52:0d:b6:62:43:b3:f3:d7:ce:6e:48:81:
48:c9:20:28:3c:ab:85:d2:c3:7e:86:17:53:6f:41:
5c:ab:c6:5f:ef:86:f2:2e:f4:52:8b:67:dd:7a:80:
aa:ad:38:bb:58:b9:1f:b8:6c:92:2e:28:65:33:b2:
ab:37:a3:6d:6e:e9:25:d7:bd:9a:8c:f9:63:d2:fb:
cb:69:57:7c:91:7b:30:3b:6c:53:7e:f5:24:21:6a:
60:d3:f3:de:9e:22:4b:d4:c5:28:67:95:cd:09:6f:
a8:17:9b:08:23:d3:52:03:4d:45:4c:e6:03:51:28:
45:ca:d3:dc:5c:80:e9:19:80:7b:2d:09:73:05:06:
fd:92:8c:13:d3:31:73:2c:ab:68:b2:5d:30:d6:88:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:CF:58:64:CD:BC:AE:3E:13:21:37:2C:47:0B:CF:FA:04:7E:4C
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9c:7f:83:01:a6:fd:fd:b5:ee:f8:45:19:ec:a8:9d:77:80:
34:51:b5:24:9a:a6:fb:0a:8d:88:c0:9a:3b:80:d4:a4:46:98:
5e:b4:d9:8c:ac:9a:35:a2:c4:dd:85:22:41:65:0b:32:63:27:
c9:00:31:37:65:f0:e7:18:da:2f:22:8c:7b:ba:e9:96:b9:55:
5e:b7:05:16:95:55:2b:03:be:ad:9d:ee:64:be:0d:1e:40:bd:
60:8d:24:70:6c:2a:fd:b9:bc:09:96:8d:c8:97:67:72:78:91:
a0:23:66:8b:f1:6f:03:d5:50:a2:77:21:54:d5:72:12:d7:63:
fd:b6:13:36:65:c4:71:28:84:37:0f:3e:92:d6:de:01:ef:01:
75:2f:2a:43:ea:52:c1:fe:d2:e2:6e:1b:84:d1:29:5e:f3:5e:
66:5d:d1:be:c9:4a:1e:51:56:f4:b1:ea:9e:80:ed:a0:ac:d4:
57:99:de:8a:d0:e6:69:69:2b:30:12:82:55:f7:dd:d4:f4:a2:
4f:0b:4e:9b:80:71:40:fa:d0:23:0f:84:c2:9a:b1:1f:0e:33:
2e:86:7c:fa:8b:e9:e9:cb:47:2d:19:a9:7d:6e:77:32:6e:f4:
53:92:e7:32:bb:0b:87:cb:3c:f6:be:1d:c5:eb:92:39:1d:4c:
e7:55:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:22 2025 by rpki-client