Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: Nc6iQJJGV4MV/sZ55PqRfycfzmLZFYsSv1HZh7BTDUQ=
Subject key identifier: 69:E0:24:A2:A2:F6:15:2E:22:1E:11:5C:E9:D7:77:95:59:EF:42:44
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01962B2A073C4B05A49719281B1EB1F9ECD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 13E5
Signing time: Sat 12 Apr 2025 18:01:36 +0000
Manifest this update: Sat 12 Apr 2025 18:01:36 +0000
Manifest next update: Sun 13 Apr 2025 18:01:36 +0000
Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: MhAxjoq7QPxMeyI+jVwInu79NIK5ZmYSV8KeqmQQvKY=)
2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=)
3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:2a:07:3c:4b:05:a4:97:19:28:1b:1e:b1:f9:ec:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Apr 12 18:01:36 2025 GMT
Not After : Apr 13 18:01:36 2025 GMT
Subject: CN=69e024a2a2f6152e221e115ce9d7779559ef4244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:55:63:32:3f:8d:d9:b0:ea:74:53:5e:69:
63:91:4d:8f:ac:fb:9d:1e:1d:f9:75:f9:0d:ce:38:
70:1b:54:19:81:40:50:22:68:a9:c6:43:33:d3:ec:
a5:75:a5:75:88:2a:14:52:ba:be:ad:6f:94:e3:81:
71:c7:8f:93:51:d8:f8:ad:1d:e2:e8:01:3f:1b:ed:
bb:01:e3:3b:cb:91:cb:44:71:35:36:1b:34:90:49:
f7:94:fb:34:b7:48:78:05:ee:fe:3d:9b:bb:87:30:
d2:00:4b:ef:c7:a4:46:39:51:2b:dd:69:01:40:ac:
1b:33:73:50:a6:92:f1:b9:0e:6e:07:32:8d:e3:b5:
ab:e4:e4:db:d7:2e:9d:67:24:0d:94:fc:aa:a0:92:
6a:1b:8a:be:32:32:b3:c8:ae:55:cb:c5:6e:49:93:
a0:fd:76:d2:51:51:e9:82:78:e4:ec:d2:9f:c2:4d:
77:17:e2:8c:d2:36:65:6f:a6:9b:0f:6d:8f:e8:0b:
6f:d8:8e:c9:f6:b4:7e:74:aa:93:ba:dd:22:93:bc:
86:44:62:d5:60:87:b2:ae:96:3b:fc:50:2d:08:84:
39:2f:bf:0f:2b:b0:52:6d:56:b3:09:76:a9:13:b3:
32:5f:d2:65:55:95:78:51:94:fa:ce:7a:ce:1d:be:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:24:A2:A2:F6:15:2E:22:1E:11:5C:E9:D7:77:95:59:EF:42:44
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:96:f6:aa:3a:6c:de:0b:8b:30:49:bd:fa:97:80:b8:b4:93:
2a:a8:59:f3:75:79:c9:12:f3:14:a6:d9:7b:cd:bc:00:8f:8c:
b6:db:64:d0:75:ba:2b:fe:f0:b6:79:d3:40:ea:86:12:ce:c9:
ef:2a:32:be:cd:20:03:4c:c2:9c:89:ea:41:d9:78:85:07:eb:
7e:38:2c:f7:cb:9b:e3:f4:00:db:89:c9:6b:34:45:18:e2:f4:
9e:f1:c7:f1:8d:ac:6b:51:d6:f0:0c:bb:8a:78:2c:1e:27:77:
9c:8e:fa:5c:93:6f:ed:a3:9f:ed:6f:27:27:b7:65:82:c7:b2:
d8:be:be:fb:e4:4b:13:9d:17:d9:86:28:4e:c6:7c:0f:b1:f6:
14:00:b5:08:fb:46:32:ff:d3:0f:b1:9c:9c:83:6e:4c:fb:03:
17:38:5f:fd:a8:7c:8d:90:76:f5:a1:52:c0:7a:21:5e:07:d4:
85:43:2e:55:92:4c:7b:78:54:e3:13:08:6a:ce:cb:ed:26:6b:
d8:cf:12:d9:09:63:bd:47:5e:dd:c5:38:c8:9c:65:72:72:90:
e1:50:d0:4a:84:4c:e1:7b:85:d2:74:be:2c:6e:9b:5c:31:2f:
fa:f4:b7:29:55:0d:d0:be:9e:53:d6:4e:07:dc:be:22:9a:22:
26:84:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:58:50 2025 by rpki-client