Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: YytFJDF0WvdwnpBsiNXBD5ucKGj2YexmXwbN28b4Ssk=
Subject key identifier: A5:93:E7:E5:2F:59:1A:DB:81:C3:90:5C:27:42:C8:17:34:BD:DB:21
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 019649A1207C1CC86608863C71AC4843693D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 0207
Signing time: Fri 18 Apr 2025 16:00:18 +0000
Manifest this update: Fri 18 Apr 2025 16:00:18 +0000
Manifest next update: Sat 19 Apr 2025 16:00:18 +0000
Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=)
2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: 8glEONmsaXLxZDkNhQwdiQcse4RmIrewZ/67n9j8bbE=)
3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:20:7c:1c:c8:66:08:86:3c:71:ac:48:43:69:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Apr 18 16:00:18 2025 GMT
Not After : Apr 19 16:00:18 2025 GMT
Subject: CN=a593e7e52f591adb81c3905c2742c81734bddb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:71:07:c3:d7:a0:4f:97:a3:8f:00:11:a7:
e0:04:84:f2:5a:07:6c:fb:b0:29:dd:fb:b2:eb:b1:
bf:5a:37:19:0e:ab:fe:7f:08:f5:54:8b:41:dc:ee:
96:ee:1d:41:98:60:17:f8:71:a9:4e:59:9a:e7:9e:
75:19:7b:3e:d4:6f:b1:22:21:57:9d:e9:94:9e:51:
78:00:26:49:fd:7c:6b:11:37:0c:a4:ce:a0:37:75:
5b:9a:b0:15:52:be:ae:9f:b7:f0:63:0b:cb:d2:ab:
7a:93:6f:2b:b4:cd:56:e0:56:82:3b:4d:6a:fc:6a:
bc:9d:09:1d:15:b7:60:a9:70:6a:ae:e8:5e:9b:47:
d8:0d:a4:21:d3:e0:43:41:2e:94:11:be:42:9c:67:
80:a0:7a:aa:f0:d1:a1:79:77:3b:c8:c5:8b:41:a0:
0d:7d:5d:8d:db:a2:13:49:c0:95:2d:a5:7f:97:60:
dc:ca:d0:1a:65:e6:83:3e:4e:20:c7:26:26:e3:b5:
d8:26:15:24:23:f4:ed:fa:56:3c:ed:a3:0c:dd:74:
f0:69:ab:72:0f:c5:13:8a:80:b1:37:2a:5e:33:c3:
c7:ef:c2:02:1f:52:b8:b0:a0:94:7f:01:8b:e9:e4:
46:41:78:55:9c:95:da:de:9b:98:1c:d8:fe:8e:b7:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:93:E7:E5:2F:59:1A:DB:81:C3:90:5C:27:42:C8:17:34:BD:DB:21
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5d:41:39:75:0f:16:a7:11:0d:76:5f:50:18:ed:15:33:f3:
78:d1:87:38:84:37:32:84:d4:29:85:e2:49:88:d8:20:22:f8:
6d:eb:8f:12:65:04:2c:02:d7:70:17:a3:34:47:03:88:2f:78:
ec:3b:90:62:5b:34:f6:14:c3:c1:9d:fd:43:9b:cd:78:96:89:
7b:08:54:2b:5b:eb:93:2f:b4:cb:5c:5a:59:43:d0:90:2e:2e:
10:31:00:51:e4:e1:b9:b0:c4:39:f5:f1:43:53:c3:45:40:52:
e3:47:8f:b6:d7:c8:53:b7:74:fd:d8:08:fc:0f:18:02:8b:8e:
2d:09:98:0b:da:b3:0a:c7:1e:88:3e:c7:49:fd:04:d5:4d:38:
68:5f:ad:12:4c:ac:00:24:07:b7:eb:6c:7e:4f:86:2c:ed:60:
fc:72:8e:e9:31:4f:b9:c5:07:d3:70:d9:c3:60:f9:09:0b:fe:
e3:e1:7d:c5:db:62:4b:b8:da:2a:3f:86:4b:c9:d6:c5:6f:81:
7c:b7:79:79:1c:10:75:c7:9f:f3:5a:18:85:2e:b8:2b:1c:91:
27:63:cf:ce:49:33:2a:18:ac:80:2b:bc:d9:a7:3f:24:ee:3e:
09:13:ba:94:47:92:9c:d3:1a:20:e6:21:3a:4a:87:af:2e:1d:
1c:5a:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:58 2025 by rpki-client