Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
File: HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft (raw, json)
Hash identifier: uzYgZuL0sV1BU+C+YE9J+ClbMAUXnCRBI93987UWAYs=
Subject key identifier: 4B:9C:33:40:20:51:9D:66:5C:96:58:BB:EB:24:F3:23:73:2D:4A:29
Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175
Certificate serial: 01958BF2490FB22E2C617F13F266CD354002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
Manifest number: 11AA
Signing time: Wed 12 Mar 2025 20:01:06 +0000
Manifest this update: Wed 12 Mar 2025 20:01:06 +0000
Manifest next update: Thu 13 Mar 2025 20:01:06 +0000
Files and hashes: 1: 88WU_lo-nSRGdQfY40VdogAMLxE.roa (hash: Hb+L5mbmqk3uGoKDZkv33m+okuLc3B+yQYtGc3eHLEs=)
2: HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl (hash: GQCrBHwtZ/H0HoG+0ntvxiDw15Qt+UB+T6FLhUguaIo=)
3: qitb7VLMgvff1nrPh9k84ZNCZis.roa (hash: 5aKxoc3/ZFGyn8GlrxxZrkPDb3gc2rupmpy/hBVwGfg=)
4: sSMElgLodEbAl0Mf5M1CJAtGd6o.roa (hash: KsAmDiMwl01kc6yWzv4aB83pLDw7Wb/jRHOPdGc8zK8=)
5: uy9rotP4GfgGA6fEbMzkj5aiTZs.roa (hash: aVRFeZsETYjdOaMaKocLpddIBiAt91C1pjmXmkw2oUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:49:0f:b2:2e:2c:61:7f:13:f2:66:cd:35:40:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175
Validity
Not Before: Mar 12 20:01:06 2025 GMT
Not After : Mar 13 20:01:06 2025 GMT
Subject: CN=4b9c334020519d665c9658bbeb24f323732d4a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:8b:6d:83:08:83:0f:c0:10:4a:4d:57:f9:
d0:78:0c:4b:10:de:cf:8a:ab:c0:2a:c7:85:67:01:
f6:48:3a:61:c9:69:12:8a:26:9c:a9:3d:b1:f6:a7:
01:1d:0b:c2:35:74:ad:29:9d:3e:30:11:ff:e7:61:
8c:d5:b9:36:11:4c:20:51:37:07:6e:7e:72:67:5c:
22:b6:dd:d7:23:ab:74:67:42:00:bd:c3:25:b6:43:
77:81:43:5d:18:e7:05:5d:bf:9a:ea:a8:5e:9c:4d:
6b:de:8c:c2:6a:d9:e9:75:ff:64:34:a6:98:20:1f:
92:d6:26:27:42:d2:0d:fc:71:c3:0e:6e:27:56:09:
40:96:8f:23:b4:ce:df:e7:02:db:ef:0d:ff:64:9d:
d6:dd:bd:f3:ea:6c:3d:7b:75:20:1a:5e:00:76:5b:
48:76:2e:1b:cf:e3:f2:a7:0f:dd:28:c7:96:0d:94:
12:5e:88:58:3b:0d:29:70:31:b9:89:a6:f6:cb:2b:
83:4d:30:10:51:59:cc:66:27:c5:f6:00:03:7e:4b:
b7:09:c4:ea:47:34:f6:8b:90:d5:0a:42:45:37:8d:
a3:00:e3:54:30:5c:18:bf:0b:7d:e6:bb:ef:36:43:
87:91:f5:e7:63:90:8c:52:a1:67:c3:09:6f:ef:92:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:33:40:20:51:9D:66:5C:96:58:BB:EB:24:F3:23:73:2D:4A:29
X509v3 Authority Key Identifier:
keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:41:1a:1a:99:7d:ff:bf:59:01:23:f8:89:1c:f8:ad:8e:2c:
54:f4:a0:31:a5:85:b0:54:8b:28:e5:c3:08:c4:a3:41:43:67:
6d:8f:1c:4a:79:63:d2:5f:4b:f0:e1:ad:41:79:f7:82:c1:ae:
92:e5:aa:ae:51:66:2b:ea:81:40:87:7d:7b:60:66:70:f2:26:
61:97:b7:b4:09:e8:86:65:ae:f9:d2:66:d8:e4:b1:81:ee:db:
0d:75:39:a6:ba:d1:69:21:23:75:0b:cf:f0:bf:c6:c9:e0:80:
c0:f7:49:e7:50:90:5d:f9:d0:22:a7:26:74:03:57:d3:57:61:
fc:73:7b:e3:31:ee:bd:34:91:30:c9:1f:73:61:cd:8b:e2:ac:
67:cd:c1:89:b9:c1:b8:2c:38:c6:a8:db:bd:2d:4d:6e:33:00:
15:0a:6c:f3:c2:73:50:71:d4:66:3c:0d:61:f1:81:eb:72:8a:
26:bc:14:e4:a3:23:47:2c:4e:c8:b8:96:13:71:d8:fa:36:13:
dd:7f:52:3b:e0:db:95:ca:69:9e:70:65:51:73:2f:19:df:4a:
16:56:1a:8d:b9:4b:19:7b:72:12:d1:0f:bf:a1:09:39:58:a2:
6b:3f:e7:65:4f:75:e0:bf:c3:45:2e:87:6f:1e:c4:6b:8e:e3:
49:4a:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:47 2025 by rpki-client