Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: HsMjE1WXyUhd1asJDUkkA1jT02HsInJfKfr56nopHJs=
Subject key identifier: 06:A5:5A:F5:96:63:00:F3:39:13:58:D9:13:AF:82:00:A7:89:59:5E
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 01964C6BF002E4BC5175FB7E06F987C0CC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 14A9
Signing time: Sat 19 Apr 2025 05:01:04 +0000
Manifest this update: Sat 19 Apr 2025 05:01:04 +0000
Manifest next update: Sun 20 Apr 2025 05:01:04 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: 17FHBBCLxekfDFLoIkVgL1CGImDmRJ9iv1d/9JIO+v8=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:f0:02:e4:bc:51:75:fb:7e:06:f9:87:c0:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Apr 19 05:01:04 2025 GMT
Not After : Apr 20 05:01:04 2025 GMT
Subject: CN=06a55af5966300f3391358d913af8200a789595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:85:86:c3:88:3a:ff:14:0b:ba:39:4d:20:
fe:b7:24:21:7c:9d:a7:23:da:98:e4:83:ca:e6:98:
75:e2:ff:7b:d0:14:e6:7f:5b:3c:da:28:cc:af:cc:
2f:38:cb:20:42:45:35:86:99:ed:b3:17:11:c2:6a:
64:e5:d4:11:fa:65:ab:13:11:a6:fa:d5:2f:e2:47:
d9:72:e6:53:14:42:7a:c0:af:66:3d:f3:5b:4c:59:
7b:b2:4e:95:c1:03:d0:3c:ab:9f:df:0e:03:e0:fd:
56:27:7b:bf:b4:23:07:d0:6a:94:b4:26:94:7b:56:
14:1f:de:84:07:24:bd:f6:ad:35:0f:6b:b4:3d:2f:
c0:07:f7:42:73:ea:7d:b0:09:dc:34:91:86:05:45:
83:b7:b8:4f:69:bb:1c:fa:f1:a1:0f:38:eb:9b:a6:
64:fd:39:67:48:76:8c:02:eb:7c:60:72:53:cd:e1:
3a:ed:0b:d8:3d:02:f1:e0:33:93:b3:23:3a:0b:f6:
d0:1e:88:e0:37:18:a3:44:7b:55:56:97:c7:cc:f1:
74:18:bb:ca:17:07:70:3c:07:c7:b9:56:c3:ed:df:
ff:6e:9d:10:8e:c4:77:71:9a:4b:65:bf:7e:a8:ac:
ab:d0:b9:f0:be:3c:35:77:c9:05:65:7d:51:24:f0:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:5A:F5:96:63:00:F3:39:13:58:D9:13:AF:82:00:A7:89:59:5E
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:04:c9:36:c7:81:b6:b0:ba:43:81:a9:f0:7b:fe:b6:11:
9b:75:48:97:f6:8b:47:f5:bc:bf:dc:ae:18:8e:9b:f5:30:38:
a9:70:d3:26:70:7b:f1:ae:3c:7c:f6:de:6d:3e:5b:ad:b4:bb:
02:00:91:db:3f:e0:5c:75:73:fe:4f:87:c4:94:ff:64:fe:02:
f6:ab:52:35:a1:5f:86:44:11:06:9c:0a:fe:56:1b:22:31:5c:
75:e4:bb:02:f9:26:c3:51:01:c7:c3:2c:7e:ec:7e:d3:d6:8a:
af:cc:e8:5e:0d:68:04:14:c0:2a:42:cd:16:94:18:13:da:97:
4e:f7:93:14:47:81:6f:51:c3:a2:c0:f1:6f:8f:0b:4d:7c:2b:
5e:07:d6:02:2e:be:c1:f5:72:6b:68:a1:a8:f8:16:5c:2a:3b:
18:a3:25:c3:26:44:b5:cd:1f:79:61:d1:b8:6e:b4:a6:fa:82:
7f:05:e4:7f:ce:25:67:0f:1e:10:b2:ea:be:ca:83:58:26:1c:
74:c4:bc:78:33:34:79:d1:aa:f1:10:7b:96:f1:dc:35:b8:6d:
72:d2:8f:10:05:27:33:b5:0e:90:b6:78:33:6c:d9:16:6c:91:
1c:c3:48:e6:63:74:f9:de:23:6d:b7:01:c0:fa:8e:4c:d6:86:
6f:51:3c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa/AC5LxRdft+BvmHwMyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNGU5NTkyMDBhZWE4ZmI5MjkxNThiNzNlOGMwZTY5YTg4
ZGM1ZTkwHhcNMjUwNDE5MDUwMTA0WhcNMjUwNDIwMDUwMTA0WjAzMTEwLwYDVQQD
EygwNmE1NWFmNTk2NjMwMGYzMzkxMzU4ZDkxM2FmODIwMGE3ODk1OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbOFhsOIOv8UC7o5TSD+tyQhfJ2n
I9qY5IPK5ph14v970BTmf1s82ijMr8wvOMsgQkU1hpntsxcRwmpk5dQR+mWrExGm
+tUv4kfZcuZTFEJ6wK9mPfNbTFl7sk6VwQPQPKuf3w4D4P1WJ3u/tCMH0GqUtCaU
e1YUH96EByS99q01D2u0PS/AB/dCc+p9sAncNJGGBUWDt7hPabsc+vGhDzjrm6Zk
/TlnSHaMAut8YHJTzeE67QvYPQLx4DOTsyM6C/bQHojgNxijRHtVVpfHzPF0GLvK
FwdwPAfHuVbD7d//bp0QjsR3cZpLZb9+qKyr0Lnwvjw1d8kFZX1RJPDypQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAalWvWWYwDzORNY2ROvggCniVleMB8GA1UdIwQY
MBaAFB1OlZIArqj7kpFYtz6MDmmojcXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEt
MmI1MzZjZjdiODI1LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wNGQzNjQtNTYwZi00YjM2LThmMmEtMmI1MzZjZjdiODI1
LzEvSFU2VmtnQ3VxUHVTa1ZpM1Bvd09hYWlOeGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyMEyTbH
gbawukOBqfB7/rYRm3VIl/aLR/W8v9yuGI6b9TA4qXDTJnB78a48fPbebT5brbS7
AgCR2z/gXHVz/k+HxJT/ZP4C9qtSNaFfhkQRBpwK/lYbIjFcdeS7Avkmw1EBx8Ms
fux+09aKr8zoXg1oBBTAKkLNFpQYE9qXTveTFEeBb1HDosDxb48LTXwrXgfWAi6+
wfVya2ihqPgWXCo7GKMlwyZEtc0feWHRuG60pvqCfwXkf84lZw8eELLqvsqDWCYc
dMS8eDM0edGq8RB7lvHcNbhtctKPEAUnM7UOkLZ4M2zZFmyRHMNI5mN0+d4jbbcB
wPqOTNaGb1E8HQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:48:02 2025 by rpki-client