Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: Y1fyUq5VIHzKTsbWdnbqCEX/j5i2Iu8G3bT5J13q5oM=
Subject key identifier: BF:25:C0:50:37:92:B5:AD:C3:2F:C6:91:C6:5F:AC:33:4A:68:52:34
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 01962F3DC2C52C541271E0A198ABE488D39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 13:01:38 +0000
Manifest this update: Sun 13 Apr 2025 13:01:38 +0000
Manifest next update: Mon 14 Apr 2025 13:01:38 +0000
Files and hashes: 1: J2vDIE39ML2dQIioX-84LBq6-7M.roa (hash: 8kL6c8FUmTdyZfSSSH7csG9NWpaHPuGePFXhn8lYBjs=)
2: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=)
3: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: WHflx6KLqEVd9vIyG132hyB/YASRbXTas3Vh7pZ7CQk=)
4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:3d:c2:c5:2c:54:12:71:e0:a1:98:ab:e4:88:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Apr 13 13:01:38 2025 GMT
Not After : Apr 14 13:01:38 2025 GMT
Subject: CN=bf25c0503792b5adc32fc691c65fac334a685234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:eb:85:46:45:0f:92:12:ec:18:38:d9:23:
b1:1d:7e:82:23:fc:ab:bd:94:64:f9:84:b6:ac:ad:
fc:26:4f:36:64:5a:29:46:23:a9:df:69:27:c1:c8:
2b:24:2f:e6:c3:2a:3c:1b:b7:d0:96:f2:ee:ad:31:
81:bd:be:8d:6d:70:0f:2e:1a:17:de:a9:22:f5:75:
fc:d7:c7:b5:25:1a:94:5c:ad:b9:3e:12:43:c1:ae:
77:ff:0e:12:0f:d5:d8:24:51:5d:e9:25:f2:0b:0b:
90:d0:90:53:98:8c:25:15:72:56:75:d0:57:27:08:
fb:02:a3:c0:7c:a3:a3:de:d7:94:b4:22:46:da:85:
56:64:92:5d:da:b5:e4:80:1a:f3:71:9c:78:f3:f7:
f0:36:93:0a:86:90:11:0e:18:eb:93:ef:7c:3b:dc:
ef:98:fd:d7:ef:75:4b:1f:41:6c:95:5d:a5:32:53:
a1:ae:63:77:2f:be:da:7f:16:43:b1:d3:ef:ef:75:
7a:32:45:62:49:cc:07:00:7a:ca:6f:3f:a6:a5:79:
8d:99:19:46:32:a6:51:2e:1f:b4:4f:a7:36:89:58:
3d:2f:3c:03:64:ae:11:04:30:39:00:90:46:0d:e8:
06:4e:78:6a:b3:c1:42:cc:f0:29:e7:e6:1d:12:4a:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:25:C0:50:37:92:B5:AD:C3:2F:C6:91:C6:5F:AC:33:4A:68:52:34
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f4:97:9e:79:0c:0a:be:44:b7:03:c1:81:2a:93:0d:4a:d1:
1b:f9:bd:66:c9:24:50:11:bd:4e:23:18:ae:22:38:dc:fc:8e:
e3:a7:62:cc:fc:2e:d9:1e:87:03:f9:d9:62:24:a3:30:5c:7d:
6b:ed:33:75:f6:ac:9b:5b:66:97:c3:53:ba:e1:e0:0a:ee:b3:
fa:17:43:c3:58:e2:08:3b:3b:d0:ab:55:12:01:aa:1a:eb:51:
d5:73:f8:a6:5e:bb:f1:62:dc:de:34:db:99:21:9d:52:dc:5e:
ad:07:29:dc:58:6f:07:c8:6e:23:87:a7:8c:7d:90:27:f2:c1:
51:7b:f9:ae:e9:27:08:4f:fe:46:c9:10:f4:04:3d:6e:24:14:
e7:71:ad:1d:7c:12:2c:ea:55:8d:d5:46:0b:f4:c1:8a:ff:7e:
0b:5a:80:89:3d:b8:dd:76:d8:86:9a:6b:3c:1a:e3:63:90:49:
bf:ab:07:5d:96:2e:60:e0:fb:e4:fa:59:8a:71:68:1e:68:cb:
33:3a:70:1c:9f:c4:39:f8:d8:de:c0:37:e7:e1:1e:5b:05:ef:
7d:81:6a:ae:3a:43:5c:16:0e:bf:b4:d5:da:16:50:1d:d5:b8:
24:05:9d:59:fd:65:8e:88:1b:84:00:25:00:1d:ce:b7:9e:bb:
c7:90:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:22:47 2025 by rpki-client