Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: A9JES+Am+85afYKGTo10LHUHTLHnOhS0DaNsVbJUqqs=
Subject key identifier: 48:EF:B1:01:F6:BF:17:F3:48:26:3C:7E:5C:6F:B2:96:FA:55:9B:41
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 019659F0858050B44A9C1EDA8A61F9C53726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 0320
Signing time: Mon 21 Apr 2025 20:00:57 +0000
Manifest this update: Mon 21 Apr 2025 20:00:57 +0000
Manifest next update: Tue 22 Apr 2025 20:00:57 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: ZUazHKgFxdRg9YSriuqEHsbFqqDBxpyDiWquodKrbn4=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:85:80:50:b4:4a:9c:1e:da:8a:61:f9:c5:37:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Apr 21 20:00:57 2025 GMT
Not After : Apr 22 20:00:57 2025 GMT
Subject: CN=48efb101f6bf17f348263c7e5c6fb296fa559b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:2f:b4:11:a4:73:34:6c:cc:d4:0c:ca:59:
ee:5e:94:d8:e8:83:a8:ef:31:4a:88:39:f4:f4:78:
35:1e:9a:f7:05:3e:db:19:6c:d1:a4:57:8e:0f:ec:
1b:a6:9a:16:b0:84:3b:28:84:d9:73:9d:6e:b3:ad:
3a:f4:e6:00:71:07:5f:37:82:6c:c7:5b:a3:28:23:
2c:14:78:59:d5:53:48:91:6a:40:e9:80:71:04:34:
b2:cc:e5:bf:64:ff:20:83:6d:ab:65:b8:e6:d2:1c:
a1:7b:57:04:54:8f:7d:dc:bf:cd:cc:2f:89:ef:21:
96:67:89:c8:46:fe:69:e3:7e:62:c7:51:7a:1d:bd:
fd:ed:a6:c7:2f:a3:54:22:10:4b:e0:77:36:ea:8a:
10:5e:21:18:ed:bb:b4:68:6c:a9:81:f7:11:1f:01:
07:01:a6:2d:61:60:72:b0:9d:f2:f3:c2:e0:57:55:
fa:3a:48:e7:43:72:75:6b:3b:e4:a6:20:26:1e:b9:
4f:16:4f:db:0d:a4:ef:d3:d1:4e:a2:84:90:b3:80:
74:92:d1:f6:82:63:15:09:48:98:9a:d4:cc:86:b0:
d5:50:de:ca:09:85:6d:e5:3c:42:0f:5e:b0:42:59:
29:00:da:d7:c5:35:36:bc:01:17:25:34:6d:3f:ad:
11:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EF:B1:01:F6:BF:17:F3:48:26:3C:7E:5C:6F:B2:96:FA:55:9B:41
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d5:de:86:c8:c8:9b:dc:2c:34:37:f8:c8:19:f6:03:24:ae:
ca:f1:08:4d:eb:10:fd:b6:8f:ff:53:a9:2b:3e:04:67:44:3d:
90:87:33:c9:61:0b:74:75:d3:3d:75:57:2f:c7:6f:5a:09:25:
aa:52:dd:39:43:9f:f4:50:b4:d6:90:9b:b3:fc:eb:c1:66:d0:
21:e4:58:d4:16:72:83:7d:1f:c8:c1:cd:0f:a0:5c:b0:9a:e3:
f9:8e:2f:49:62:b0:fd:f2:cd:5e:a4:c2:b1:f9:38:9e:54:43:
c7:07:6e:59:f8:a1:4e:47:84:f8:ea:84:4f:67:59:4b:cf:5e:
9c:02:6d:ac:77:96:9c:94:d9:03:6a:45:c7:fe:10:f9:17:02:
dd:5d:43:ec:62:d7:64:30:72:d0:ac:fe:b6:e9:de:c5:b7:17:
7c:94:55:6c:96:99:e7:97:d6:8c:6d:43:d0:00:e8:01:30:1d:
34:57:3e:4c:d4:28:cd:00:e4:c9:d0:d0:1a:e9:7f:b9:28:3a:
58:83:b9:c0:c8:ce:5f:b7:9c:50:87:22:ff:64:95:34:04:fc:
7d:5a:be:23:1f:76:f9:d9:57:b6:2b:aa:a7:68:78:b9:6c:13:
4c:d4:76:8b:fd:7f:b0:9f:c0:81:1d:a2:cc:29:b7:46:90:88:
6c:01:e7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:37:05 2025 by rpki-client