Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: R+WVvl8TxpXAyWKl3LNb6b5zJGzzF0Ukm2SKAd9gsW8=
Subject key identifier: B1:B0:E3:AB:E8:94:E0:B4:0A:FE:F9:80:16:95:0B:16:B1:04:71:C1
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019578D8BAAFFCFA5387AF92A831193F8A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: EC
Signing time: Sun 09 Mar 2025 03:00:24 +0000
Manifest this update: Sun 09 Mar 2025 03:00:24 +0000
Manifest next update: Mon 10 Mar 2025 03:00:24 +0000
Files and hashes: 1: BCpGmAAybEKlV3wOuVSBe587d6A.roa (hash: OMYJrykGqoEHSJmtTAAKG/WGPSWVW40cgEc5tVnY4H8=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: eiHk7cFQtbolHq+GGbxGhjOCPwzVpNAruGMohENQhIo=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:d8:ba:af:fc:fa:53:87:af:92:a8:31:19:3f:8a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Mar 9 03:00:24 2025 GMT
Not After : Mar 10 03:00:24 2025 GMT
Subject: CN=b1b0e3abe894e0b40afef98016950b16b10471c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:72:82:db:64:54:2f:fa:6a:f9:94:5c:22:
33:54:e6:4a:24:32:4e:3f:86:2f:ad:9c:80:98:b4:
47:65:9c:a7:48:8a:ad:5d:a1:fb:7e:2d:64:58:52:
b5:d9:94:85:3c:7a:2c:15:6e:90:b5:70:41:3b:07:
ed:5b:c3:8f:31:71:2f:32:3e:2f:1a:68:22:77:a9:
e1:0a:68:f4:9e:82:31:e8:02:a0:cb:30:fb:4b:51:
6d:3b:10:a5:33:9d:26:3e:81:f7:63:f7:34:88:33:
05:51:89:11:57:e2:ad:f2:9b:21:d4:52:ac:4a:b9:
72:c9:65:2c:b1:cb:f1:89:3d:ad:57:12:e3:dd:25:
fb:8c:e2:ab:c6:eb:a4:05:64:01:a4:0a:75:68:b5:
63:8c:84:f3:2f:02:04:43:96:34:f1:d9:14:0e:ac:
70:22:fa:7a:95:41:87:9f:cb:9a:75:f7:60:c4:8a:
be:da:ac:d7:39:fa:47:eb:4b:66:a9:42:b1:6e:94:
e1:00:4d:4c:d3:c8:35:57:2a:5d:90:be:c8:f1:24:
d0:51:96:c9:f3:d6:fa:ee:55:1b:c3:71:66:0f:c0:
81:43:77:9c:e1:7f:a7:95:70:69:be:1f:76:e3:7e:
03:97:48:a2:10:57:7a:ea:67:12:76:c8:15:a7:0d:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B0:E3:AB:E8:94:E0:B4:0A:FE:F9:80:16:95:0B:16:B1:04:71:C1
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cb:54:55:e5:6c:1f:4e:7d:0f:1d:c1:ac:39:ac:e9:83:9a:
14:af:03:56:9b:11:7c:17:68:e1:7a:5d:48:d6:36:5e:41:3d:
bf:70:2f:76:40:d6:a4:ce:33:55:f9:7a:b6:63:37:00:52:c8:
8b:cf:e3:99:45:8f:9d:02:2a:72:9d:96:dc:02:c9:67:51:84:
1a:b5:26:28:66:80:7a:2d:eb:ba:11:44:c0:f4:9d:18:83:9b:
3c:31:f6:91:c0:e8:08:85:c2:2e:17:89:e9:87:15:80:2a:b7:
2b:8b:4e:12:31:4d:3d:5b:05:1f:ad:c9:2d:b7:eb:bc:16:40:
f6:89:c6:90:b9:35:13:7a:09:76:de:7f:f3:9f:e4:65:94:d5:
2d:1c:05:54:13:3d:19:9d:c1:96:48:e4:bc:48:f0:aa:e4:15:
78:13:21:13:9a:7c:8d:5d:1f:b4:8c:99:e1:f3:15:19:07:59:
51:5e:19:b3:86:49:01:ce:c5:1c:8d:df:66:e1:13:65:8a:56:
a1:e6:a5:e4:e1:9a:2a:a6:14:a9:22:c6:3a:9a:00:5d:43:0c:
b3:0d:73:8d:17:cc:68:70:e0:64:4a:fd:be:b5:ad:cc:6e:9d:
51:e4:74:2a:e3:a3:a2:34:2a:66:86:b2:b9:2e:fe:75:1e:88:
e4:6c:55:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:39:46 2025 by rpki-client