Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json)
Hash identifier: ToircOwddsQtEHM0uUXcpFrDBMqJP3TMJRVMmzVBvUk=
Subject key identifier: 99:7D:02:B9:74:95:6F:27:F1:3F:7E:8E:DA:AD:7B:25:16:38:40:9B
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019612B3A8C1DDBE2E6FCAC6322F749471B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
Manifest number: 01E5
Signing time: Tue 08 Apr 2025 00:01:26 +0000
Manifest this update: Tue 08 Apr 2025 00:01:26 +0000
Manifest next update: Wed 09 Apr 2025 00:01:26 +0000
Files and hashes: 1: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=)
2: 1XXrB12LRdMGqs-GeS3cAximpqI.roa (hash: QvMP+g9vxMZ3cjLKa1foWvZXJz5KMsBVO3RZBZhceVg=)
3: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=)
4: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: IRQnVK6K88S20TC2YTB9SmfmrbooluuM3v+hj4/NgZY=)
5: Xrc0g_6FSG8ZFIg-M8j_EmbMaBk.roa (hash: Rc7LlFZsQD6UtspfP1hY2HJq001uYyMfvHYShOgLlRs=)
6: pUDcLqhd8k-OHqhDTMHEWLFxtNI.roa (hash: zmsnQNHG6rnZC/5WP217xaq98ZpVSxzIVkPlWZUUiFE=)
7: rplcEHwnzrs9ea4yV0c2pW2uUSU.roa (hash: F6kcOWEqyk9+Z0k9BnSlsmaw3fMe2/8X0jrKTuWJCk4=)
8: xj4dn4X9F3Ze69MMK18xkdCcvVM.roa (hash: i2JSpijukaEwTLCWCzXl/0mFG9rtjIN7i38MFp1Opfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:b3:a8:c1:dd:be:2e:6f:ca:c6:32:2f:74:94:71:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Apr 8 00:01:26 2025 GMT
Not After : Apr 9 00:01:26 2025 GMT
Subject: CN=997d02b974956f27f13f7e8edaad7b251638409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:f9:8a:bb:5a:bd:ca:a8:11:63:9e:a6:a0:
4b:e6:33:46:db:26:a1:ca:95:94:74:27:9d:ef:28:
1b:b5:89:ae:7e:aa:ac:c7:98:a3:cd:d1:41:9c:ba:
1f:7b:22:67:a5:ea:69:27:9b:03:32:3b:e2:28:7c:
ec:54:4a:2d:ff:43:65:8a:33:e2:46:ba:32:c3:18:
68:98:4c:53:11:dd:59:6c:75:14:a3:31:b4:70:11:
6a:de:5b:aa:52:ef:24:d8:6c:71:32:af:91:8b:7f:
33:e2:cd:c5:3a:e9:e0:f1:c4:f2:d7:72:fe:54:ad:
ac:ab:9e:51:55:f9:7d:ef:6f:a7:b1:a3:b3:86:f1:
e1:4f:9f:93:fa:ba:bf:69:31:83:21:01:f6:62:33:
52:cf:d8:7a:c9:02:54:98:ed:40:d6:ca:ae:26:f0:
4b:2e:80:2e:e0:ea:11:91:6f:7e:d5:45:98:d9:28:
09:87:40:31:af:98:7e:e7:56:a7:41:39:b0:9d:4f:
cf:e0:05:69:c4:2a:6d:e0:02:9a:ff:ad:01:f2:99:
6b:50:9a:0a:ce:63:8d:03:92:51:51:bf:5b:04:58:
ca:8c:a8:89:30:19:16:52:90:68:ce:1c:a2:77:f9:
ca:4b:14:80:c7:0e:84:11:c3:2f:e0:5a:19:2b:d7:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:02:B9:74:95:6F:27:F1:3F:7E:8E:DA:AD:7B:25:16:38:40:9B
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:46:8f:a8:08:30:bc:54:ae:ab:93:78:4b:09:33:e2:1f:eb:
af:02:36:1a:65:81:db:98:5d:a9:75:44:11:09:1d:01:05:85:
8e:52:72:eb:04:6c:82:16:41:7c:5b:84:d5:8a:e9:f0:17:04:
f7:75:05:b3:8c:e1:8f:1d:96:8b:b2:0c:ae:54:bd:81:72:8d:
d3:00:ef:e4:74:57:68:1f:23:b8:9a:88:5c:83:40:f3:7b:e0:
c9:58:5c:49:e1:5f:e5:68:42:87:88:e1:9f:e3:5d:07:b0:7b:
4c:22:f2:5b:c9:cf:18:70:a3:df:74:f9:f5:44:49:a1:a3:8a:
f8:35:2a:ea:aa:6b:d5:9f:09:84:90:ac:59:ce:ba:98:ac:8c:
7d:90:59:4a:e0:0c:46:d2:8a:96:e0:49:86:b7:24:96:a7:5c:
ca:1d:38:59:5c:17:41:98:f5:39:ba:a4:51:02:29:cc:f1:f4:
4e:e1:93:23:0d:3f:ee:04:3c:0c:37:e4:70:d8:d3:83:df:73:
d3:2a:f5:83:17:50:e0:ad:49:de:55:e6:67:c1:f6:3a:88:8a:
62:e1:33:09:87:22:85:67:0d:7a:c5:ed:fd:89:c1:f1:a7:37:
d3:0a:42:96:df:f4:7e:fd:f3:7d:cc:de:db:bd:d2:71:ad:22:
51:97:6c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:49 2025 by rpki-client