Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File: HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier: 5PtM0BEBbnWWrwfJUMds5PqfpOoaCqN7kHYSfCCdNn8=
Subject key identifier: D7:4B:90:4B:7A:BA:7F:24:18:1E:D4:20:67:F0:58:FD:03:5C:13:1D
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 01958B4D49B292309377B8FA4F72A0656A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 17:00:52 +0000
Manifest this update: Wed 12 Mar 2025 17:00:52 +0000
Manifest next update: Thu 13 Mar 2025 17:00:52 +0000
Files and hashes: 1: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (hash: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=)
2: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: S3lenTqvOL6sLo6C2T7PkaHBKn/BUvAeQ5+VGeCVEIM=)
3: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (hash: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:49:b2:92:30:93:77:b8:fa:4f:72:a0:65:6a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Mar 12 17:00:52 2025 GMT
Not After : Mar 13 17:00:52 2025 GMT
Subject: CN=d74b904b7aba7f24181ed42067f058fd035c131d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:1b:ac:95:75:c9:08:66:9b:ae:17:53:53:
63:a4:8b:ce:f7:e2:4c:fd:fe:07:8d:e1:58:eb:93:
76:71:37:5e:73:5d:d9:18:b4:2c:89:33:d8:a5:f9:
ba:24:11:7f:20:86:9c:79:33:0a:49:3f:58:df:ac:
c8:f4:73:a2:2b:5b:ab:22:f4:ae:32:8e:88:77:e0:
dc:41:93:df:ef:50:4a:df:42:8c:5c:6a:d6:5d:96:
f7:76:d8:f2:d1:d0:dc:b9:28:f6:97:be:c1:3b:ca:
c3:fc:63:57:a2:e8:81:8c:7d:40:a3:5a:12:19:6d:
4e:bc:80:50:63:d3:f4:ee:7a:11:f9:df:67:7d:d5:
86:a8:df:ff:16:ee:01:7e:26:26:90:b0:c6:fa:87:
0e:44:d3:d5:82:0d:1c:63:b5:b5:7f:c9:77:f6:04:
de:44:6d:18:24:7f:81:1a:77:7f:da:9c:e2:f5:b1:
9f:ee:76:bc:2a:6d:a3:81:75:1d:26:63:ea:de:5b:
d0:70:55:01:cb:05:ba:ee:92:5c:26:93:f0:2b:28:
00:da:05:ee:32:c0:e6:1f:22:6b:c7:8f:dc:a7:a3:
20:79:2f:f2:8f:2e:5d:01:20:70:66:68:e5:6d:58:
58:cc:db:02:0c:3f:41:31:e5:11:94:1a:3b:89:48:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4B:90:4B:7A:BA:7F:24:18:1E:D4:20:67:F0:58:FD:03:5C:13:1D
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e8:d6:b8:47:61:7f:e8:ae:13:54:e2:9f:62:20:f4:bd:7f:
7c:dd:db:e0:29:7a:6e:e0:4e:b4:4b:bd:85:2a:c4:6b:91:47:
8c:24:dd:4b:32:ed:1f:85:24:65:58:25:17:2f:90:ab:6a:c3:
61:05:4e:ad:ff:2a:96:82:41:26:bb:fa:e9:c2:ad:31:b8:81:
d4:ce:71:62:29:72:55:bc:c5:ae:7f:b6:59:20:b2:cc:fd:99:
56:b1:af:b4:cb:f2:6c:2a:90:57:d2:b7:49:86:61:7a:34:83:
d5:c1:28:dc:f8:6c:ba:3a:2f:64:b9:3a:58:6f:c9:27:b2:ae:
4b:e7:52:02:2c:ee:7c:4f:82:94:85:6a:54:2c:fe:2d:e5:8a:
46:00:0e:69:d5:47:a4:e5:c8:c1:4e:80:89:77:cc:2f:5e:09:
7c:95:f3:44:d6:06:0b:5a:1f:13:78:c1:21:45:4b:3b:13:ec:
8e:b7:1e:2f:dc:25:f7:d1:02:12:4a:b4:21:b9:1a:43:11:c0:
fb:be:ab:43:1f:fd:ff:d6:d9:1d:95:19:94:a9:e1:05:a0:5f:
23:0b:90:0d:63:29:46:88:b0:f9:f2:3f:5b:da:64:b1:0f:c1:
74:ff:5d:a0:60:4e:ed:1d:14:6d:aa:43:7b:36:38:2c:b2:9f:
c5:e4:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:36 2025 by rpki-client