Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: 7xV9yJYHcpUw+mv51YGuuu94Kzp866OKLJ9M80owrl0=
Subject key identifier: 61:26:FE:32:75:D7:C3:67:42:57:DD:2A:B5:4B:2D:E4:55:2E:46:5C
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 019644E8C3F21ECB953D82AF52D3C82BC405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 14F8
Signing time: Thu 17 Apr 2025 18:00:27 +0000
Manifest this update: Thu 17 Apr 2025 18:00:27 +0000
Manifest next update: Fri 18 Apr 2025 18:00:27 +0000
Files and hashes: 1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=)
2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: qzwn3B6cBeyNa4wJLswgHZpJB920f2cRI0GiwTC0YeE=)
3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:c3:f2:1e:cb:95:3d:82:af:52:d3:c8:2b:c4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Apr 17 18:00:27 2025 GMT
Not After : Apr 18 18:00:27 2025 GMT
Subject: CN=6126fe3275d7c3674257dd2ab54b2de4552e465c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:ec:db:13:d8:42:a0:a3:0f:c4:6a:b5:e4:
db:02:75:db:9d:4e:88:cc:43:a5:8e:ac:e7:2c:0f:
db:5e:58:b5:75:32:7a:05:38:3d:b9:d1:d2:8a:48:
8c:f3:90:2f:e9:44:27:06:db:96:32:7f:1b:7a:21:
27:4d:47:ae:54:0a:0f:5d:80:43:7d:3a:4e:6d:85:
a5:dc:af:05:59:57:46:de:1f:8f:10:d0:21:bb:53:
13:36:15:34:94:91:71:43:ae:fd:33:4b:d3:ac:3e:
c2:e1:ad:de:16:45:80:e5:b4:29:0d:e8:ea:7a:97:
ea:bb:c3:cf:28:56:c2:07:f4:d2:65:e8:ad:ca:0a:
a7:ab:cc:20:5f:ec:90:e9:52:6d:3a:62:31:4e:b0:
e3:26:bd:1b:6b:9a:6e:2f:e9:d1:57:d6:7b:5f:89:
a0:a1:9a:61:19:a5:e5:0d:9e:9d:d2:a0:54:98:8c:
b3:c5:e9:20:f1:df:3b:96:dc:ec:0c:2a:b9:7c:01:
59:98:bf:32:a9:36:58:6d:5d:c2:2c:f1:f7:6c:08:
32:7d:5d:87:d5:91:63:b7:d1:d3:58:8e:79:a0:c6:
7c:4e:17:58:78:34:d1:11:ad:9a:84:0f:ce:89:9b:
37:c9:49:d3:b9:fd:1b:e7:45:01:d4:38:24:90:16:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:26:FE:32:75:D7:C3:67:42:57:DD:2A:B5:4B:2D:E4:55:2E:46:5C
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ce:70:75:86:29:6d:2b:c3:ca:e9:2d:aa:f6:e6:32:71:06:
78:ad:5a:85:25:23:d0:4e:8c:60:63:85:55:4f:3e:df:ab:f7:
61:cd:06:1a:8e:6f:61:6b:dc:2e:74:22:39:86:6d:58:b7:18:
00:47:c4:f0:a7:a0:8e:15:6b:2a:18:f1:2b:cb:b2:3c:ee:31:
c1:59:bd:fe:f5:e6:6d:fc:e1:ca:30:c5:f1:ef:a4:50:a8:cc:
41:5f:57:03:f6:18:56:69:bc:ee:6b:0a:8f:c9:be:22:39:39:
86:1f:89:1a:10:73:be:86:dc:f9:61:50:33:fe:cd:07:69:f6:
47:ad:57:a1:e6:64:15:a3:a0:0b:eb:7f:8e:60:ed:e8:c8:79:
8b:a1:1c:78:d6:19:e7:b9:00:f6:0a:09:26:7f:6a:67:8f:71:
fd:ab:a4:80:00:4a:87:34:f5:40:75:32:76:58:31:ff:dd:76:
51:72:dd:c6:e8:d7:b4:6a:19:04:27:9f:21:22:e4:c0:93:74:
10:4b:d1:de:79:9b:34:8a:ba:d5:76:a0:ba:06:46:94:a7:6c:
21:2b:95:d8:5e:7e:cd:d3:5b:82:dc:02:c7:7a:ec:57:6d:f8:
34:36:36:f2:e9:0c:ba:76:ec:4e:74:fc:3c:e0:ea:3c:ad:11:
b4:f2:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:35:32 2025 by rpki-client