Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: 6+rKStS8XNya2kTFT1Tf0ueNE209Pk4TTPFKSb592og=
Subject key identifier: 31:58:E9:99:4C:1F:47:D8:28:1D:36:F9:20:30:CB:96:4E:F4:9B:9B
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 01965191CFEA86B76C6EFE7E0E7059F1DCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 09FA
Signing time: Sun 20 Apr 2025 05:00:32 +0000
Manifest this update: Sun 20 Apr 2025 05:00:32 +0000
Manifest next update: Mon 21 Apr 2025 05:00:32 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: slokeCz6myLNeOEC6Fsw1tIl5n8CX7bhdD/GwuV9rpg=)
3: RTuoPdvywC_wXQboVeXZhnsBE8c.roa (hash: eSP6Qd1xbWVau/rn0W/JU8IDdXr668CVKvYbLZet0E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:cf:ea:86:b7:6c:6e:fe:7e:0e:70:59:f1:dc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Apr 20 05:00:32 2025 GMT
Not After : Apr 21 05:00:32 2025 GMT
Subject: CN=3158e9994c1f47d8281d36f92030cb964ef49b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:c0:b8:13:a3:6c:75:b1:22:59:b2:ee:ca:
c6:bb:31:0d:70:63:b7:93:12:5d:65:34:bb:9b:df:
47:3b:33:0f:49:53:ef:2a:13:11:b7:af:73:95:03:
1f:5d:de:ae:35:35:b8:78:00:7b:5a:46:0a:31:9a:
f8:72:a8:ce:28:6d:66:ba:7a:05:c1:ac:2f:a2:89:
54:54:3f:14:ea:08:0a:6b:22:1b:b4:0c:ce:69:ef:
92:96:e8:a2:d4:5c:75:01:e6:d9:f4:0f:f1:37:e7:
04:cb:0d:e2:d3:ed:7f:b6:5f:62:e8:b6:e1:78:1f:
61:f3:35:1d:bc:0e:58:1c:f0:2d:c0:be:a6:c4:84:
e2:96:48:90:2f:09:2d:15:e9:70:77:28:81:8e:32:
4a:79:83:7c:d3:59:3b:69:da:d2:d1:e5:21:91:e5:
4e:ba:78:9f:45:4b:13:39:a0:d9:12:a7:4c:0c:17:
ee:01:06:b2:5c:c1:bb:24:e5:14:a8:87:f0:24:52:
90:e1:2f:1e:bb:54:b2:c2:a6:5a:7d:65:1e:ea:21:
29:2a:30:8a:90:29:db:f9:0f:f5:c7:8b:7e:69:a1:
ae:38:19:f1:43:7d:77:24:77:9c:8f:7b:d9:6e:72:
81:fe:c3:15:30:d3:69:c4:54:99:a4:19:3b:a3:97:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:58:E9:99:4C:1F:47:D8:28:1D:36:F9:20:30:CB:96:4E:F4:9B:9B
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b1:9c:62:5f:b1:75:71:a5:50:38:83:8c:f1:a7:6e:f5:e2:
da:8c:a6:92:5a:f1:54:36:12:52:8b:d0:0e:dc:5b:3f:29:3e:
94:e6:9f:d9:05:ea:ff:88:fb:97:6d:3d:87:6a:f9:59:df:9e:
0f:79:f6:87:b0:fb:32:dc:e2:b2:70:12:8e:2c:b8:f3:6e:b1:
87:83:e6:7c:68:5f:e0:26:5d:c4:41:aa:66:a3:9e:bc:45:9b:
3d:ec:09:0a:67:fe:39:90:b6:e6:88:f7:98:fb:18:36:3a:6a:
c7:db:c8:d9:f1:7a:d4:59:01:9a:c1:34:f9:9b:95:be:80:42:
28:75:45:25:de:4b:d8:a9:b2:f9:75:ff:b0:d4:00:fa:b9:ca:
4e:9d:ca:23:4c:53:ba:79:6e:82:9a:f9:9f:a7:cd:67:7e:d1:
3c:28:af:5b:46:50:79:fb:85:29:fc:5b:18:6e:9a:36:dd:14:
79:61:19:62:bd:28:67:b0:01:96:c8:7e:a5:5a:bb:7b:27:4e:
c5:46:e5:be:02:b9:dc:ad:90:d3:91:04:4c:30:9a:ec:10:6c:
4f:0e:f8:1f:28:10:fe:19:0d:57:e0:d1:3c:92:a6:cc:51:b4:
a7:d7:da:ef:fe:7a:4f:3e:56:e7:3d:e6:ee:72:6d:51:b4:51:
c8:9d:75:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:16:07 2025 by rpki-client