Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
File: HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json)
Hash identifier: 5TYvkH3A6lkHSuMwMzmD1qaiU+p8DfLHqlNZdDIMcJY=
Subject key identifier: 16:4A:E7:DF:44:35:42:B8:D6:15:30:1B:33:49:00:BE:B9:D8:41:BF
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial: 019657CB1EB98C7B85699B0DAA009C7047E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
Manifest number: 1507
Signing time: Mon 21 Apr 2025 10:00:51 +0000
Manifest this update: Mon 21 Apr 2025 10:00:51 +0000
Manifest next update: Tue 22 Apr 2025 10:00:51 +0000
Files and hashes: 1: ESdFHrMTT9CdnTueAws85KzTpOo.roa (hash: EFe4+WtiIfRKsYq3EhY1PIgLIFzMrHc8WS2QY4wWHBs=)
2: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: a0j2xBk9anzjCXWt+qb+NIn+wVaKsPaRUqzBa5G6tjc=)
3: S7dw96BjJHjSAZkMcxGi_FB5doA.roa (hash: KE2tpzq8RhZkUzoGjIN+rbgmJi4KOhIPNewQQ1O2Z3o=)
4: lHt_Mh1w-7vs8I-ZaeWKv1xW2Ps.roa (hash: /8Glm1hc9AeZKEAxOBVRVagGt2gyvK5usk/gBvfbgls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:1e:b9:8c:7b:85:69:9b:0d:aa:00:9c:70:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Validity
Not Before: Apr 21 10:00:51 2025 GMT
Not After : Apr 22 10:00:51 2025 GMT
Subject: CN=164ae7df443542b8d615301b334900beb9d841bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:cb:2d:91:45:26:a4:3c:8e:3c:32:06:84:
b1:cb:d3:25:77:1a:2c:79:67:09:6e:aa:92:1f:2b:
73:ad:09:fa:da:32:28:02:e7:90:d7:c9:19:ce:89:
33:ba:2d:5d:41:ab:de:b7:8e:c4:56:e9:ce:64:f6:
98:37:96:e3:6a:2e:96:46:d7:23:ee:3c:0a:76:a4:
5f:5b:78:dc:b0:4b:04:0e:4b:79:b7:36:2e:f0:05:
c9:e2:9e:63:99:44:c3:a6:83:91:60:99:d6:07:01:
b6:ab:31:51:cc:66:bc:3b:3b:e1:95:8f:c0:9e:f0:
da:c8:4d:cd:cc:fa:c1:8f:b6:24:84:1e:fd:d0:e3:
f8:55:c9:f1:e2:dc:fe:1d:bc:1a:cc:e5:a4:c2:53:
8e:c8:95:69:ba:89:45:45:ae:b0:cd:11:17:30:cc:
c7:b6:52:87:e7:53:91:27:c1:7c:b0:40:9a:9e:c6:
eb:02:53:30:22:8e:c9:dc:18:1d:73:a1:e9:80:01:
d9:ae:83:7b:83:e6:b3:7f:d5:f8:a3:c4:dc:a7:1c:
c4:ff:95:f8:ac:8c:6f:c6:b6:e8:67:d6:83:72:8c:
b6:a3:c1:f5:cd:aa:e3:d1:28:02:f2:9e:96:2f:f3:
dd:2a:fd:1a:36:3a:e9:17:45:c3:3c:27:c8:3c:0d:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:E7:DF:44:35:42:B8:D6:15:30:1B:33:49:00:BE:B9:D8:41:BF
X509v3 Authority Key Identifier:
keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:69:44:3c:12:62:90:62:70:2d:cc:ec:41:fd:b8:57:a7:26:
87:c2:41:a4:19:4f:cb:1e:57:4c:e6:dd:71:38:07:7c:70:d0:
46:8e:8f:7c:ec:3f:36:f5:ff:34:b0:4c:6e:67:f1:5f:0d:93:
d2:a9:97:33:46:bd:7f:6c:cd:d2:86:51:a5:9a:b9:f9:df:96:
09:eb:02:c5:47:ad:10:65:74:38:bb:1f:c2:7a:50:97:1f:17:
57:bd:35:d3:98:6d:0d:67:bb:b3:9c:3b:26:a4:9e:02:60:96:
21:e5:c0:9f:61:77:54:cd:84:ab:f8:5f:14:17:51:54:33:ba:
8a:07:5c:58:22:01:7b:21:3c:7d:48:fa:f0:ee:4e:94:a3:18:
8c:0e:b5:9a:15:22:37:8f:37:9a:1a:42:83:e6:21:ed:15:08:
dc:da:74:db:8b:51:8a:8a:37:7b:bf:22:4e:bf:8f:50:85:59:
6d:98:58:c3:40:7c:5b:88:68:99:2c:24:2d:7c:f2:ac:be:c2:
40:58:83:72:3b:a7:95:2c:79:6e:01:53:d2:19:23:85:ee:52:
c9:41:41:b8:97:9d:57:ba:c7:11:3d:74:55:f0:16:63:22:0c:
66:5f:80:c0:fd:8d:f3:70:b4:3a:a7:cf:67:2a:5a:bb:35:2a:
6e:43:67:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:31:42 2025 by rpki-client