Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: BjDlbRfenlfZM3B4uWZ1kS9gO64RbGjWLr3QSA4oXZc=
Subject key identifier: CC:B2:64:9E:BC:20:A3:26:0E:DC:E8:B0:5A:D1:5C:F9:D2:CE:28:B8
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 01958CCEA2CAA7E03832EC5682EA5F344854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 00:01:47 +0000
Manifest this update: Thu 13 Mar 2025 00:01:47 +0000
Manifest next update: Fri 14 Mar 2025 00:01:47 +0000
Files and hashes: 1: heJEz4aIV8pCovQNxPGHm98CLzg.roa (hash: oSOD/5s+DowUJTv2duSzog5oYqkTO1A7yRox3C69klU=)
2: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: rMJXJlju2EZzmSuP7gUE2Cfmly/DfQpIY+qJ7D2wysU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:a2:ca:a7:e0:38:32:ec:56:82:ea:5f:34:48:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Mar 13 00:01:47 2025 GMT
Not After : Mar 14 00:01:47 2025 GMT
Subject: CN=ccb2649ebc20a3260edce8b05ad15cf9d2ce28b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:56:81:d1:78:12:d1:7d:92:03:86:b0:74:
d4:7f:d7:87:31:e3:11:a8:46:25:a9:2f:29:20:bd:
3b:91:1b:bb:83:0d:e1:2d:77:28:72:8e:5b:2a:b1:
4b:44:27:6f:08:ea:f4:d1:64:a6:ab:7e:df:97:62:
73:f2:ce:06:bd:cd:d3:ee:2d:f5:11:9a:fe:fa:5e:
77:5f:8e:a8:31:8a:c6:d1:c0:b3:0b:5d:61:c7:ca:
2f:75:40:da:f9:ec:62:f2:84:a6:0c:e7:d0:d3:0c:
b7:f2:8f:e8:72:2c:51:1c:e9:18:3a:a3:3a:56:18:
ec:5b:cd:0e:dc:15:50:6b:88:58:e8:d9:39:31:f8:
5a:84:eb:71:01:96:1f:db:eb:05:a9:11:df:33:04:
41:be:97:fe:69:ce:6f:78:e2:c5:d2:31:83:31:31:
94:77:a6:61:de:8e:72:13:2e:2b:53:12:1e:ff:30:
11:89:ce:07:68:f7:60:b9:f6:e2:0d:b7:91:c1:2a:
74:2f:0b:ec:9b:9e:e1:cf:ec:12:6f:3a:f0:e8:df:
82:46:b6:de:ff:39:a9:b5:f3:06:94:a0:db:f3:b1:
13:73:64:b3:32:2f:31:27:9f:9e:76:00:74:03:b1:
d9:48:b5:b6:36:53:51:c0:35:09:f2:63:15:57:1e:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B2:64:9E:BC:20:A3:26:0E:DC:E8:B0:5A:D1:5C:F9:D2:CE:28:B8
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:05:f8:be:cd:e8:ca:69:33:d7:ef:f6:75:ff:2f:69:20:79:
a6:2b:80:e9:ff:45:c8:f3:7c:a1:99:7e:b2:a7:f7:e4:be:21:
09:97:ad:53:fe:05:85:f7:29:0e:e9:03:db:ac:18:c2:17:3c:
cc:b9:b2:80:2a:29:70:79:0a:30:80:5d:7c:3d:b2:42:8f:8b:
6b:5d:55:df:a6:f2:a3:98:7e:86:00:09:31:95:42:50:b2:05:
fd:85:b8:7f:5c:1b:06:19:ac:fa:2d:9e:5d:7b:06:cf:29:de:
89:ff:2a:ec:15:d5:a7:9c:ae:ff:53:15:16:e6:03:94:eb:db:
fc:3f:a9:54:6d:6a:71:7b:a1:06:98:a5:c7:3e:37:94:aa:24:
55:de:35:20:66:90:c4:e1:a7:f2:12:68:ba:0a:96:a5:b5:24:
2b:50:99:45:61:04:63:76:a3:d2:fa:bb:55:65:81:45:06:3f:
29:06:33:21:1c:3a:9d:2e:71:02:92:17:27:11:a0:41:0b:28:
c1:26:5e:c3:93:e4:05:9d:b8:45:7c:8f:70:c7:87:e1:80:27:
51:17:8d:14:1f:7c:bb:3e:de:13:56:07:8e:ad:6d:39:e0:ce:
5f:69:46:37:29:56:b0:ab:d9:ab:73:4d:8f:f6:ea:17:5a:76:
33:0b:e2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:29 2025 by rpki-client