Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier: qPi3TX4IxRrrKZS81hkMvLgjqbfihpu+rH1EtE87tF8=
Subject key identifier: 1D:DA:2D:F4:BA:6D:64:F3:8B:91:CA:50:5D:12:D2:21:87:88:69:37
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial: 01964E23789B676C488687405DFF36E31238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 13:01:09 +0000
Manifest this update: Sat 19 Apr 2025 13:01:09 +0000
Manifest next update: Sun 20 Apr 2025 13:01:09 +0000
Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: KlNzWn99Q7Jl1qRAjAL+2wax9wyOKFvrN0iVCgUegWM=)
2: ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (hash: HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:78:9b:67:6c:48:86:87:40:5d:ff:36:e3:12:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Validity
Not Before: Apr 19 13:01:09 2025 GMT
Not After : Apr 20 13:01:09 2025 GMT
Subject: CN=1dda2df4ba6d64f38b91ca505d12d22187886937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:78:53:05:e9:a6:97:36:7e:55:46:3f:a0:
13:bf:0c:95:c8:07:d8:5f:13:ff:d0:2f:ce:0c:11:
07:84:30:18:e7:09:ce:a8:a4:99:7a:80:3f:2e:56:
62:d9:da:b5:d0:e0:22:97:1c:da:cb:42:00:60:6a:
91:3d:22:07:a7:c7:a7:4b:87:c6:c3:e9:4e:31:70:
2e:75:14:b5:4b:13:1f:30:07:97:e8:0b:de:dd:66:
9d:a7:83:c3:95:53:6a:4a:54:a6:6b:56:c9:ca:de:
bf:76:12:7a:65:ee:60:d9:d7:17:16:88:90:10:cf:
00:9f:b4:f4:50:a4:3d:92:2f:b4:e4:78:e1:f1:37:
2c:e4:68:8b:4b:7d:93:d5:25:14:90:c2:c4:ea:f0:
64:d6:20:31:fe:ea:61:1a:e0:1f:10:44:e4:7f:98:
30:4f:6c:33:a0:28:7b:36:e1:f5:21:a8:a9:d6:ed:
60:18:61:77:ad:53:16:96:32:55:3d:4c:c7:3e:78:
c5:09:5c:43:3d:9f:c0:aa:f6:53:6f:87:c1:f0:ed:
81:cd:8a:e6:12:22:e5:ae:5b:5e:af:e0:cb:37:ea:
bd:ab:8e:8f:a1:65:8f:a8:79:a0:01:db:1f:3c:28:
87:79:2b:7c:45:34:36:bb:5e:6e:18:ef:79:b8:26:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DA:2D:F4:BA:6D:64:F3:8B:91:CA:50:5D:12:D2:21:87:88:69:37
X509v3 Authority Key Identifier:
keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:98:f5:57:bc:22:22:98:d4:51:fb:95:bd:a8:47:76:69:94:
cb:af:e7:ea:2d:38:26:01:cd:0e:cf:0e:79:30:ef:46:a7:01:
41:63:d9:86:0b:f8:ba:ea:ba:83:22:56:e3:f6:8e:93:de:5f:
b6:07:35:aa:fb:18:1c:26:e9:8e:d8:e5:13:e9:10:e6:87:21:
3c:53:3b:93:40:e5:84:55:6d:c4:5f:05:58:29:8d:c9:8c:7a:
5b:55:1f:24:67:9b:65:41:68:4a:d4:aa:93:71:59:5a:a8:8a:
1b:84:5d:ae:68:51:4d:4c:b9:6c:80:4d:e2:67:b6:ac:06:93:
dc:c8:22:ab:a9:7a:7f:51:6f:e6:37:bd:5c:45:e3:a8:70:43:
d8:c7:32:ce:1b:65:cd:31:10:e0:0a:26:a1:f6:a2:fb:9b:40:
b9:5b:b7:1c:4b:45:78:01:a4:8e:c0:09:41:00:e0:12:66:ce:
ae:69:b2:47:d0:80:2e:23:6b:94:fe:71:55:85:81:12:10:03:
7d:16:f8:6d:cc:5d:da:ed:50:75:21:aa:7d:f3:07:b2:90:63:
a8:9d:c7:2f:19:fa:af:f9:70:3d:4e:ad:47:57:74:5e:ad:e4:
76:96:2f:58:f3:3e:eb:c1:41:c5:db:3d:48:04:61:9e:6e:a1:
4d:a6:05:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:07 2025 by rpki-client