Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
File: HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft (raw, json)
Hash identifier: ri3XuBnUX/8v1c1xXEQzx6cRqDDgTMaAA2M7kUtW5xI=
Subject key identifier: 1F:F4:11:EB:60:85:08:5D:03:C7:CA:23:4F:3A:D0:25:01:A9:13:0E
Authority key identifier: 1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
Certificate issuer: /CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Certificate serial: 01965801D94455BF7DE5E8844C2592868D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
Manifest number: 0B84
Signing time: Mon 21 Apr 2025 11:00:38 +0000
Manifest this update: Mon 21 Apr 2025 11:00:38 +0000
Manifest next update: Tue 22 Apr 2025 11:00:38 +0000
Files and hashes: 1: 0FwdA4ymMzmi2xIxcm9ptvfrFQY.roa (hash: qKX9mbONM6/Xx6gF2emn3N/lO2VKopekGuKmwl2j208=)
2: HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl (hash: T5KzwfZi98J7o7eFYxXGNgrT6JPbxa8djBNJaxBCeBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:d9:44:55:bf:7d:e5:e8:84:4c:25:92:86:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Validity
Not Before: Apr 21 11:00:38 2025 GMT
Not After : Apr 22 11:00:38 2025 GMT
Subject: CN=1ff411eb6085085d03c7ca234f3ad02501a9130e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:43:56:f1:09:2f:ea:f8:63:d9:03:fb:9a:
44:16:b4:42:d5:63:c1:c0:75:5c:e9:21:f6:c1:82:
d1:cd:3b:23:6e:08:69:07:b5:ee:f9:24:48:1b:0a:
79:4a:bc:c1:a8:b2:1e:46:79:87:a0:d7:b3:ea:8b:
2c:37:f2:f3:0f:fe:74:91:80:de:91:af:4a:76:9b:
b3:8a:e8:ee:d2:ac:a1:e5:e0:2e:e3:69:3f:be:b7:
6e:f7:74:43:c5:7a:d6:c9:f8:8b:62:62:e6:21:03:
27:ea:79:83:c6:ce:62:55:58:90:b9:28:47:56:92:
95:dc:fa:6e:f7:cf:94:5c:e9:5f:0e:db:44:9f:f9:
cf:d5:5d:9f:7a:a1:2d:fd:da:2f:76:0a:e5:12:b7:
6c:c3:12:ff:2c:3e:90:af:68:71:76:35:87:03:21:
35:3b:fd:bc:2a:f1:be:7e:c9:2e:d8:4c:86:71:e0:
f3:82:5a:de:4a:b9:e0:35:ab:03:f1:30:bb:62:95:
3c:9b:0e:ce:0c:b5:54:69:9b:36:7c:50:82:a5:6e:
20:bd:e3:18:f3:e4:53:94:4a:e8:2e:80:29:87:2a:
af:0f:9c:97:84:8e:e9:0f:2f:f2:c2:43:ef:17:97:
35:2b:c5:43:e9:b0:72:8c:fe:c5:e4:63:30:b3:d7:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:11:EB:60:85:08:5D:03:C7:CA:23:4F:3A:D0:25:01:A9:13:0E
X509v3 Authority Key Identifier:
keyid:1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:47:b6:30:ba:36:b8:7a:4f:af:6c:6c:7e:d7:a9:d8:d6:c8:
4c:67:01:9f:04:db:83:bb:b6:4c:74:ae:f6:ef:c6:39:44:c8:
55:29:c0:65:fd:81:0f:90:25:32:d4:a2:ab:29:7f:a8:e6:27:
4a:98:ab:47:f6:dd:e4:0c:2f:2e:4a:dc:9a:8a:2c:c5:e1:18:
45:65:67:89:ba:ed:86:39:c2:c4:21:b8:21:ac:b3:7d:9b:84:
c7:64:5c:ea:c2:88:46:e9:cc:f2:9b:e0:5c:bc:1b:ae:56:b7:
46:2b:b6:c2:48:1b:e8:cb:ea:ff:4a:c0:ca:30:f9:4a:07:33:
19:60:8f:02:eb:9d:34:1b:cf:31:82:0e:ba:4e:b2:c8:08:be:
4a:d9:b2:61:f2:a5:1b:4a:64:23:49:ad:c7:3e:82:e2:0b:f5:
4a:f9:94:00:cb:1c:4a:82:8a:85:aa:12:7b:1e:2a:81:be:fa:
a4:0a:57:18:86:f7:78:22:a3:d5:4d:33:b4:ca:81:5d:d2:8f:
e4:81:73:fa:3c:5d:29:7b:98:90:db:e1:de:ff:f6:d3:80:a2:
07:39:0a:e2:f0:95:0c:c7:f2:98:89:20:b3:39:51:06:ef:85:
bc:08:09:05:de:6f:8c:88:2d:01:36:dc:78:11:76:bf:f2:70:
36:a5:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:21 2025 by rpki-client