Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: 8yYw4WXh31A0Muwv327dKTlFqdE7bkEyjC3yOScgGMM=
Subject key identifier: 21:47:59:90:A0:CC:53:EF:A8:04:5B:66:98:E3:91:CA:0A:E0:74:C8
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 01958B16946B01C6CD3F14DE746507208B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 16:01:07 +0000
Manifest this update: Wed 12 Mar 2025 16:01:07 +0000
Manifest next update: Thu 13 Mar 2025 16:01:07 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: F9kwlIEQ03t0Oe1jrBtCaGVQ/thlqji9Xj8Qpbqmylg=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:94:6b:01:c6:cd:3f:14:de:74:65:07:20:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Mar 12 16:01:07 2025 GMT
Not After : Mar 13 16:01:07 2025 GMT
Subject: CN=21475990a0cc53efa8045b6698e391ca0ae074c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:a9:4c:ab:ba:a3:5d:da:09:32:fe:42:1e:
0c:1c:bb:e4:66:10:8f:bc:4d:83:b0:af:6e:dc:04:
34:d6:c5:31:bd:3d:3e:34:99:b3:9d:08:9b:4e:76:
37:63:a6:dd:3e:0e:46:84:b4:68:f3:ad:cc:2c:65:
31:3b:a5:43:38:87:33:a1:15:7b:3a:84:92:cf:a4:
7d:ce:b6:00:55:87:7a:d6:68:8b:eb:d6:ea:4d:d6:
68:50:48:e5:cb:90:bc:e1:cf:76:84:da:db:9f:6d:
21:6c:34:2d:61:ef:e2:5c:64:c3:da:8d:4b:6f:1e:
4b:0b:59:ee:69:eb:26:06:27:43:b3:74:bb:52:b5:
7a:7f:cc:e4:31:b3:88:aa:e8:a2:29:90:07:4a:3b:
0d:3b:34:7d:28:8e:08:5c:d4:ad:d7:d7:04:51:7c:
d7:ef:be:62:b4:f1:76:a5:06:ac:0b:c7:65:19:ca:
32:eb:7e:26:e8:97:c4:16:3c:5d:6d:f2:55:49:b1:
37:7b:dd:25:89:35:69:b3:f9:6f:78:36:96:6e:a0:
55:25:6b:f8:95:30:53:f7:29:c5:f6:ee:06:3b:cc:
fe:02:92:54:d0:02:17:f5:24:41:b4:91:b5:89:59:
3b:e7:de:c4:c1:c9:4e:9b:12:31:69:c4:10:b9:bd:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:47:59:90:A0:CC:53:EF:A8:04:5B:66:98:E3:91:CA:0A:E0:74:C8
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7b:a9:7b:03:01:ed:3a:f6:77:e5:4f:f1:9c:36:15:d7:bd:
f3:42:f0:44:8f:1c:aa:4d:01:33:c3:2d:14:3f:a8:2c:21:fc:
b3:40:5d:77:95:cb:c4:32:48:27:1d:ce:33:39:59:52:fb:d3:
bf:4e:cd:b1:23:5e:b9:54:5a:b9:3f:2c:09:8c:cf:b1:01:c3:
83:2e:fe:c7:8d:d2:5b:ab:ff:7c:e0:bb:c6:b8:bc:2a:de:b1:
40:ed:8b:43:21:85:7f:62:a0:04:be:aa:ac:7f:c2:48:3e:25:
57:b2:19:61:9f:de:01:f8:76:97:cc:2a:fc:b1:8e:d0:0e:34:
c2:2a:6d:23:fd:7e:ca:48:21:6c:bf:c9:53:13:a4:72:8f:36:
d4:2c:c3:13:06:9b:3d:c0:19:e2:3c:21:91:79:27:96:43:0e:
d3:04:01:de:f5:5d:04:e4:e9:fc:81:96:20:f4:46:90:da:00:
9f:81:11:50:35:69:68:b2:bd:99:93:50:04:bc:34:d2:8b:4b:
43:53:03:7f:47:8f:c1:09:59:e8:4f:e0:ae:c9:ea:83:a7:1c:
0e:5b:a0:a1:cc:55:af:a3:d6:a3:af:4a:1b:db:00:a2:9c:ff:
6c:2e:1c:6a:31:8f:e0:c2:9e:fe:ad:e7:8c:4f:75:b6:57:61:
15:80:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:11 2025 by rpki-client