Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: UEXpqWJBTiIZtbcuNbLwVY0TqWLnPRqUFN13zeYAmiQ=
Subject key identifier: E3:A8:6E:52:52:42:52:61:C7:07:F3:7F:ED:97:EE:44:AD:EB:8B:47
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 01967831652CD2258519D540AF5FB4925F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 1283
Signing time: Sun 27 Apr 2025 17:00:25 +0000
Manifest this update: Sun 27 Apr 2025 17:00:25 +0000
Manifest next update: Mon 28 Apr 2025 17:00:25 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: 4sD3PpYnGagorc7KF7FsSkEdGxH30vjOGJzeiqMkflk=)
2: lUApR8rVpWyDLR1GadE8v1PzIFI.roa (hash: SjTc2RPVxxZZujKF5tyIKpHPh6Uad/TapUg1uEd/j6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:65:2c:d2:25:85:19:d5:40:af:5f:b4:92:5f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Apr 27 17:00:25 2025 GMT
Not After : Apr 28 17:00:25 2025 GMT
Subject: CN=e3a86e5252425261c707f37fed97ee44adeb8b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:d0:9f:e0:30:5e:fd:81:d4:46:7d:9b:f6:
c5:23:65:4c:54:a2:9d:e1:e1:38:89:f7:87:a4:d8:
30:a3:f5:3e:a3:16:27:03:b5:8a:32:b9:d5:cb:f8:
e7:e3:80:50:36:8d:38:c9:39:5e:97:ae:7d:de:e6:
bf:74:db:ab:a5:2b:47:cb:2f:ae:3c:e6:b8:0a:45:
d1:6b:8e:ba:0e:cb:88:b5:7f:7c:75:59:63:77:a4:
18:3a:c8:68:8c:bd:70:d0:6c:de:57:99:f5:53:76:
58:3b:f0:23:ba:86:ec:fa:ea:d2:32:69:28:c1:18:
67:a2:14:62:af:13:b8:db:2f:99:ee:fe:9d:ca:c9:
8d:a6:b6:3f:26:17:8d:50:72:83:7d:55:cd:a1:d8:
c9:37:26:dd:f2:e5:f4:d3:1f:5b:7f:5d:e7:23:7f:
86:a4:bf:77:bd:5a:8b:f5:f7:ee:76:85:89:38:47:
03:c7:7e:14:da:6f:0a:b7:79:8c:f1:1b:6e:31:62:
57:af:a3:1f:87:02:b8:bf:f0:b6:ff:3c:ff:02:07:
81:42:80:ef:3b:34:14:85:d9:3e:85:db:69:62:b8:
3a:6e:b0:4f:ea:02:e8:66:68:c0:fa:9f:8f:5d:c4:
b6:82:88:79:22:45:24:9c:fe:98:79:6a:15:17:e9:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A8:6E:52:52:42:52:61:C7:07:F3:7F:ED:97:EE:44:AD:EB:8B:47
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:c8:00:dc:84:f4:f2:4d:d5:17:ab:fe:26:5b:2e:92:88:
eb:49:c4:b7:06:11:e9:b6:0e:96:12:fe:9b:66:ed:a5:60:45:
8e:f2:68:c9:79:6b:e5:b1:31:0b:d1:5b:0e:c8:47:30:0a:ed:
52:86:b1:f8:df:7f:2b:1e:50:99:dd:e6:f7:9d:32:63:bc:ca:
e1:0e:53:63:c6:49:1e:d0:a2:bb:55:22:97:ff:ad:2c:db:c9:
92:82:75:7d:59:e5:85:4d:dc:44:03:6a:d0:59:6c:dd:cf:d5:
0a:b1:1f:3d:ea:6b:0b:12:61:2c:61:08:86:f3:fe:c0:f1:39:
fa:70:f6:d9:96:e6:1e:9f:da:3a:fa:30:dc:c5:e4:2f:13:76:
0e:0c:40:cd:2d:54:ef:29:2d:ce:6d:4b:1b:e6:18:36:a6:09:
5f:95:67:b6:a6:6d:34:01:60:df:bb:d6:11:c2:f0:3b:35:46:
1f:8d:b1:88:78:64:f5:ea:57:01:40:5f:df:3a:6f:5f:9a:45:
98:47:cf:72:fc:85:b3:37:d9:80:86:5f:02:15:cb:2b:12:6c:
e1:d6:a5:c1:0b:57:c7:78:fb:5f:e2:c5:46:8b:0f:5d:e1:b8:
f6:6f:0e:76:e4:e0:42:4d:eb:e0:48:1a:47:b7:06:f9:95:f2:
26:7c:6c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:55 2025 by rpki-client