Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
File: HqsBKTydvRqdatyGGCtSDNF2wAc.mft (raw, json)
Hash identifier: lURBlkEeLA3cskMtJHtvuxvrKSOluNSeVnoYl8pjQ+c=
Subject key identifier: B6:6A:FC:39:E6:49:0A:09:4A:13:1B:14:1E:18:71:18:85:02:B7:6C
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 019681A2FD9A9202D8BEDA54492B4E2856F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
Manifest number: 12C7
Signing time: Tue 29 Apr 2025 13:01:04 +0000
Manifest this update: Tue 29 Apr 2025 13:01:04 +0000
Manifest next update: Wed 30 Apr 2025 13:01:04 +0000
Files and hashes: 1: HqsBKTydvRqdatyGGCtSDNF2wAc.crl (hash: /W1FSE06eKX+SrYrYtjoyxoovTlubA3hOCtspcuFrRI=)
2: ub3jhWL8KmU55QyzLWlOgggBar8.roa (hash: uMoRi+7KkYToPIHx+yE4FpiPieRkes7ACBQfGkW0VCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:fd:9a:92:02:d8:be:da:54:49:2b:4e:28:56:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Apr 29 13:01:04 2025 GMT
Not After : Apr 30 13:01:04 2025 GMT
Subject: CN=b66afc39e6490a094a131b141e1871188502b76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8c:92:45:18:a2:05:41:81:72:51:eb:90:c1:
b3:6f:7e:3a:15:f2:23:ae:3a:3c:66:b9:b4:8e:9b:
91:0f:4c:c5:a4:1b:65:44:42:61:d0:c9:a1:c5:32:
f9:50:66:72:dd:d4:44:b7:72:79:fc:81:0d:35:69:
24:81:16:db:fa:41:72:88:8f:46:da:72:ea:15:fa:
cb:30:e4:b2:ea:cc:61:8e:6f:3f:25:e8:4d:2a:c9:
81:fb:d2:91:31:94:3b:50:e7:50:d6:2a:9a:1f:98:
f7:87:ff:66:70:f1:1d:d8:bf:08:0e:a4:12:94:17:
84:65:92:4b:4e:41:d9:04:36:14:2a:36:2d:65:8f:
ef:b3:ff:79:97:9f:aa:ab:f8:e9:ae:23:b0:ef:21:
cb:85:ca:47:4f:6f:7e:d1:59:41:bd:d2:fe:e9:ab:
eb:b5:58:45:3e:42:41:c7:c7:02:d6:fa:e3:c9:98:
6d:a0:57:79:18:88:03:e3:c2:71:68:a1:6f:ea:91:
90:55:41:22:6a:82:8a:e6:be:0e:c2:a3:f7:4d:5a:
6b:de:c3:9d:9e:6e:78:21:39:79:ae:33:40:15:3a:
cd:b4:01:84:d2:51:ca:8e:a6:9f:50:57:2a:a1:c3:
cd:15:98:ef:3c:3b:a7:32:e4:f4:45:b4:b2:f3:92:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:FC:39:E6:49:0A:09:4A:13:1B:14:1E:18:71:18:85:02:B7:6C
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:35:ee:c5:19:cf:3a:02:01:17:b6:b0:1f:eb:55:c0:eb:c0:
64:53:1d:2a:14:ed:16:39:c4:18:b8:91:c4:9b:28:3c:10:2d:
98:67:64:1b:7a:d2:58:20:37:20:99:2f:1f:10:31:9c:6d:d3:
04:27:24:6a:60:e4:9a:d9:1f:ef:7a:a8:8b:30:ca:07:2e:9b:
45:a6:d9:dd:1c:30:fd:13:13:a8:4f:7e:40:1c:f5:c6:99:38:
c2:33:d3:dc:43:1a:c4:f2:a8:21:7f:73:9e:b5:dc:9d:54:ee:
5e:3c:6e:6d:21:77:22:8f:99:7b:53:ca:59:ec:3a:18:93:b6:
d4:6c:8c:33:9d:b5:c2:53:8a:14:3c:9a:13:89:36:72:f7:aa:
6b:27:9a:41:53:00:88:a1:9f:ed:d0:ee:9c:67:06:ec:a2:3e:
13:e7:eb:b9:a1:10:de:06:d4:9c:80:9d:a3:b3:b4:62:18:a5:
56:20:fb:77:b5:05:af:c1:1a:f7:e1:4e:bd:23:95:e0:40:5f:
02:c2:e7:29:fd:43:d9:45:d9:69:0a:78:99:f8:34:51:90:a3:
8e:50:01:47:b6:48:a4:66:26:de:1d:cf:a5:2d:6e:4e:0b:4d:
e8:76:38:25:c4:7b:3e:1e:18:e2:03:a9:6c:e8:e1:fa:52:c9:
56:e6:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:04:16 2025 by rpki-client