Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: 243LUk+l3zPfpKTctNEwFzG/BBSGktbMwuOQxWcEQ3Y=
Subject key identifier: CB:94:10:A3:A0:E3:65:5D:1C:FF:88:D3:24:BD:76:9E:04:C2:1F:33
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 01967D581A02019767DE03F733808CC4EF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 03A6
Signing time: Mon 28 Apr 2025 17:00:47 +0000
Manifest this update: Mon 28 Apr 2025 17:00:47 +0000
Manifest next update: Tue 29 Apr 2025 17:00:47 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: 0USmWt4YX6V83ebsVJcqOzlyz0KiDggbiHxGcTgo4OU=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:58:1a:02:01:97:67:de:03:f7:33:80:8c:c4:ef:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Apr 28 17:00:47 2025 GMT
Not After : Apr 29 17:00:47 2025 GMT
Subject: CN=cb9410a3a0e3655d1cff88d324bd769e04c21f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:d0:f5:65:fe:7c:65:93:58:07:86:0a:01:
bc:e9:7a:75:d0:32:41:8b:13:1a:75:38:f3:2f:1f:
72:63:18:48:55:91:2b:97:9b:92:02:eb:fc:f8:02:
35:80:19:63:28:02:d4:8e:8f:85:cf:83:db:69:33:
15:c9:eb:05:d9:24:7b:30:b7:b9:23:19:1a:90:47:
4a:39:24:fd:71:8c:32:4e:70:62:53:ae:e0:60:9a:
3e:39:07:1d:49:b5:83:50:55:c4:8e:f7:dd:e0:84:
b3:51:c7:91:78:2e:f2:64:84:76:97:1c:0e:83:37:
f3:b0:b0:bf:7b:61:bb:53:2f:73:38:e4:98:2c:d1:
41:b8:c1:eb:13:ec:3a:90:aa:eb:7b:7d:60:66:8e:
0c:89:7a:74:8c:24:12:ba:b0:a1:45:42:48:95:23:
1b:91:d7:0a:fa:31:3f:4b:25:be:d8:1e:b3:a7:5a:
2f:26:0c:83:1b:7a:52:4d:e0:e3:b4:bb:8c:a0:34:
cb:1c:e9:13:92:07:98:a2:9b:ca:eb:99:5f:55:69:
69:6f:3b:e9:18:24:d0:91:da:c0:1a:27:a8:e6:27:
b5:89:2a:80:b4:b1:d9:1f:61:0a:0b:d0:5d:4f:42:
c4:98:ef:88:a6:73:a5:52:b9:24:3e:d5:2f:8d:f5:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:94:10:A3:A0:E3:65:5D:1C:FF:88:D3:24:BD:76:9E:04:C2:1F:33
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9e:f6:57:f5:3a:3b:91:9f:3c:32:27:77:f5:8d:fd:9f:de:
d6:43:6e:37:eb:f1:0f:99:e8:a8:df:fb:50:55:da:70:be:ed:
bb:6e:0c:27:98:36:d0:8a:d3:ab:b1:51:7d:6e:0e:9b:b2:db:
e3:8f:d7:4b:74:92:b5:de:aa:50:02:54:22:7b:23:bf:75:30:
48:24:d2:15:39:5a:6c:c8:0c:19:49:b0:b8:49:64:50:8e:ba:
58:31:2b:24:d5:11:37:27:85:01:e1:a3:c3:60:a3:b8:e5:ad:
6a:2c:21:7e:69:7f:70:3e:45:32:63:02:bf:e3:24:23:63:bc:
15:57:bc:92:96:9d:dc:99:28:6c:c3:59:59:e5:0b:bb:ef:fc:
d6:a8:81:19:f2:c8:b8:47:14:37:53:e5:96:3c:c3:0b:18:ea:
d1:dd:e8:dc:19:8d:bd:e2:7f:6d:ab:d4:60:0d:40:77:06:60:
54:3d:8f:6e:ed:d2:94:a3:d4:fc:38:fd:dc:c3:03:7c:c9:e6:
e7:cc:56:a7:7f:32:a1:b0:47:e2:23:3f:fb:cf:d3:7b:9c:3c:
5e:40:ef:fb:3c:8f:4e:e7:bd:ff:e0:00:ff:a5:64:1c:5f:65:
92:4c:4f:6f:69:9e:f8:99:a5:0f:b3:91:a8:c1:16:a4:3f:75:
cc:2e:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:28:01 2025 by rpki-client