Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: qt/KJyLV8E5mpUOP4vBGIjq1H0d1Gu4g5GP9FaDLnbA=
Subject key identifier: AE:D9:6E:7D:86:85:5E:6A:00:61:DA:9E:D0:06:C7:AB:A2:EB:F9:F2
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 01967FB503370115CC7CB75AAF4A15F6CBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 04:01:31 +0000
Manifest this update: Tue 29 Apr 2025 04:01:31 +0000
Manifest next update: Wed 30 Apr 2025 04:01:31 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: WRiBJ8nk6610bysPD4wjR1xwjWNO6xIn20VbuKz+PRU=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b5:03:37:01:15:cc:7c:b7:5a:af:4a:15:f6:cb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Apr 29 04:01:31 2025 GMT
Not After : Apr 30 04:01:31 2025 GMT
Subject: CN=aed96e7d86855e6a0061da9ed006c7aba2ebf9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:86:3d:16:11:9a:29:54:69:a6:40:2d:07:48:
ec:d1:29:78:8d:15:06:54:bd:be:5f:90:ff:e9:47:
b4:d1:d0:ac:0e:59:73:be:c4:b6:4d:5e:54:aa:8a:
fd:70:8d:1c:f2:a7:37:6b:a6:f3:4d:8d:89:f0:84:
60:16:cf:38:59:a8:47:d4:0a:1e:96:ba:83:06:ea:
73:86:58:76:bf:a5:6a:63:39:7a:57:4c:37:78:c2:
0f:f8:56:d5:a5:aa:1f:96:84:fa:ff:ab:6a:74:b5:
cf:ac:10:25:75:fe:94:f4:66:a3:2a:2e:3f:b2:a0:
90:00:b1:39:7a:02:99:31:9a:5a:db:e1:d5:e9:b9:
44:8a:0f:9a:e7:98:48:4e:1d:67:00:35:54:c3:d7:
0f:67:d3:19:67:ec:e8:c3:85:0c:08:9b:09:b4:5e:
de:a0:ce:69:85:32:c8:a7:fe:66:b1:e8:97:f0:48:
1b:4d:51:35:87:e9:8c:b5:d0:02:60:a9:73:fb:57:
46:d3:e0:57:d5:34:7a:fd:f2:ba:76:70:3f:df:af:
91:f1:90:90:a5:e8:d0:d2:25:29:0c:9b:4d:b2:34:
7a:72:b8:91:1e:8f:e1:64:79:57:6d:17:08:bf:e3:
ed:de:52:96:aa:d7:0e:bb:a9:6b:92:c8:39:87:ee:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:6E:7D:86:85:5E:6A:00:61:DA:9E:D0:06:C7:AB:A2:EB:F9:F2
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:f8:90:37:fc:62:95:95:1e:4f:d4:6e:ac:b4:10:8f:2a:
78:af:8f:f8:39:44:25:f8:6b:1f:c6:5a:55:84:e1:9e:99:6c:
54:41:a3:b9:20:1a:e3:1a:3b:ac:d2:cb:56:93:0f:8b:8f:c5:
c8:14:18:b1:05:ab:8d:82:8d:9c:5c:4e:6c:28:02:3d:1b:8a:
eb:f7:48:e3:54:d4:03:51:ef:30:ab:8d:f6:2f:30:b4:ec:f7:
35:a1:61:1e:c6:5e:cc:20:b1:44:fc:84:f3:08:06:1e:6d:4d:
32:15:90:16:9c:be:e8:92:7a:7e:df:46:50:0e:bc:a6:fb:9a:
c5:b6:25:43:e1:af:f1:6e:ff:32:60:6e:63:26:3d:72:30:3b:
bf:ff:74:94:4d:2e:78:88:c1:79:45:81:32:b3:72:75:ca:a2:
62:18:38:81:de:f3:a8:31:27:ec:f7:29:c2:f0:48:7e:d7:3f:
4a:1f:45:86:39:be:2b:0e:e7:ed:f8:33:4e:39:dc:af:78:77:
a7:9c:9a:15:ce:c6:84:a2:73:11:6c:92:99:0c:e5:da:79:17:
24:dd:b6:ed:d1:a5:f0:c7:d3:a0:81:f7:28:9b:47:4f:b7:8f:
dd:73:4a:59:b9:e4:05:07:3c:c0:b2:49:26:b3:d0:e0:b3:c2:
9c:ac:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:59:10 2025 by rpki-client