Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.mft
File: HNuFgmJdF7G8uuE_xt20OruV0v4.mft (raw, json)
Hash identifier: +ctceLmCbYe3bc7w8sh7X74DgfpipXRWEA6mT8kQmWE=
Subject key identifier: 38:7D:34:07:18:E8:36:28:5D:2B:07:88:06:24:3A:68:C8:42:D4:90
Authority key identifier: 1C:DB:85:82:62:5D:17:B1:BC:BA:E1:3F:C6:DD:B4:3A:BB:95:D2:FE
Certificate issuer: /CN=1cdb8582625d17b1bcbae13fc6ddb43abb95d2fe
Certificate serial: 0196808F8F539D610D094333EC037C64788E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNuFgmJdF7G8uuE_xt20OruV0v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.mft
Manifest number: D1
Signing time: Tue 29 Apr 2025 08:00:14 +0000
Manifest this update: Tue 29 Apr 2025 08:00:14 +0000
Manifest next update: Wed 30 Apr 2025 08:00:14 +0000
Files and hashes: 1: HNuFgmJdF7G8uuE_xt20OruV0v4.crl (hash: jwJlEAWf2DDwJoHj+kYdm0y72M/If9jxkpOqVr0xaTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNuFgmJdF7G8uuE_xt20OruV0v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:8f:53:9d:61:0d:09:43:33:ec:03:7c:64:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdb8582625d17b1bcbae13fc6ddb43abb95d2fe
Validity
Not Before: Apr 29 08:00:14 2025 GMT
Not After : Apr 30 08:00:14 2025 GMT
Subject: CN=387d340718e836285d2b078806243a68c842d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:cf:ce:a4:31:cc:98:3c:74:d3:df:2c:d6:
33:0f:a6:fc:6c:61:d9:92:b9:a8:8f:10:c5:23:80:
fa:e1:8c:41:e2:eb:70:1a:30:a1:1a:81:12:60:a6:
19:e5:a5:93:21:6c:47:84:b5:28:06:2b:cd:cb:30:
c9:9b:bd:04:d2:5c:fb:dd:c3:e5:66:fe:1d:77:d9:
a4:35:32:b3:ba:21:df:c5:cb:76:fc:1e:c3:a1:e6:
fb:7a:80:6a:02:f7:89:9f:24:60:ec:6d:6a:53:d5:
58:a4:05:4b:a2:06:88:87:dd:ec:66:3f:72:4b:e0:
91:cd:4f:9a:5e:6f:f5:cd:48:56:37:2c:03:68:ce:
04:1e:61:a1:a2:79:51:2c:5b:2b:8f:09:81:b8:b7:
83:44:7c:f0:2f:1f:25:8c:cd:f8:e3:8b:0b:0b:0f:
f4:5e:44:12:40:38:1e:7e:2f:a8:43:cf:ef:de:10:
de:2b:84:69:75:91:dc:6d:a4:7f:5a:ac:3c:88:5f:
bc:8e:3f:32:48:4d:c7:c1:66:d5:1d:7a:81:7a:cb:
6e:9f:f7:d5:26:b5:47:f7:cf:e9:58:5f:f5:3b:3a:
77:2b:e3:81:03:36:ba:d0:27:34:59:c5:de:9c:93:
51:75:a2:a8:8f:97:23:7c:95:35:91:57:ca:39:ab:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:34:07:18:E8:36:28:5D:2B:07:88:06:24:3A:68:C8:42:D4:90
X509v3 Authority Key Identifier:
keyid:1C:DB:85:82:62:5D:17:B1:BC:BA:E1:3F:C6:DD:B4:3A:BB:95:D2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNuFgmJdF7G8uuE_xt20OruV0v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b5:f0:24:1d:0e:ca:7d:15:e1:9b:37:f4:0b:13:13:aa:0d:
20:8f:fd:ce:eb:c8:1a:73:47:43:88:6e:bc:8a:75:90:38:ad:
98:f7:4e:3a:0f:15:c2:08:d7:b6:60:3b:b5:07:dc:6e:be:08:
97:91:f3:0d:96:49:6e:5c:18:79:e2:89:de:50:9e:0b:88:63:
dd:5b:f1:0f:4d:e6:c7:3b:8c:b4:7d:9b:6d:9d:7f:de:e2:48:
9f:8e:f0:7d:f9:68:fd:fc:84:60:71:2c:6b:66:5e:c3:00:90:
50:8e:0f:05:42:5e:e1:25:48:13:f0:89:42:83:6a:ee:11:2a:
0f:32:a4:07:db:f7:bc:8b:d9:34:c1:f3:e1:21:48:1f:8e:1d:
1e:d7:4a:d8:24:92:25:98:bf:78:d1:9f:5f:e9:28:57:71:50:
06:cd:cb:f2:76:9b:aa:c9:3b:01:01:b8:8c:c3:66:1c:6e:0e:
ab:8f:65:b7:9e:2a:8e:77:9b:ae:98:40:06:f0:ed:38:f3:6a:
c4:9c:15:13:35:61:41:9c:94:e2:5b:67:e1:6b:fa:93:a4:c8:
de:a7:26:51:6b:64:1f:bf:1d:6c:7d:40:7d:07:56:32:6a:5a:
04:44:d0:40:b8:bc:66:69:b1:90:7c:bb:1c:f8:ff:a2:d9:bc:
4b:82:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:29 2025 by rpki-client