Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: uc8vVjJHKNRalnsrTc8IC4YTkfLgDkP3vn/bMHVpw1I=
Subject key identifier: B5:FA:FB:BC:B2:4D:82:B4:A4:9D:02:F5:F1:45:28:03:0C:65:8F:EE
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 0196865B02665970F5DB22E43F2B35E89D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 14C7
Signing time: Wed 30 Apr 2025 11:00:33 +0000
Manifest this update: Wed 30 Apr 2025 11:00:33 +0000
Manifest next update: Thu 01 May 2025 11:00:33 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: tCf1hCctih3A+X4GfXRpqnSiSl9UDARO/hk2mhaKPb8=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:02:66:59:70:f5:db:22:e4:3f:2b:35:e8:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Apr 30 11:00:33 2025 GMT
Not After : May 1 11:00:33 2025 GMT
Subject: CN=b5fafbbcb24d82b4a49d02f5f14528030c658fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:e8:b9:fd:70:52:35:a7:da:85:55:f1:72:
64:b7:d7:0a:b8:ed:32:f1:f8:de:c1:3a:8d:e5:09:
72:0f:08:e1:31:66:52:c9:09:07:8a:7f:1e:20:37:
ec:00:26:de:ce:9c:9d:32:a0:f2:07:8f:bb:9b:41:
b3:8d:0f:e7:ea:78:14:3d:9c:16:31:7e:e4:be:cc:
22:68:5a:ec:b1:f2:7c:b0:48:53:d2:96:72:bf:c0:
60:be:e2:4b:ae:5d:8b:1a:e2:97:6a:27:88:92:bf:
ae:93:52:0e:fd:1a:f7:f9:4c:4f:46:a7:c9:cf:fe:
c7:64:51:29:07:f8:bc:be:c1:06:43:18:2c:e8:d1:
1d:2c:48:cd:f9:eb:63:99:63:7f:c4:7c:a3:6f:44:
7d:1b:8a:94:d2:85:a5:ea:ec:b6:9e:c1:41:4f:a6:
f8:19:75:94:a4:fe:df:ec:4c:02:48:4d:02:8c:3c:
c6:d8:67:2d:e3:0d:ba:a7:7e:03:90:ff:47:0d:07:
f9:cf:18:dd:b8:2e:71:83:64:34:7d:0e:31:9a:a3:
be:26:44:59:8c:2e:37:0d:01:49:b3:ca:c7:06:15:
e6:53:a0:ce:82:dc:fd:95:48:c5:a9:49:c7:01:b0:
95:8c:d7:55:1f:c4:4b:0f:fd:f9:41:79:a6:b0:95:
4b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FA:FB:BC:B2:4D:82:B4:A4:9D:02:F5:F1:45:28:03:0C:65:8F:EE
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7c:16:0b:e5:04:f8:b0:b6:42:46:a7:89:5e:c2:27:39:9b:
ad:9c:d1:6f:08:9f:18:6f:00:8a:5d:df:45:3e:19:e2:75:4d:
91:1b:31:ee:3a:39:7e:40:c4:98:85:ac:9d:53:d2:6e:b0:59:
2a:b8:cc:c6:c2:28:fd:48:37:3f:68:2f:cc:96:cd:f9:92:61:
6a:87:d2:0c:43:46:19:56:5d:9d:e3:72:5a:be:40:ef:82:03:
43:db:41:6f:38:e0:c6:84:62:91:16:c1:e8:3e:12:c9:61:39:
ef:46:e6:e4:52:38:54:50:19:d4:47:08:02:1b:e2:fc:d1:c8:
e3:e9:a8:36:e6:b2:ec:73:06:58:5e:86:ac:9d:e2:a8:c0:3d:
f6:e7:4e:81:9f:09:b5:48:03:10:8b:55:87:10:d4:56:bd:14:
b6:93:85:b6:e9:34:fc:51:e0:c2:a4:eb:78:33:80:6d:3e:26:
89:53:c5:55:d5:60:c4:16:04:5e:77:99:ba:57:9d:79:c6:3c:
69:6e:fe:7f:b9:d4:90:8f:86:1a:0f:b4:dd:a6:81:e1:7a:25:
74:cd:20:32:44:4b:ad:e8:0d:08:cf:92:25:73:9f:2d:ad:31:
b5:c6:32:3f:6f:32:75:3a:ab:02:ad:80:9c:c6:b0:43:db:76:
53:41:86:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:58:11 2025 by rpki-client