Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier: MbmRlLnvVjnlJyT5b/NUrnaQjGbWeQdMKDZUVgy3a24=
Subject key identifier: E4:35:5A:24:D9:1A:20:C2:4C:C4:80:F8:E7:84:14:87:DA:8E:EE:5D
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial: 0196865B265CDC2581442E2FD4BFDB983026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number: 09C1
Signing time: Wed 30 Apr 2025 11:00:42 +0000
Manifest this update: Wed 30 Apr 2025 11:00:42 +0000
Manifest next update: Thu 01 May 2025 11:00:42 +0000
Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: 4xwHHnRsGvZp6EQoLvjq1tH7h66RaUxugLEFYCaNNBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:26:5c:dc:25:81:44:2e:2f:d4:bf:db:98:30:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Validity
Not Before: Apr 30 11:00:42 2025 GMT
Not After : May 1 11:00:42 2025 GMT
Subject: CN=e4355a24d91a20c24cc480f8e7841487da8eee5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:68:e6:4b:58:57:d5:97:c0:09:3b:43:d7:
f9:c3:d0:d1:53:b1:77:9c:f3:e8:ca:2f:0a:36:d3:
23:f1:7a:99:b2:d6:b3:22:66:ef:94:f4:fa:2a:aa:
70:e5:f9:99:20:b2:19:7b:e7:82:18:7b:7e:44:6e:
4a:6c:4b:dc:f8:de:13:98:50:a4:02:1b:7d:c9:37:
2f:2e:67:33:38:41:90:8e:11:35:65:64:80:57:55:
f1:a6:3f:d0:ac:27:fd:85:db:b9:c4:5a:1a:80:8d:
cb:6a:fc:fb:40:b4:6d:5a:b8:2d:78:2e:8b:1f:83:
24:35:ad:c0:35:a3:a0:be:a4:0f:f7:70:4f:3a:b7:
1c:2c:59:de:b3:ec:ba:50:a0:c2:51:06:12:f1:f1:
5e:45:9a:95:d5:8d:ec:f0:5b:54:1e:56:41:ed:3f:
f4:74:29:ee:10:23:0d:98:ba:d1:4a:e4:44:33:c6:
60:d1:04:42:12:5c:e4:73:4c:26:23:90:1b:05:a0:
d8:c4:2e:f7:46:aa:3a:3d:04:02:fa:f4:48:7a:40:
19:65:fe:4a:d6:2c:fc:1d:50:68:02:d4:65:5f:85:
c2:0d:90:b5:ad:15:04:92:0e:a9:7a:a2:91:83:45:
81:79:9b:f7:cc:29:26:c5:79:d2:89:65:be:fc:14:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:35:5A:24:D9:1A:20:C2:4C:C4:80:F8:E7:84:14:87:DA:8E:EE:5D
X509v3 Authority Key Identifier:
keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0a:93:c5:73:cf:e1:4c:5c:7c:55:1a:70:45:1d:5d:12:35:
2d:f3:98:58:36:4a:3f:65:58:3e:f2:a8:dd:38:75:9c:3f:71:
b5:60:da:99:e3:f1:04:10:29:81:50:fa:65:70:a7:c0:a8:f0:
c5:a2:5f:16:40:1e:90:b9:17:d3:04:23:38:3b:66:43:60:49:
6a:25:24:c1:a8:37:c2:7f:8b:01:93:d8:b8:95:6b:95:04:02:
f2:43:0a:d4:f4:b6:4d:44:1d:8f:98:02:00:1f:be:0c:f2:e3:
05:d0:0e:08:bc:37:13:21:4c:6c:f6:06:6a:c3:9c:dc:cb:c5:
a5:b9:d0:f5:fa:6f:8a:b1:a2:9c:17:1a:ff:20:1a:3e:5a:16:
c5:86:56:af:c2:91:1e:a4:d6:49:91:42:93:08:e5:ad:dc:56:
8c:f1:67:26:f4:81:27:34:5e:f3:ab:15:c1:d4:33:bb:f8:a0:
c5:5f:50:24:e1:43:46:f1:2f:58:e7:e1:a2:59:8a:05:c1:1f:
7a:50:40:5d:d5:89:a4:1a:ed:82:3d:b1:76:32:16:c9:7c:3d:
55:91:af:47:a3:59:06:5c:7e:2c:0b:b3:ba:af:ed:4f:ef:ba:
c1:1e:ab:51:d6:6e:a8:06:c5:6d:6f:d3:37:d1:68:3d:ef:a6:
37:df:9e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:33:08 2025 by rpki-client