Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: +26g5HNt38LXEwsXQeWj6kLQJjKs/Gz3OAdt7iOK7fY=
Subject key identifier: DC:04:8E:12:BA:3C:95:13:F2:3C:59:62:61:20:BC:A1:05:FE:0D:AA
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 01968134C49DDBE289A17151C0D863A16788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 09D8
Signing time: Tue 29 Apr 2025 11:00:41 +0000
Manifest this update: Tue 29 Apr 2025 11:00:41 +0000
Manifest next update: Wed 30 Apr 2025 11:00:41 +0000
Files and hashes: 1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: uzPCGFnHJdLk0R91mpTfEcnztRabADDC/UcMPRkffBw=)
2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=)
3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:c4:9d:db:e2:89:a1:71:51:c0:d8:63:a1:67:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Apr 29 11:00:41 2025 GMT
Not After : Apr 30 11:00:41 2025 GMT
Subject: CN=dc048e12ba3c9513f23c59626120bca105fe0daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:4f:b0:9b:f9:d2:23:e6:f6:c0:b1:9b:5b:
2e:af:4b:ad:f0:aa:94:57:31:0e:95:bd:7d:09:75:
02:a1:fa:da:02:e5:6c:61:fc:f8:67:cd:b8:65:91:
ae:fa:e2:ca:c4:d6:0b:2a:c5:62:6e:4c:55:38:e9:
50:4b:6a:7d:2a:7b:66:2c:3b:c0:7c:da:dc:de:47:
b2:4e:a9:1f:c0:1c:74:2f:80:3e:fa:61:f6:99:39:
c6:84:c1:8c:67:89:6f:23:3e:2b:68:2c:9a:6d:ef:
b3:f6:21:0f:d9:24:6e:13:63:f1:28:8e:42:5a:65:
89:3e:7a:d4:01:ba:3e:c1:98:c6:ab:ea:7f:e0:fc:
0e:6c:a9:8d:75:97:8f:55:61:5e:20:17:eb:ff:b5:
d4:a4:84:ad:e9:2f:4b:67:06:e5:7e:c3:23:2b:54:
07:4a:f8:58:c2:66:c2:bb:7f:67:51:bc:f5:70:d3:
ed:a4:d3:88:61:a6:0a:ce:b3:f3:8c:77:7e:6b:7d:
02:20:bf:a4:b1:77:9b:77:01:75:ac:6f:96:20:b5:
32:f7:e7:d6:85:65:15:c9:1a:fc:43:11:71:b6:aa:
c5:a4:83:05:52:47:1c:46:67:dd:5c:75:26:7a:b9:
3f:27:c4:1c:3f:0c:6f:81:1d:63:89:08:28:20:86:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:8E:12:BA:3C:95:13:F2:3C:59:62:61:20:BC:A1:05:FE:0D:AA
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:db:a3:6e:35:ad:88:cf:44:ba:9e:fa:07:ad:52:04:b6:31:
e1:6f:0c:bf:1c:8e:89:29:28:54:71:ad:56:be:9a:9d:fd:96:
7a:ae:13:93:87:91:e0:d5:53:c2:f5:3f:35:b3:dc:8e:04:05:
58:1e:29:7f:f1:c2:40:1d:d4:83:13:5d:59:33:34:fe:d8:97:
bf:c1:98:68:f1:d7:8f:fb:80:44:84:f9:c6:d2:80:a1:c8:07:
e8:e7:18:9b:51:84:d2:cf:96:d1:99:06:07:b7:83:6b:39:d2:
38:1e:7e:c1:a2:64:7b:3a:bb:42:78:eb:5d:80:f9:80:49:45:
94:b7:bc:92:ec:09:91:65:19:5b:af:cb:e5:b8:68:5c:af:27:
51:11:cf:ba:fe:ee:e8:6a:54:c2:33:09:d0:07:7d:a4:16:e2:
c5:bc:41:0d:ce:89:e3:53:5e:16:99:e7:25:74:82:8a:2d:c0:
ba:88:9a:42:48:ea:a7:3d:19:b1:d8:85:62:b6:5a:63:8a:5f:
a7:53:19:ab:41:0f:91:fd:82:ff:f2:41:a7:ce:79:c7:83:23:
61:99:93:e9:8b:20:99:a1:84:f5:31:af:91:b6:94:b9:23:e1:
b5:a1:e1:d4:5d:c5:bc:e1:03:b5:e1:66:b4:60:d5:96:ee:ca:
3b:84:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:05:47 2025 by rpki-client