Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
File: HRAqymzxNRE4UpTnfb4nN2jAoEs.mft (raw, json)
Hash identifier: AT8bYOgh8VItjDJlj5o2HxdK5mGISpnzWXGDy3gIO9M=
Subject key identifier: 4D:48:58:B1:2F:94:01:88:C5:C4:C5:09:A0:FE:F1:4E:FE:D1:23:3A
Authority key identifier: 1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
Certificate issuer: /CN=1d102aca6cf13511385294e77dbe273768c0a04b
Certificate serial: 0196A842D5F023851248F010B9FCC6854D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
Manifest number: 0A06
Signing time: Wed 07 May 2025 01:01:14 +0000
Manifest this update: Wed 07 May 2025 01:01:14 +0000
Manifest next update: Thu 08 May 2025 01:01:14 +0000
Files and hashes: 1: HRAqymzxNRE4UpTnfb4nN2jAoEs.crl (hash: EaVXUPRXZBjOdTnzKuh37P2CSPRw1S6c2i7ZIsxcgqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:d5:f0:23:85:12:48:f0:10:b9:fc:c6:85:4d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d102aca6cf13511385294e77dbe273768c0a04b
Validity
Not Before: May 7 01:01:14 2025 GMT
Not After : May 8 01:01:14 2025 GMT
Subject: CN=4d4858b12f940188c5c4c509a0fef14efed1233a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:24:b6:6e:c9:69:a1:3a:2b:be:5f:f4:52:
ec:cb:e1:a9:c1:9e:d9:87:4a:6e:31:c4:1d:3e:a2:
4e:71:0a:50:00:02:c5:05:99:73:2e:41:8c:cc:87:
98:1a:39:2e:5d:3d:7f:87:38:be:da:0d:93:f8:68:
9d:2d:04:c6:4b:4f:6a:d6:db:4d:ea:9b:ec:38:61:
b4:4b:ad:4e:7a:4f:77:58:d7:f8:e8:dc:78:f2:b0:
b2:c2:64:7c:d7:2a:64:74:14:3a:b0:7d:5a:f3:a8:
30:50:78:86:1b:90:ca:b9:d5:15:79:ae:43:a1:a8:
36:76:c1:2e:3e:ee:13:87:4b:74:88:71:ac:0e:39:
bf:0d:f2:6f:1d:b2:ee:0c:b1:fc:46:2d:5c:f4:ed:
54:88:cd:9a:50:54:cd:a1:7a:ff:59:66:78:8b:1a:
05:85:e8:64:e0:00:97:e8:74:fc:87:05:dc:23:88:
0c:1a:96:8e:e5:ff:c9:19:02:92:f4:a1:eb:38:a0:
3d:74:fd:e0:c1:94:9f:5a:9f:86:cc:aa:e7:2c:50:
b2:8a:51:0b:9a:0e:4e:98:0d:81:48:49:08:47:3f:
26:45:e9:ad:9f:38:5f:ed:3d:62:5f:34:23:ed:7f:
36:e5:08:68:e7:de:33:c8:b9:3f:97:57:00:78:91:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:48:58:B1:2F:94:01:88:C5:C4:C5:09:A0:FE:F1:4E:FE:D1:23:3A
X509v3 Authority Key Identifier:
keyid:1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:87:dc:93:3d:f6:a6:aa:41:2b:27:ae:ee:b7:fa:09:6d:8d:
dc:06:54:25:da:1a:93:76:95:df:9d:6d:ba:2b:3d:af:a8:47:
74:eb:0a:bd:04:47:57:db:3f:41:9b:4b:74:93:81:24:eb:7c:
f6:04:88:ec:c8:68:29:62:84:8e:26:2b:36:f1:76:d3:cf:d3:
1f:84:75:06:d3:0c:a8:61:ca:bb:1f:40:fd:98:f1:d8:09:91:
71:fb:d9:74:73:49:8e:f4:b0:72:1c:3d:c0:14:48:f3:5b:e0:
15:04:61:91:a8:9d:1f:bc:fb:f6:38:92:dc:ec:70:f1:20:9d:
43:90:e7:75:e0:e1:07:92:9f:55:30:dc:32:1e:3f:56:31:a2:
b2:f9:12:1e:d3:53:a4:c2:d2:2d:73:56:4c:df:bb:47:a8:6e:
e0:da:a0:8d:e9:b7:7c:41:03:36:3b:fd:60:c4:4c:a1:a2:57:
ce:7a:fc:7c:17:e4:7f:5b:65:c7:7c:5d:3a:5e:a3:10:22:95:
26:be:ca:1c:bd:36:6f:5b:8f:bf:8d:bf:11:9a:b7:0f:65:34:
dd:b9:41:a2:c5:a8:f2:33:65:54:e0:ef:a2:6c:83:03:b4:30:
80:0b:0c:5d:50:ad:0a:bf:48:84:00:43:53:72:be:d1:f5:86:
69:dd:35:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:01:52 2025 by rpki-client