Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: +jVlWbbKMu9iysSOU8GNodNyaBtu91WyBx/+8fekH4k=
Subject key identifier: F5:34:65:AB:81:23:96:DD:FE:C5:90:10:15:16:03:E2:F2:75:1C:4A
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 0196748B9C2C1F83051B71F87816DC59E674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0BF2
Signing time: Sun 27 Apr 2025 00:00:28 +0000
Manifest this update: Sun 27 Apr 2025 00:00:28 +0000
Manifest next update: Mon 28 Apr 2025 00:00:28 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: cU0JPGkYLs4xkFEgy2dckIIONwcs0jy93/gHPbvugOw=)
2: obxxCWwwodKEQItq-LvA1UofY7E.roa (hash: EDnG/ruD1T9KRKhZcI5dsIBjNgSOpQ6QRSsT8ooYu6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:9c:2c:1f:83:05:1b:71:f8:78:16:dc:59:e6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Apr 27 00:00:28 2025 GMT
Not After : Apr 28 00:00:28 2025 GMT
Subject: CN=f53465ab812396ddfec59010151603e2f2751c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:93:83:ec:53:ab:ba:0e:d8:38:2b:ad:71:
8a:1b:aa:0e:fe:8d:e3:c0:36:a5:fc:69:8d:26:7b:
27:2a:4f:2f:af:06:69:e7:8e:1b:4f:10:31:50:9f:
bd:74:af:fe:0b:78:a0:e7:41:c0:92:ea:6d:bd:cb:
ef:4b:d6:39:bc:3e:a6:38:92:53:39:e0:4e:f8:60:
1b:d8:cb:0d:91:e7:a4:1d:df:74:35:c1:13:09:df:
f8:9f:b0:98:97:0e:14:9b:82:56:ea:ee:85:0e:91:
47:c6:67:d6:bb:ed:42:08:e6:b8:e2:39:5d:58:a4:
c4:88:90:42:8f:41:23:80:4a:11:2f:3b:19:62:01:
22:2b:8a:9c:78:4e:e6:be:51:4e:9a:94:56:a6:8a:
d2:34:3f:81:a3:30:dd:6c:20:97:4f:f9:4d:b0:a1:
83:72:66:45:e7:d1:39:7d:e5:ca:50:50:4d:77:00:
87:b6:71:8c:30:56:c5:49:39:f5:7f:c3:a5:88:92:
95:e7:dc:e9:14:63:4f:de:d4:4d:a4:2d:24:91:02:
37:47:ea:d8:16:a7:20:83:80:1d:25:5d:79:e8:19:
aa:36:34:8a:15:81:72:e3:83:f5:1d:76:5e:25:cf:
1e:0a:e6:29:31:04:46:5b:22:3a:30:5d:e3:e0:19:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:34:65:AB:81:23:96:DD:FE:C5:90:10:15:16:03:E2:F2:75:1C:4A
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c2:e7:d9:ba:a9:69:c0:5e:d5:87:c0:5e:89:14:17:56:00:
4e:1e:da:a8:86:76:b8:4d:79:e2:67:40:45:5e:0a:ed:26:02:
5c:07:87:7a:55:11:c7:a8:42:80:8c:a4:85:e4:cc:48:d2:d0:
fa:07:55:77:e2:26:5d:b9:fb:26:19:e5:a0:ed:85:0b:ad:2c:
43:8d:61:a2:c7:13:e5:56:19:6a:63:b8:df:2f:c0:ca:c1:a9:
ba:e5:6d:cb:6d:4a:44:90:1e:5a:14:d2:68:5f:6a:e7:6f:cf:
19:01:d9:39:59:12:ca:f4:47:86:c8:15:44:9d:da:21:ed:56:
c1:7c:e4:2f:0c:da:8a:93:ec:9d:92:20:f8:7a:59:1f:7a:63:
2d:0d:8b:e9:9f:42:00:18:82:03:0f:47:c7:e8:62:be:18:79:
5f:8b:98:32:7a:31:b6:2a:49:ce:80:e2:36:14:24:0c:73:fe:
55:7a:f1:47:ae:6e:e3:e9:c3:74:81:d3:7f:8b:4f:36:8b:05:
09:cb:ad:7e:25:40:0f:ae:e4:a4:54:ec:6c:49:ce:38:d1:e5:
0f:ea:0d:72:e4:eb:bf:45:28:38:2a:ea:0f:91:94:c9:9b:44:
42:b7:b0:c0:b6:9c:8b:10:42:ec:63:5e:cf:02:d1:6b:e3:4b:
fc:c9:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:59 2025 by rpki-client