Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File: HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier: odzuqtxPqJWyTXFdJ1HxN0+sWQyOj94rF3pZnxV87BM=
Subject key identifier: A3:1B:43:50:07:3A:79:0F:1F:05:A8:09:F1:9B:2E:8E:B1:13:21:A0
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer: /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial: 0196760D262793961F18A1319730D6EB0C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number: 03EE
Signing time: Sun 27 Apr 2025 07:01:35 +0000
Manifest this update: Sun 27 Apr 2025 07:01:35 +0000
Manifest next update: Mon 28 Apr 2025 07:01:35 +0000
Files and hashes: 1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: /+ByQhuYoDXFtj5dtauG3s5v7yx+97nzHMivLRmBQDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:26:27:93:96:1f:18:a1:31:97:30:d6:eb:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Validity
Not Before: Apr 27 07:01:35 2025 GMT
Not After : Apr 28 07:01:35 2025 GMT
Subject: CN=a31b4350073a790f1f05a809f19b2e8eb11321a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:12:40:8a:01:16:97:22:25:d7:8f:42:c9:
2e:92:bf:06:a5:59:05:42:3a:10:a5:b7:47:e8:da:
eb:8c:ff:f8:94:35:e8:37:1d:76:76:40:53:39:cb:
70:4d:a2:70:dc:f5:b5:c5:93:13:d2:e9:07:1f:4a:
2f:af:fe:a2:5d:f2:0e:72:31:09:ce:bc:07:34:f1:
c5:a4:34:b3:26:00:8f:67:43:26:b9:ba:da:b3:05:
0c:f4:27:2d:fb:7e:19:4a:51:2e:f1:8b:88:b7:64:
42:fd:00:1a:3a:a1:10:54:7b:fc:b0:b4:10:a7:3a:
5c:31:98:b9:6c:58:6c:bf:b8:8e:40:20:f7:3f:d9:
3b:86:a3:7b:e5:24:8d:dc:43:54:32:1b:f1:02:e4:
22:fd:07:20:8c:74:c2:8f:d9:15:6d:79:55:31:5a:
8c:01:da:5e:ed:d6:18:16:1a:47:b2:c7:20:37:77:
4f:55:e3:fa:9f:98:13:a0:f5:db:8d:1f:fa:8c:72:
6b:a3:7e:cf:8f:59:8d:c2:ea:e8:f8:a5:a2:d4:15:
48:70:42:ce:5e:ae:02:e3:3f:64:f6:f7:d8:04:48:
1a:a1:ac:5b:38:1b:93:78:4e:b4:db:4e:4c:92:9d:
33:dd:0c:88:43:7c:30:ce:76:01:fe:1b:3c:8d:6f:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:43:50:07:3A:79:0F:1F:05:A8:09:F1:9B:2E:8E:B1:13:21:A0
X509v3 Authority Key Identifier:
keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:17:b4:6d:1b:79:1e:dc:e0:47:ed:c6:1e:e1:c0:70:9a:94:
b2:f3:98:3b:9b:6b:db:f4:10:f2:41:91:53:53:44:7b:2d:ba:
97:10:a8:29:cd:0c:56:68:80:39:d3:60:97:c8:da:92:a2:84:
d0:65:eb:5e:1d:2d:bb:f2:8a:35:30:60:2f:3f:dc:2f:99:42:
8d:d8:e9:64:01:c7:d4:9a:59:31:fb:fa:9e:e7:65:88:f2:49:
36:12:11:b7:bb:e3:ba:45:f7:d8:f1:71:75:2e:2d:35:e8:34:
d9:1c:22:91:b4:4c:cc:c1:f0:fe:d7:19:43:b6:17:dc:bd:76:
b2:f1:5f:bf:c0:e7:18:11:ad:cb:28:4f:12:f0:64:34:11:18:
57:98:c8:84:fb:38:1f:bf:12:f7:d0:7f:78:27:5f:c1:5b:7c:
1c:87:47:e3:95:3d:9b:4d:a6:43:63:ec:0f:b9:54:7c:4e:b7:
61:12:3c:a6:00:ec:1a:4a:dc:c3:ae:64:8e:21:87:bd:87:9f:
75:d0:8d:60:83:aa:b1:fc:39:36:18:59:2c:96:25:7f:68:1f:
e1:86:bc:d7:6d:60:35:f7:cd:8f:7c:70:dc:a9:88:ac:95:6d:
c6:98:0e:82:73:51:d6:5e:1d:b8:31:35:7b:01:f8:67:5a:d0:
c4:df:2f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:27 2025 by rpki-client