Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: /GyttktTiyQY2Gwphw9ZvyU12wNFiAxM8nzCChe+hjM=
Subject key identifier: 83:B2:12:A5:AD:38:34:06:7D:5B:60:6C:6B:E0:F7:DB:FE:DE:0D:5A
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 019674C2C76B97DFD2C6D8C7420AAFE3C045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 0C82
Signing time: Sun 27 Apr 2025 01:00:44 +0000
Manifest this update: Sun 27 Apr 2025 01:00:44 +0000
Manifest next update: Mon 28 Apr 2025 01:00:44 +0000
Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: LCiZ7jsSIpc+bL3gq4BsmXDSaKfyQ6GxllOQAdHxGWc=)
2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:c7:6b:97:df:d2:c6:d8:c7:42:0a:af:e3:c0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: Apr 27 01:00:44 2025 GMT
Not After : Apr 28 01:00:44 2025 GMT
Subject: CN=83b212a5ad3834067d5b606c6be0f7dbfede0d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:35:4d:af:9c:7f:01:76:7c:7a:8f:32:1b:
b9:77:96:58:88:a8:ad:c5:80:b3:69:1f:6f:80:e0:
b9:1a:51:86:06:d5:7a:6d:c6:47:ad:c1:8c:42:8e:
58:04:cf:35:24:ad:bf:db:bc:b2:58:9c:d6:c0:b6:
50:67:b4:b8:1d:34:9e:02:70:fa:63:27:de:41:78:
e5:cf:00:a3:7e:ac:f2:00:ee:0e:da:6c:24:b8:1f:
80:2d:9d:ef:02:28:fa:4a:32:ed:22:9a:c0:98:d3:
b6:dd:1f:d8:f4:54:b0:c4:a7:40:ab:bc:67:e0:d8:
7e:48:d1:40:e3:89:fc:4f:3b:69:52:f9:86:25:01:
79:46:2a:ce:16:37:ce:75:51:c9:5e:cb:75:aa:67:
fd:5f:7c:69:8c:36:0c:7d:c4:83:0f:2f:50:b9:58:
3f:b7:15:64:e3:3c:af:0c:2b:74:69:de:94:ad:63:
3b:77:2d:07:48:f3:ff:ed:a6:6b:92:dd:aa:6c:8f:
40:40:cf:22:5e:ba:05:a3:2a:35:96:62:eb:e8:3f:
5c:f6:72:26:e2:f2:83:dd:86:96:f2:da:c3:96:bd:
85:cd:f7:16:4c:e0:bc:7a:60:1c:35:0b:ab:85:0c:
97:b4:01:41:2d:c2:87:86:9f:84:7c:e0:62:4d:c0:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B2:12:A5:AD:38:34:06:7D:5B:60:6C:6B:E0:F7:DB:FE:DE:0D:5A
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:46:a7:f6:ad:a5:a4:e5:21:ea:93:00:e3:3c:08:2d:e8:ea:
65:3e:36:45:27:a6:81:77:f3:0d:c3:9c:57:f6:87:1c:8f:f2:
4c:e6:97:37:91:38:28:50:25:53:2e:48:8f:64:09:63:4f:1e:
d6:41:92:ee:06:1d:3b:ce:71:40:23:64:f2:19:6f:0f:15:5f:
da:83:7c:b0:2e:60:ed:50:7c:80:00:74:32:c1:82:6b:14:83:
3a:07:f7:6e:39:2f:27:e8:1c:5a:ce:81:72:11:26:af:8e:d8:
28:8c:4e:a9:52:72:9e:f6:45:d0:fb:2f:84:d5:4c:e7:bd:dd:
6a:52:b6:3f:fa:8b:18:5b:c7:fe:80:13:7d:74:0b:53:e6:68:
33:36:49:3b:f7:50:e2:b0:03:dc:7a:7c:e8:32:c6:11:89:33:
77:a0:d2:b1:29:5b:f0:41:f7:2e:41:01:15:50:9c:44:ac:10:
54:01:82:b6:ec:c2:f0:32:99:71:d0:c6:d3:90:53:06:7e:6d:
20:1c:0c:46:68:8a:d4:4d:58:38:6e:9d:24:93:5c:42:8c:30:
fc:ab:2e:73:dc:9b:ea:57:8a:40:b4:00:d7:48:b1:99:cd:04:
3e:37:d5:dd:ab:b2:86:ae:4a:b0:6d:5b:42:79:fd:c4:3b:82:
c4:b9:1c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:11 2025 by rpki-client