Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: 83ySJiyCSYHu/21XD2OhFbW9lyU7E1U4I1aZR4qlwfY=
Subject key identifier: 7C:10:16:65:F1:F0:83:41:F0:FF:8E:61:F3:A2:DF:99:EB:CA:23:97
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0196771EAFAF2BFD06F4F15F15E2C66D167D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 14A4
Signing time: Sun 27 Apr 2025 12:00:21 +0000
Manifest this update: Sun 27 Apr 2025 12:00:21 +0000
Manifest next update: Mon 28 Apr 2025 12:00:21 +0000
Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: Ef1LR3OdLnf+0pBbGasLhShju7Qog5INY3ws+jTuOsc=)
2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=)
3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:af:af:2b:fd:06:f4:f1:5f:15:e2:c6:6d:16:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Apr 27 12:00:21 2025 GMT
Not After : Apr 28 12:00:21 2025 GMT
Subject: CN=7c101665f1f08341f0ff8e61f3a2df99ebca2397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:50:66:52:41:0c:2e:33:17:d5:32:d7:4c:
0b:d2:2b:82:66:eb:51:b1:d4:16:6a:8f:a2:94:a7:
34:ef:87:9a:c6:db:8a:a6:c7:58:9b:f0:73:06:be:
00:bd:7d:61:ad:8c:6c:1b:81:5e:93:18:0a:4f:88:
56:f9:c8:c2:77:b2:75:ee:cb:09:b5:88:52:41:60:
ce:c4:52:45:44:44:75:ba:52:e9:72:97:ac:58:3e:
1d:e8:4e:65:29:e2:b5:dd:f2:c8:ab:72:7d:9a:e3:
86:5b:8c:e5:b4:3b:af:e1:c6:15:a3:7a:f4:a8:cd:
36:29:90:84:cb:6c:00:97:13:00:58:9b:b2:21:28:
e8:62:4d:f8:9c:f6:dc:80:7f:e6:75:16:dc:b9:d1:
8e:75:7b:be:47:34:68:ca:20:1f:51:41:76:d9:9b:
49:e5:79:b2:96:0e:8d:14:93:81:e4:60:63:40:31:
84:ab:f6:85:5a:3a:10:41:7d:ad:90:31:89:3b:34:
41:9f:f3:1d:bd:9e:8f:41:8c:ba:ed:fc:75:95:d8:
70:01:e5:6a:fd:3e:0c:f2:82:3f:32:31:24:14:3c:
25:aa:f9:d4:50:32:6c:39:c3:f7:4c:a2:67:15:fb:
34:6e:17:4a:12:1e:07:e3:cd:91:3f:22:77:6e:81:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:10:16:65:F1:F0:83:41:F0:FF:8E:61:F3:A2:DF:99:EB:CA:23:97
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:80:21:42:15:99:7a:0f:83:7b:24:0c:39:65:d1:00:7d:d8:
a3:a0:93:dc:e9:f0:24:29:87:03:d0:4b:58:13:33:7c:0b:34:
7e:83:eb:18:74:49:90:a0:2a:0d:f4:cf:5c:96:ee:cd:44:b3:
cf:79:00:30:c2:1c:88:5e:80:3d:f9:d5:e3:af:f3:4a:e4:ef:
94:99:08:6b:6f:f6:77:c3:11:c5:52:d8:93:2a:b6:37:0f:ac:
69:b7:f8:b5:4b:b0:65:e1:6a:2b:92:ff:46:92:ba:c0:19:1f:
93:be:db:0f:fa:45:4c:7b:72:7c:d7:fe:c9:eb:dc:d7:51:9b:
f1:5e:a9:dd:12:86:c7:c2:2b:ab:8d:e6:99:a4:3a:eb:21:27:
7e:d3:43:76:38:c4:45:7d:17:50:e5:10:cd:7e:22:31:23:d3:
5d:6a:ea:aa:f9:44:cd:4c:5a:7f:ca:8f:d1:ee:20:4d:67:c0:
3a:16:ad:08:f2:4b:07:e8:90:e5:f6:91:0b:72:79:61:17:ff:
dd:86:0e:28:2d:8e:5d:8f:b9:60:d2:01:7f:6d:9d:ae:b1:b9:
cd:60:74:48:9a:06:f9:6a:68:e2:a1:fa:8c:5d:3e:6e:ed:1e:
66:bf:85:9d:e1:0d:cb:3a:a1:6b:ab:2f:d2:66:58:62:d2:f9:
f8:8b:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:16:17 2025 by rpki-client