Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: lz3c5zIwk1F7+3QnEpKNAgmukN3JI5RI6qPovtZ83lw=
Subject key identifier: B5:E2:17:D5:7B:63:EF:C4:15:8E:E0:8C:31:2C:CD:24:6E:01:58:C3
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 01967FEAF519975DC5AAA6FDFFAC0B0B1C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 0D6F
Signing time: Tue 29 Apr 2025 05:00:26 +0000
Manifest this update: Tue 29 Apr 2025 05:00:26 +0000
Manifest next update: Wed 30 Apr 2025 05:00:26 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: qFWfdh4ago60+kzRe2vIh/9Wce311YlYaSsWbv/cL+8=)
2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:f5:19:97:5d:c5:aa:a6:fd:ff:ac:0b:0b:1c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Apr 29 05:00:26 2025 GMT
Not After : Apr 30 05:00:26 2025 GMT
Subject: CN=b5e217d57b63efc4158ee08c312ccd246e0158c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a3:3b:26:ab:dd:f5:36:bb:4b:ed:ea:c7:3a:
41:fe:36:d6:26:dc:44:72:d8:3d:cf:90:f8:3e:f7:
ce:46:e8:c1:cc:7e:60:82:15:ae:79:a6:77:4c:89:
3e:62:c5:20:2c:3d:c9:fc:f8:a1:d8:67:b9:4e:20:
0b:7d:47:9d:45:1d:90:7e:51:b9:1c:73:46:57:66:
92:1a:ea:ac:ec:ec:89:ae:71:9d:41:ae:23:6b:16:
36:b9:82:3f:ba:9b:3a:81:83:ff:50:7a:8a:aa:42:
c4:07:c9:f9:43:57:49:ac:ee:30:1b:49:87:53:3a:
aa:33:49:80:6b:c3:31:dc:5f:7c:16:30:37:f9:21:
8d:40:52:2b:90:58:fb:d4:76:69:65:4c:fe:63:ad:
6d:76:0a:66:96:9a:c9:61:bc:2a:c9:b6:19:37:9a:
45:05:96:8a:ee:34:45:9d:62:ed:da:53:ab:05:37:
95:64:d2:70:4d:f7:d6:04:92:21:46:70:09:29:46:
59:fb:01:e8:c6:23:aa:a0:45:ff:88:eb:da:eb:ef:
a7:38:59:d7:e5:6a:b0:a7:69:c3:9c:2b:99:12:96:
f6:d2:08:8b:ea:66:33:cd:d1:f7:c2:46:66:bd:f6:
78:d3:c2:71:26:6a:f4:ee:92:38:00:99:cd:d1:bc:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E2:17:D5:7B:63:EF:C4:15:8E:E0:8C:31:2C:CD:24:6E:01:58:C3
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:63:c8:82:a1:4f:8b:b7:43:99:75:22:d5:31:97:7d:98:b4:
ee:f0:02:81:7b:f5:e1:62:a3:48:ee:f1:ab:17:88:c4:aa:71:
e8:11:c4:1d:bc:62:a0:7c:7e:fe:d2:08:9d:86:13:4a:e5:13:
9e:8d:00:80:02:79:84:f0:24:93:31:d1:26:f2:79:a0:32:03:
e7:77:4f:1f:4a:28:5f:fb:59:a8:49:8c:87:3f:fa:19:ef:59:
d6:df:b8:4e:27:12:71:df:ae:6d:32:5f:aa:7a:3a:6f:25:7c:
1d:87:08:e9:8d:59:83:0a:6f:7f:20:34:c0:b8:47:6f:c9:87:
1e:7e:3e:7e:a9:d6:12:4b:92:82:46:99:39:ca:9e:4a:0e:43:
4a:19:b7:b5:39:82:69:4d:0d:31:cf:2f:41:5f:87:6a:b8:fb:
b0:96:b4:fe:ba:29:b1:1b:08:7b:64:d3:eb:6f:e2:2d:41:55:
72:9a:9c:b1:49:4f:ba:88:07:d6:44:72:dd:42:60:12:f3:23:
41:ec:5c:49:c2:37:cf:56:1b:3a:06:e3:21:d8:1d:ea:e2:61:
69:24:d8:f6:35:1f:11:16:1a:7e:a3:f8:4f:45:a2:f7:50:02:
17:97:af:ce:de:ac:1d:57:6a:57:1d:87:79:62:b6:7e:60:08:
e4:09:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:35 2025 by rpki-client