Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier: 25U4jeSXiOM9OL0nAKe0Jfs/Zz2VV5pzJRvglCXvWM8=
Subject key identifier: DC:4A:82:46:71:86:F7:83:CB:FB:3E:1F:68:DB:49:86:F2:FF:65:B8
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial: 0196775588DCA10EE69253F59F3C715F5B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number: 12C5
Signing time: Sun 27 Apr 2025 13:00:16 +0000
Manifest this update: Sun 27 Apr 2025 13:00:16 +0000
Manifest next update: Mon 28 Apr 2025 13:00:16 +0000
Files and hashes: 1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: F7lguqx5eFLm/qmzNqqMl+cirfsQqkN1sWciHcYh/DU=)
2: IPJ2H-DbyJS39-MqiGd6rorhNdk.roa (hash: s/YiZX5EGRobWwsqigpJwSULaBic38Nv8k8vwPxeO3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:88:dc:a1:0e:e6:92:53:f5:9f:3c:71:5f:5b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Validity
Not Before: Apr 27 13:00:16 2025 GMT
Not After : Apr 28 13:00:16 2025 GMT
Subject: CN=dc4a82467186f783cbfb3e1f68db4986f2ff65b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b7:2a:1e:43:49:ed:73:ce:26:ed:7a:52:b1:
9e:88:a0:84:a1:08:76:a1:7c:3f:05:cb:5a:6b:6d:
33:49:fb:eb:79:41:83:69:ef:ff:5c:67:e6:13:bb:
37:d1:0b:c5:b7:1f:be:10:d9:32:91:86:45:9b:ee:
20:c2:a9:76:11:ba:41:f6:dc:c0:06:e6:db:5a:60:
0c:ba:b7:34:ca:fe:d8:b9:2c:a0:3e:9c:d7:8f:39:
69:9d:8b:64:56:77:7c:4a:62:83:4b:0a:bb:b8:62:
e2:da:f5:2f:89:81:51:62:72:70:8c:6d:67:76:12:
ba:0c:95:6a:03:20:0d:5e:23:2b:ee:ac:00:c4:f0:
a3:8d:b7:a3:35:14:c1:25:a7:bd:2b:fb:69:a9:25:
1c:cf:f4:af:eb:46:7e:78:db:be:56:0e:6f:58:b7:
19:b5:98:d2:63:21:7e:d9:ca:74:dd:bb:fb:52:40:
ef:96:43:69:5c:67:9f:58:f9:c9:04:3c:de:22:dc:
8e:f7:e8:26:8c:8d:77:99:48:49:93:7f:31:3e:ea:
70:e9:23:de:c3:c1:ef:7e:f1:43:05:31:1e:34:9b:
41:a2:6d:a8:aa:00:82:c5:c9:b4:ad:79:8a:e9:59:
aa:7d:99:9d:2e:5d:1c:88:55:12:0c:1c:65:1e:3c:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:82:46:71:86:F7:83:CB:FB:3E:1F:68:DB:49:86:F2:FF:65:B8
X509v3 Authority Key Identifier:
keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:49:d5:e9:80:30:49:e6:fd:27:bf:34:15:43:e3:c2:b1:2d:
3e:11:7b:22:0c:63:55:a7:36:23:d6:7c:f4:45:e2:e9:56:02:
95:ee:b4:64:5e:49:30:2d:36:eb:23:2b:17:34:0b:c6:73:8f:
f0:61:62:dc:13:be:f4:15:c5:74:dc:71:a8:1d:5e:d5:07:bd:
a0:fb:d8:1a:88:7d:e8:a6:84:66:11:f6:a8:00:a7:a6:40:86:
03:ca:53:9c:a5:10:91:37:88:b4:0e:ca:69:e0:b7:f3:27:38:
f6:6f:5a:5d:19:d9:a7:6f:b3:9e:38:3c:4a:82:47:15:30:04:
0a:dd:22:84:01:8f:ff:7c:db:3a:8f:9c:c1:dc:b2:83:18:0f:
ec:84:21:0b:78:75:d7:aa:5f:c7:33:ab:b9:b6:e4:1c:e3:ba:
30:19:e8:da:f4:8c:9f:fc:8e:fa:02:3a:a8:ae:2b:60:35:c9:
d6:ba:0b:63:3f:7e:87:58:a6:3a:bc:60:cd:99:2c:58:0f:4f:
f8:e8:df:72:35:3e:e1:90:6d:2e:98:d7:70:3b:2e:45:ea:2a:
11:9a:6d:c9:a8:7e:c1:36:3d:85:cd:52:ce:81:51:de:89:f6:
f6:55:61:5d:fe:07:0d:32:a2:85:13:dc:5f:a7:f3:93:d4:f5:
74:43:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:58:13 2025 by rpki-client