Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
File: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json)
Hash identifier: +hzM9zhZIoT1bebUD+JeP6SeKg1qjZz4SZuMPOIRF6g=
Subject key identifier: 99:47:A4:DD:2C:C0:FA:E6:92:FA:62:CF:EE:E7:AD:A3:EB:77:10:A0
Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
Certificate issuer: /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Certificate serial: 01967B32EB45FA44B3296503271018222A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
Manifest number: 0280
Signing time: Mon 28 Apr 2025 07:00:56 +0000
Manifest this update: Mon 28 Apr 2025 07:00:56 +0000
Manifest next update: Tue 29 Apr 2025 07:00:56 +0000
Files and hashes: 1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: QksTvtfjgzPlHv9pXHsr6BDzWRH7Tr1cCkPaVTMzX4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:eb:45:fa:44:b3:29:65:03:27:10:18:22:2a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Validity
Not Before: Apr 28 07:00:56 2025 GMT
Not After : Apr 29 07:00:56 2025 GMT
Subject: CN=9947a4dd2cc0fae692fa62cfeee7ada3eb7710a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4c:04:91:a4:99:f7:9f:b7:30:05:ad:ad:9e:
9c:96:f4:33:12:28:fa:cc:29:4b:43:7e:6c:8a:37:
b7:c1:8c:47:0e:8e:5f:98:aa:cd:61:1e:86:48:15:
9b:d4:64:85:fb:47:bd:68:4a:a6:95:29:c7:1c:5c:
4f:59:1d:48:76:fd:fe:f4:bc:26:f6:a2:23:63:64:
95:c0:e7:7f:73:b6:5e:eb:a6:a7:a7:fb:d9:9c:85:
52:4b:c8:64:bb:b9:5f:3e:65:73:b6:f6:51:84:74:
57:4a:41:8c:49:32:64:24:1f:7b:cf:23:e7:70:72:
d7:88:e8:b2:de:8c:66:fd:f5:1b:44:ee:81:2e:8b:
d7:b2:df:8f:1c:49:70:74:d4:90:10:0a:63:1d:01:
8f:e7:ec:b7:5a:9d:41:a7:26:4c:79:02:b9:82:56:
bc:30:f6:a9:0f:a6:21:fe:15:e6:06:c0:0e:30:10:
47:36:dc:b9:e6:ba:22:d8:a7:39:15:e7:33:eb:db:
12:41:66:1d:fb:3b:c9:e4:d1:ba:8a:4e:48:0a:2d:
43:5c:31:9c:c1:06:df:8d:1f:3e:ad:09:8c:f5:79:
39:34:09:16:1d:91:32:d6:0f:0a:62:ce:4e:a9:c2:
12:2b:b0:be:e5:8a:03:a5:9f:81:a8:7e:49:96:a2:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:A4:DD:2C:C0:FA:E6:92:FA:62:CF:EE:E7:AD:A3:EB:77:10:A0
X509v3 Authority Key Identifier:
keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d6:d9:f7:9e:7c:b4:b4:9b:e2:3f:42:aa:c9:37:e4:dc:20:
4d:50:f7:38:5e:09:9c:3e:cf:76:03:67:5c:4e:27:27:b4:27:
49:26:67:0d:39:3e:d2:1f:ec:52:dc:f2:c8:a5:3c:36:14:d8:
b3:5a:29:a0:ed:d2:15:18:c9:6f:fd:d8:90:f4:d5:66:1a:cc:
c7:ba:12:5a:3a:89:dc:dd:2a:e1:4e:fb:5b:ba:71:e4:db:58:
40:1d:44:fb:24:9b:df:19:d6:8f:7c:47:86:de:6b:7b:8c:48:
81:53:70:08:43:1f:53:7b:39:ea:42:88:1d:f8:55:de:b6:01:
69:a3:36:62:51:8a:6f:b6:a5:8d:ea:fb:b5:a4:7f:9f:ee:0c:
fe:c6:1d:4f:da:07:11:09:55:be:89:1a:9e:5d:03:44:83:a1:
70:53:f2:8b:6a:d4:ff:77:d9:7f:5a:4b:cc:14:fc:5c:4b:6e:
89:36:bb:a3:5d:21:e2:fb:18:c3:08:41:7b:4d:43:9f:ab:54:
b0:94:33:37:74:d5:92:ed:b0:c0:e0:ea:96:ad:9e:6a:e2:5e:
62:d1:dc:e2:36:54:3f:39:1e:e9:c1:4b:a0:0b:19:e8:37:78:
bd:b5:4f:6a:ff:bf:3e:20:eb:6c:3c:4e:fa:8d:fe:3f:6f:7c:
c3:a9:56:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:13:18 2025 by rpki-client