Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft
File: Hekyc87VkolMnTVRSLsfrMEPcqI.mft (raw, json)
Hash identifier: ipRDk4mqsAnMl2YO9cKOVmpe39X1JghhDNkw9MUA1tc=
Subject key identifier: F8:31:8C:58:49:CF:F0:5A:A8:15:48:44:7B:E8:86:BF:CA:25:6E:06
Authority key identifier: 1D:E9:32:73:CE:D5:92:89:4C:9D:35:51:48:BB:1F:AC:C1:0F:72:A2
Certificate issuer: /CN=1de93273ced592894c9d355148bb1facc10f72a2
Certificate serial: 01967FB4F02854027C1549201835F30F4ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hekyc87VkolMnTVRSLsfrMEPcqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft
Manifest number: 10F6
Signing time: Tue 29 Apr 2025 04:01:26 +0000
Manifest this update: Tue 29 Apr 2025 04:01:26 +0000
Manifest next update: Wed 30 Apr 2025 04:01:26 +0000
Files and hashes: 1: Hekyc87VkolMnTVRSLsfrMEPcqI.crl (hash: vx/oNRVnoHguPKKLlKT3mnJ3FwlwpbDjP+KV7hupXhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hekyc87VkolMnTVRSLsfrMEPcqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:f0:28:54:02:7c:15:49:20:18:35:f3:0f:4e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de93273ced592894c9d355148bb1facc10f72a2
Validity
Not Before: Apr 29 04:01:26 2025 GMT
Not After : Apr 30 04:01:26 2025 GMT
Subject: CN=f8318c5849cff05aa81548447be886bfca256e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:95:44:35:8f:33:36:29:57:2d:a6:a6:8a:
cf:73:78:dc:ac:bd:db:28:2b:d7:51:ca:6a:42:49:
30:56:33:5d:d4:fa:c2:67:4a:ee:07:1d:79:38:ef:
22:b3:48:24:2a:bd:ab:8e:83:4a:ae:e3:5a:2a:02:
dc:03:75:53:63:fe:6d:28:5d:65:e3:e0:e4:d1:61:
fd:c3:e2:c4:9d:df:e9:9f:61:11:ed:4e:1d:d6:d5:
70:49:5a:85:de:b1:c4:08:b1:18:94:c1:05:90:ea:
30:0d:b8:b6:5a:1d:52:76:9b:31:3b:99:91:56:e1:
3f:a2:ef:3d:d1:20:8d:c5:bd:e6:05:5b:31:81:c9:
9b:e0:17:f7:9d:78:84:26:02:51:c9:da:f3:fa:19:
e6:f9:08:96:71:fb:56:49:ce:c7:ef:21:83:99:1e:
e4:ce:3d:de:00:94:ef:b7:94:02:d2:47:d0:fa:27:
f8:50:6b:5f:be:51:9a:80:6a:10:60:44:d1:e7:9f:
a0:15:ac:1e:49:37:ab:69:9f:4a:7f:83:19:88:21:
5f:21:ed:d1:ff:47:a3:a4:af:68:f6:c4:aa:8c:83:
78:32:f2:f1:0b:5d:d6:5e:56:14:1a:8e:1b:a5:40:
23:a7:d4:5d:27:0c:83:af:52:9b:77:51:5c:a8:37:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:31:8C:58:49:CF:F0:5A:A8:15:48:44:7B:E8:86:BF:CA:25:6E:06
X509v3 Authority Key Identifier:
keyid:1D:E9:32:73:CE:D5:92:89:4C:9D:35:51:48:BB:1F:AC:C1:0F:72:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hekyc87VkolMnTVRSLsfrMEPcqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:08:67:70:ba:cd:3e:aa:ed:06:8e:04:e1:6d:2a:ba:71:61:
96:46:ed:dc:7d:e3:76:4f:3d:38:36:e9:49:03:15:5a:79:cd:
6b:4e:09:a9:f4:ba:07:97:b1:0f:72:3a:9f:88:d2:1f:c0:18:
9a:0e:2d:12:af:2e:43:96:69:c4:d0:ae:eb:ff:38:06:90:79:
45:56:f8:8a:ea:96:11:54:2f:10:70:43:22:47:39:c4:06:a7:
5d:1a:d9:8e:19:48:1e:a3:d2:38:3d:95:12:09:91:6f:19:64:
81:6c:f5:06:0b:6b:f2:fd:65:33:0d:ec:09:56:6e:a1:70:7c:
90:52:d6:97:52:96:36:26:7b:8c:28:b9:6c:f1:b2:18:b5:fd:
9d:11:c2:bc:68:7a:3e:32:1b:9f:a7:c5:52:05:6c:e4:12:3f:
a2:73:16:17:b2:37:60:ae:af:8d:07:25:8c:77:d4:41:ef:33:
be:59:cf:a7:22:4a:2d:4c:0c:71:d8:45:1a:b0:85:80:35:b4:
33:38:f8:82:b8:ae:27:2c:a1:1c:06:0f:d8:dc:62:c9:b9:41:
41:66:c1:44:99:89:eb:d5:4c:b5:49:a3:6b:5c:c0:f2:2a:6c:
fc:b2:c7:17:39:39:8e:57:a9:59:41:1f:76:40:bb:f4:02:7a:
73:64:55:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tPAoVAJ8FUkgGDXzD07VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZTkzMjczY2VkNTkyODk0YzlkMzU1MTQ4YmIxZmFjYzEw
ZjcyYTIwHhcNMjUwNDI5MDQwMTI2WhcNMjUwNDMwMDQwMTI2WjAzMTEwLwYDVQQD
EyhmODMxOGM1ODQ5Y2ZmMDVhYTgxNTQ4NDQ3YmU4ODZiZmNhMjU2ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSSVRDWPMzYpVy2mporPc3jcrL3b
KCvXUcpqQkkwVjNd1PrCZ0ruBx15OO8is0gkKr2rjoNKruNaKgLcA3VTY/5tKF1l
4+Dk0WH9w+LEnd/pn2ER7U4d1tVwSVqF3rHECLEYlMEFkOowDbi2Wh1SdpsxO5mR
VuE/ou890SCNxb3mBVsxgcmb4Bf3nXiEJgJRydrz+hnm+QiWcftWSc7H7yGDmR7k
zj3eAJTvt5QC0kfQ+if4UGtfvlGagGoQYETR55+gFaweSTeraZ9Kf4MZiCFfIe3R
/0ejpK9o9sSqjIN4MvLxC13WXlYUGo4bpUAjp9RdJwyDr1Kbd1FcqDfflwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgxjFhJz/BaqBVIRHvohr/KJW4GMB8GA1UdIwQY
MBaAFB3pMnPO1ZKJTJ01UUi7H6zBD3KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGVreWM4N1Zrb2xNblRWUlNMc2ZyTUVQY3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8zZmQ1M2ItZTE1My00YzNhLTgwNTgt
MThhZDU4OWNlY2QwLzEvSGVreWM4N1Zrb2xNblRWUlNMc2ZyTUVQY3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8zZmQ1M2ItZTE1My00YzNhLTgwNTgtMThhZDU4OWNlY2Qw
LzEvSGVreWM4N1Zrb2xNblRWUlNMc2ZyTUVQY3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAghncLrN
PqrtBo4E4W0qunFhlkbt3H3jdk89ODbpSQMVWnnNa04JqfS6B5exD3I6n4jSH8AY
mg4tEq8uQ5ZpxNCu6/84BpB5RVb4iuqWEVQvEHBDIkc5xAanXRrZjhlIHqPSOD2V
EgmRbxlkgWz1Bgtr8v1lMw3sCVZuoXB8kFLWl1KWNiZ7jCi5bPGyGLX9nRHCvGh6
PjIbn6fFUgVs5BI/onMWF7I3YK6vjQcljHfUQe8zvlnPpyJKLUwMcdhFGrCFgDW0
Mzj4griuJyyhHAYP2NxiyblBQWbBRJmJ69VMtUmja1zA8ips/LLHFzk5jlepWUEf
dkC79AJ6c2RVew==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:22:49 2025 by rpki-client