Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier: 6XVRAYbVzhRk5yBO3hDprduNh7R1Jc/ngc+j9XXi1tc=
Subject key identifier: D2:9A:36:35:AB:4D:8A:12:A1:0C:12:66:5A:24:6A:20:68:2D:CB:AC
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial: 01967E33F1AEF0B2BF75F105DED71A7F7714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number: 0C49
Signing time: Mon 28 Apr 2025 21:00:55 +0000
Manifest this update: Mon 28 Apr 2025 21:00:55 +0000
Manifest next update: Tue 29 Apr 2025 21:00:55 +0000
Files and hashes: 1: GYIm3RDoW42qeN5ZkiYHMu0tDbk.roa (hash: XTL3oyukju4z29vBf0q/HsP5UmJFSc4ge9VlgNDZpjY=)
2: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: 8UDFaAfvW5DNk0Bh7VzkIAiK1cVIktCfs4EQCcOgXyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:f1:ae:f0:b2:bf:75:f1:05:de:d7:1a:7f:77:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Validity
Not Before: Apr 28 21:00:55 2025 GMT
Not After : Apr 29 21:00:55 2025 GMT
Subject: CN=d29a3635ab4d8a12a10c12665a246a20682dcbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:94:8a:78:7c:ae:7f:96:99:bd:19:d7:b3:
bc:71:2b:05:a5:ca:80:e5:ab:c4:16:bb:0c:30:73:
ec:b7:1d:2b:67:78:47:fc:90:29:78:16:2a:f5:4f:
7a:ea:99:ad:62:76:65:af:1f:17:fe:d8:01:09:9e:
18:04:11:92:41:2b:23:49:4c:52:e2:48:95:2f:6d:
4d:fa:97:aa:16:7d:69:34:22:9f:fe:87:bb:1f:45:
3b:38:76:30:d7:c0:b9:4d:dd:ca:98:b9:39:ac:1f:
4c:9b:f8:36:4c:b0:3f:35:d9:a7:9b:af:c0:3e:62:
59:a7:5e:a8:2b:d1:ba:97:9e:7a:13:75:74:6a:e9:
99:02:79:93:76:09:17:62:36:c2:b9:8b:ae:f9:92:
ea:4c:6d:5c:19:b2:e3:76:7a:a0:23:c9:8e:df:28:
66:ec:37:ee:28:e7:4f:d6:24:3c:53:31:29:93:b6:
07:e9:95:14:87:5d:c0:c0:9e:fe:af:46:05:fa:c0:
67:03:6b:22:7f:62:da:90:61:c6:86:b4:6f:e6:ec:
a8:43:b4:2c:5d:3b:ef:d9:55:f9:d1:81:86:c4:7d:
e6:af:88:61:f7:37:00:24:74:c5:5e:99:34:b9:af:
20:8a:64:0f:d4:1e:6d:cf:9f:c2:f7:3c:15:e7:43:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9A:36:35:AB:4D:8A:12:A1:0C:12:66:5A:24:6A:20:68:2D:CB:AC
X509v3 Authority Key Identifier:
keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e4:05:ac:77:98:50:48:b1:0d:9a:70:a9:a1:04:58:0e:4c:
d5:05:e3:87:8a:61:34:e7:58:3f:51:4d:c6:ef:e5:6f:fc:59:
5c:df:2c:2e:24:39:82:91:c6:e8:05:5c:2e:1f:cc:0f:00:4c:
be:d6:a6:98:ff:ae:88:36:35:b6:cc:56:41:20:6f:1e:1b:63:
64:6c:5b:d2:26:2e:f4:c6:f7:04:34:77:57:1c:75:24:d2:a3:
2f:57:4c:22:3f:fd:e0:68:f2:81:c3:62:6c:2e:f5:95:33:61:
2a:0a:86:dd:13:02:98:17:cf:04:e0:c6:1a:85:d7:04:4c:ae:
37:5b:e2:31:41:7d:9b:8e:39:69:08:23:87:3d:17:9d:1e:ba:
41:b9:26:e8:aa:79:b8:07:40:ee:da:c1:10:55:30:2d:f6:39:
c4:2a:95:70:b5:94:74:fe:eb:9e:36:4f:7e:c0:e0:dd:d4:74:
c9:2f:15:49:4a:1b:c0:93:65:ba:9a:06:de:1b:80:40:26:7c:
fd:cb:d3:d9:f0:a2:df:97:44:fa:0d:f0:ef:17:39:cd:21:21:
d0:00:14:84:f6:26:99:e8:c4:90:35:d9:c5:66:c8:53:51:ac:
33:53:bb:9c:03:2e:d8:e5:90:a2:9b:08:4d:ec:33:aa:0e:ba:
af:49:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:01:35 2025 by rpki-client