Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: U+z6vcHrI0fiC5EfWgW0Y2cZm56gsX8/TjgrDKpQGNI=
Subject key identifier: B6:BA:4F:34:1D:CC:D2:BD:CE:6C:95:F8:97:17:73:52:11:32:30:74
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 01967E33843545C89AC03094A7E60BD41D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 1224
Signing time: Mon 28 Apr 2025 21:00:27 +0000
Manifest this update: Mon 28 Apr 2025 21:00:27 +0000
Manifest next update: Tue 29 Apr 2025 21:00:27 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: gwI0CwgBpWt+aUxuSwKcV6XOHIqsz2II7+Xi1wEQ8Bo=)
2: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (hash: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:84:35:45:c8:9a:c0:30:94:a7:e6:0b:d4:1d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Apr 28 21:00:27 2025 GMT
Not After : Apr 29 21:00:27 2025 GMT
Subject: CN=b6ba4f341dccd2bdce6c95f89717735211323074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:bd:ec:f0:90:cd:b9:91:45:42:a3:d0:0a:
a8:9d:15:d6:42:6b:d2:8b:bb:13:ef:be:28:83:e4:
06:ef:32:b2:88:c0:97:6a:49:21:b5:14:6b:93:37:
8b:1e:85:62:31:93:03:08:64:47:b5:0d:a5:86:08:
fe:ee:1f:3c:3e:22:88:bc:2d:38:85:d9:c3:b5:cb:
f8:ae:60:c4:ae:54:80:c5:f6:a2:13:9f:6d:3a:68:
11:23:ea:41:0f:32:60:34:e2:24:a4:f1:27:6f:f7:
6d:0f:6d:06:7c:0c:ea:49:b0:d3:01:b7:da:af:93:
74:64:63:84:ac:44:5d:02:e4:d3:5c:14:b9:c4:68:
1a:c9:28:59:a2:66:fe:d6:06:16:ce:36:79:25:6e:
66:79:7d:de:18:92:70:78:ee:68:56:99:e4:3d:44:
8c:1b:98:a5:9f:64:69:82:df:e8:92:60:52:5a:76:
30:12:fa:98:e9:9e:43:d5:cf:56:56:b3:d2:e1:4d:
05:6a:35:3d:d4:a5:9e:31:84:ca:26:cf:ba:8e:e1:
2b:a1:c5:7a:bc:b0:5a:3a:06:25:15:04:ec:61:d5:
a1:fa:c8:f2:45:66:4a:da:a4:23:5d:46:25:ab:6a:
5f:2c:13:c8:e4:f7:09:3e:6a:86:01:b1:92:3a:2b:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:4F:34:1D:CC:D2:BD:CE:6C:95:F8:97:17:73:52:11:32:30:74
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:08:09:30:f9:97:bd:4f:0f:c7:6e:8a:a0:df:b6:bc:70:ec:
c3:b1:3b:8d:d6:a9:75:b4:fc:ce:05:fb:96:92:73:9b:4c:4f:
87:09:44:ee:80:30:89:14:50:b4:1c:0b:7a:53:bd:46:81:bd:
4a:9e:b8:df:c3:91:41:2b:f3:46:b2:44:63:80:e9:d3:93:bf:
bf:57:7e:86:8e:74:6d:2e:5d:13:76:54:c6:d4:10:9a:5a:14:
21:31:5e:ec:f6:a4:a3:d1:57:3b:fc:8e:ea:36:e0:7a:1f:a9:
af:c8:da:0a:e7:bb:9b:b2:59:48:5e:d1:4a:ff:e7:e3:71:69:
5d:23:dc:5f:6c:90:2d:af:9c:ad:2a:9e:db:d9:c2:a0:d3:ea:
4e:48:38:8f:96:55:f6:e0:67:7a:ca:00:31:12:3e:a1:c1:02:
73:d7:56:62:f1:53:48:2d:49:17:71:81:89:be:5d:c0:e7:33:
44:a0:28:c0:bd:2e:34:00:a1:3b:ff:bf:4a:b0:94:36:be:7d:
09:b1:00:8b:a7:bb:28:af:40:3b:99:66:49:2f:88:c6:bb:42:
ff:26:84:ae:3e:c0:7f:bc:d1:ec:93:9e:aa:f9:7c:dd:ad:8f:
fb:b7:19:6c:ae:68:bc:a9:e3:b1:64:68:ab:fe:40:02:fd:45:
2b:c9:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:29:28 2025 by rpki-client