Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: s+hn9ayUp6kLd6UAdjUBZikfij1yxruEmxifLhYjqKQ=
Subject key identifier: 4F:EA:9E:38:E7:C2:24:FD:87:D0:C6:C7:1F:74:48:93:22:36:3D:53
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 019676433047E08DC5ECF3F70A42C7FC96B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 10BC
Signing time: Sun 27 Apr 2025 08:00:36 +0000
Manifest this update: Sun 27 Apr 2025 08:00:36 +0000
Manifest next update: Mon 28 Apr 2025 08:00:36 +0000
Files and hashes: 1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: /gKrQH+sz/gG68YJ+FWIsmAssvpeqg6U6Q1EG1naqh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:30:47:e0:8d:c5:ec:f3:f7:0a:42:c7:fc:96:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Apr 27 08:00:36 2025 GMT
Not After : Apr 28 08:00:36 2025 GMT
Subject: CN=4fea9e38e7c224fd87d0c6c71f74489322363d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:bb:7d:36:da:22:f7:33:91:9e:76:3a:15:
e5:dd:b7:55:7f:04:3f:1d:3b:25:85:d8:7d:e1:bd:
1d:1a:e8:f0:2d:c4:61:2a:ee:f9:67:50:3e:4d:17:
8b:0e:f4:65:38:80:ce:78:5b:44:df:4b:c0:f4:38:
fb:de:c8:d9:31:b2:16:8f:02:a5:85:ab:5e:36:fd:
65:36:81:62:b9:c3:33:c8:92:5d:46:2b:ec:70:6a:
5c:d5:08:96:50:79:2c:5f:92:50:64:87:b0:ac:40:
bc:58:dd:40:32:8c:4f:69:bf:77:52:52:82:6e:84:
a1:6c:17:e3:2c:2d:4e:78:b3:2e:3b:5f:cc:58:e7:
8d:57:b5:05:9d:a4:18:91:b9:ad:02:f0:fe:59:68:
33:e7:79:80:74:c1:8e:1c:51:b0:81:bd:d9:12:3f:
b5:80:65:79:81:0e:1b:0e:e4:73:e1:5a:19:08:5e:
d8:f8:3e:a1:4b:4e:6e:e8:cb:7a:34:88:43:9a:9d:
ef:31:b6:56:90:2e:97:4e:e8:f5:5f:17:9f:4c:1b:
16:1b:5b:2b:1b:7a:af:41:37:c3:5a:bc:9a:4a:50:
8e:4a:99:b3:fd:b1:58:1d:10:80:b8:82:e7:ba:28:
14:77:16:33:6a:8c:0b:8c:45:92:fe:28:93:a4:76:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EA:9E:38:E7:C2:24:FD:87:D0:C6:C7:1F:74:48:93:22:36:3D:53
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6e:41:09:ec:2f:91:0e:b6:b3:05:38:58:e4:64:be:a1:d9:
96:bb:a3:d6:c9:f6:ff:5d:1f:fc:3b:e0:b6:b7:b0:60:77:a8:
d4:05:3e:4b:0b:08:b2:25:c9:1b:1f:c8:4a:6b:30:fb:d9:3d:
89:ef:d8:7a:bc:9c:e1:92:fe:72:18:fa:88:b8:93:94:61:22:
ff:ba:1a:ea:9b:7e:d8:7c:58:32:27:c1:62:a4:ca:f7:de:e6:
ec:13:a3:8a:66:c5:09:1b:bb:3a:c0:85:20:10:8c:80:79:81:
5d:98:73:ee:df:85:0a:b7:2b:76:ac:ef:a6:a1:ab:e7:78:15:
11:ef:c9:c3:37:38:96:84:a4:d5:38:d3:57:de:a5:2e:ec:21:
ea:62:25:78:12:d1:7c:21:d8:82:15:3d:2e:e2:64:1e:4a:a1:
78:4a:b6:59:40:3a:c9:18:4f:ee:13:37:3c:01:8c:bb:24:af:
0f:8a:e1:eb:f7:1a:0a:c3:f8:60:46:05:13:bf:c5:ea:25:5e:
f4:1a:42:c0:fa:2f:41:e0:9e:1c:54:dc:14:50:d0:3e:8e:21:
8e:04:03:58:e0:2d:93:01:b0:2e:2c:47:47:c6:13:bd:0f:53:
84:e5:b1:0b:00:78:87:3e:cb:25:ca:32:99:21:14:66:ec:b1:
81:24:5a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:32 2025 by rpki-client