Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: 33OnaVpUAM0hF666lF5FB+wS3eS+M+hrLwFwR9yBhuM=
Subject key identifier: 00:C6:3A:C6:E4:CD:0E:3D:D7:14:2E:3D:73:BF:AF:8C:78:19:80:31
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 019679E8FE8B590DC4FC998758C5CA2B4DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 0DE1
Signing time: Mon 28 Apr 2025 01:00:34 +0000
Manifest this update: Mon 28 Apr 2025 01:00:34 +0000
Manifest next update: Tue 29 Apr 2025 01:00:34 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: 12d40lZimosM+ciPUK9r1koxreEtMPLLQ1MW5oh2m/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e8:fe:8b:59:0d:c4:fc:99:87:58:c5:ca:2b:4d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Apr 28 01:00:34 2025 GMT
Not After : Apr 29 01:00:34 2025 GMT
Subject: CN=00c63ac6e4cd0e3dd7142e3d73bfaf8c78198031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cc:96:ef:4d:f3:4b:c5:5f:78:1b:15:b2:bc:
1f:e9:6e:bb:31:9a:5c:75:84:cd:03:cc:ae:3c:b4:
33:a5:6e:f7:6b:4a:d9:3f:61:40:38:ea:49:67:44:
6f:bd:ce:12:46:36:45:b1:c2:1c:b7:19:e5:c5:ee:
37:3f:e7:54:51:0c:c3:e0:02:1a:50:1a:ee:f2:47:
18:2a:f8:95:a7:6c:5e:62:ba:45:37:4c:a4:f7:82:
a6:30:92:3e:3c:17:3a:94:e3:4d:39:99:d0:ac:80:
74:a7:5c:59:c3:12:e2:02:be:63:d0:d6:05:5f:c7:
9b:d4:09:69:72:29:db:3f:1c:e2:18:5f:ec:97:f4:
fa:7d:ac:f0:11:cb:7c:a9:6b:7b:28:15:95:c8:42:
eb:b4:0b:b3:6a:cf:e3:81:df:1c:ea:ca:a2:a6:ac:
c3:c8:68:df:67:7b:49:7d:f4:d6:2b:b3:32:d8:af:
16:42:66:3b:9d:b6:03:02:4a:0b:01:17:76:27:03:
30:35:37:31:dc:3c:84:0b:f7:9c:08:6f:09:8c:21:
39:9d:1b:4e:72:72:21:69:62:1a:68:f4:cc:83:3e:
61:1a:0b:b2:64:d3:49:18:68:d9:44:82:1e:4d:48:
cb:24:4b:38:8b:cb:53:82:bb:57:dc:cc:ef:f6:db:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C6:3A:C6:E4:CD:0E:3D:D7:14:2E:3D:73:BF:AF:8C:78:19:80:31
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:12:b1:14:bd:10:74:40:ca:11:c4:89:4e:37:e6:a9:0d:00:
cf:95:8c:41:3e:7a:7e:de:84:83:26:2e:ae:fc:8e:44:57:e1:
f8:8f:1f:5f:7d:ee:ee:31:04:ab:24:f1:92:a5:eb:ae:c9:1b:
79:c5:4c:a4:e7:6c:35:d5:79:28:a5:af:3e:8b:46:16:13:98:
08:ed:8c:f3:e0:7c:46:de:c8:cd:5f:ca:2f:85:13:8d:72:39:
71:be:f0:32:65:0c:83:22:57:54:32:71:3d:a7:79:fc:a3:cc:
38:b2:68:ff:50:1b:b5:34:5d:ad:ca:ef:02:45:9f:c5:e3:1b:
2c:d8:e4:dd:77:39:f5:9b:7b:c9:50:4f:54:13:32:5d:03:c7:
d9:e9:1c:7c:95:fd:e0:1f:57:30:34:a6:f1:09:6c:1d:57:4a:
4f:22:37:1b:fc:4f:3e:11:b1:a6:aa:63:be:8f:53:d3:a4:95:
58:30:f5:5b:08:97:d5:c2:d3:62:35:3e:a0:e6:28:a1:2e:58:
8c:c4:44:58:f0:a2:32:8c:fb:51:64:8c:34:64:1b:ee:0b:d6:
88:7c:21:23:85:c5:63:a3:66:ee:01:6d:d1:21:50:39:31:9f:
de:02:38:bd:1a:56:07:24:8c:33:26:eb:e2:d8:89:1f:35:96:
b6:9f:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:22 2025 by rpki-client