Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier: P1abRUdxqUadKi1vA6zRUC7Cn8T8Dwit6MLYwb08Jcw=
Subject key identifier: E0:6D:C0:EC:6E:3B:44:3A:DB:30:E5:32:7C:7A:EE:58:1E:C3:96:0B
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 01968B4B3737DAA44C5686F5567BE73754C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number: 6E
Signing time: Thu 01 May 2025 10:01:24 +0000
Manifest this update: Thu 01 May 2025 10:01:24 +0000
Manifest next update: Fri 02 May 2025 10:01:24 +0000
Files and hashes: 1: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: 4fl/1FXtBsyHuk2p+WL4F76IkRXHJRGDHJVIFwY3wnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4b:37:37:da:a4:4c:56:86:f5:56:7b:e7:37:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: May 1 10:01:24 2025 GMT
Not After : May 2 10:01:24 2025 GMT
Subject: CN=e06dc0ec6e3b443adb30e5327c7aee581ec3960b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:7e:58:5b:6e:c8:bb:41:e3:ad:43:d4:b6:
e3:b1:81:85:1d:4d:18:89:90:d2:ce:93:33:af:d6:
cb:ff:0e:63:4c:65:e3:9b:c1:d2:6e:74:b4:d4:73:
d4:5d:11:a9:20:6e:2a:d8:66:57:13:eb:c7:e7:b7:
30:ef:12:86:a3:8a:7b:60:fa:cc:2e:6c:25:0e:0d:
16:43:66:00:35:1c:d0:da:80:eb:03:47:a2:77:5d:
01:92:cf:b3:ce:dc:90:03:9b:eb:ee:57:2c:33:b7:
a0:3e:bc:e6:65:8b:c0:6b:02:3d:1c:d9:72:c2:78:
53:d5:ac:40:f5:a2:bb:ec:03:8e:cd:37:3d:a1:da:
de:c4:cb:95:aa:f2:ab:de:d0:e8:90:8b:32:2d:df:
c4:14:1a:fa:78:81:1c:3b:8e:96:7d:b0:b5:64:da:
ed:7e:15:5a:4f:66:ac:02:40:7f:6b:c4:8e:30:a3:
15:d5:a8:97:db:74:de:cf:fe:9d:e1:0b:ee:43:63:
91:ac:76:02:da:ed:98:fb:88:6d:f5:0b:fe:bf:43:
46:0a:4a:23:b2:f5:5e:af:1c:08:8a:43:29:fa:56:
8e:1d:6c:3e:e7:60:1d:4e:56:9b:16:20:0a:d9:e8:
83:e0:84:8e:50:25:0c:54:f2:32:fa:4c:60:1d:bb:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6D:C0:EC:6E:3B:44:3A:DB:30:E5:32:7C:7A:EE:58:1E:C3:96:0B
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ee:7b:9c:c1:fc:89:08:99:ed:8c:8e:45:da:ab:2d:16:24:
08:5a:f2:c0:0a:70:80:dd:52:55:8f:6a:56:30:14:65:c0:b9:
93:a0:fe:ac:45:b6:bf:63:e6:4c:72:78:86:93:57:fc:4c:9a:
a0:7e:97:f5:f5:25:c3:ee:1d:12:5b:97:71:1b:4b:2f:c0:a5:
df:ab:09:53:14:4a:93:a6:17:ee:1c:12:3c:4b:9d:8d:13:52:
12:31:17:5f:f7:a5:93:fa:65:7f:7d:71:ad:c9:cb:e5:63:71:
54:08:13:a4:be:5e:8e:3b:a8:b1:d2:7f:4c:06:67:d7:60:3a:
58:3d:24:24:12:69:4d:5a:82:06:e7:7d:26:0e:5e:c0:52:5e:
2d:95:ba:45:0d:6c:4d:fb:7a:b1:31:51:39:21:82:f3:d6:40:
d5:f4:8f:c8:44:f4:d7:97:44:2b:6b:29:1b:a9:d4:f9:8e:84:
9d:26:3d:36:37:da:86:27:7a:ee:60:52:c3:1f:15:fe:ba:c8:
4b:0c:92:62:8f:50:18:72:44:df:ff:6c:3b:a1:15:90:c0:70:
fb:20:40:11:a2:e5:97:28:12:d2:26:5e:b9:9c:8d:63:da:d3:
92:92:86:b0:41:a1:1e:54:36:0a:d6:9e:f9:d2:e6:2a:14:08:
a4:59:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:25:26 2025 by rpki-client