Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
File: HQHtI2TsgiZcaIaf5yvnVzGaMes.mft (raw, json)
Hash identifier: ac4oWYRyHnmyDuwcxYlUTXDyKhrUmgJ39ZJ+UfQ/T9s=
Subject key identifier: 23:79:0C:8C:6F:93:22:67:89:15:C3:12:B4:7E:79:1E:BC:2A:83:85
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Certificate issuer: /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial: 01967F463B763D0F0224F2F8C7CA3F42D80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
Manifest number: 1335
Signing time: Tue 29 Apr 2025 02:00:31 +0000
Manifest this update: Tue 29 Apr 2025 02:00:31 +0000
Manifest next update: Wed 30 Apr 2025 02:00:31 +0000
Files and hashes: 1: HQHtI2TsgiZcaIaf5yvnVzGaMes.crl (hash: v+fSsy0rhJIe3kVhxL2jjDykQ0HXEakgs1MxbuuNsgA=)
2: VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa (hash: mb8FZcI3peRcYmZtZcg+Q1vM47sFhZh3vrE8fwC75+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:3b:76:3d:0f:02:24:f2:f8:c7:ca:3f:42:d8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
Validity
Not Before: Apr 29 02:00:31 2025 GMT
Not After : Apr 30 02:00:31 2025 GMT
Subject: CN=23790c8c6f9322678915c312b47e791ebc2a8385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:74:33:0b:ef:1e:09:24:15:a0:c5:23:35:
f0:f8:b9:68:8a:14:b9:0c:81:44:6a:bb:e4:d0:43:
df:0b:15:72:89:3e:84:a3:3b:f1:27:2b:0d:14:02:
e0:88:09:68:fc:75:09:e3:2d:6e:e2:41:9a:0f:73:
96:91:60:12:90:56:b3:a7:8f:23:38:1a:12:f9:8f:
27:a9:4d:fd:0d:23:b2:1e:6f:23:7f:22:33:33:70:
e0:13:53:69:99:2c:85:b0:a3:53:5a:7a:42:d5:1d:
a9:d4:59:46:94:22:a5:4e:a3:24:58:10:af:eb:b0:
0f:98:9f:e9:f1:b3:bf:31:d5:eb:aa:f0:f1:7c:c1:
7c:2c:1d:00:ee:2f:26:2b:69:4a:84:ba:f5:ba:31:
42:d2:f1:ac:75:98:c8:20:d4:b9:e0:67:bb:c7:90:
ed:84:f5:96:e9:66:9e:16:e8:2c:0a:e2:32:e9:d5:
69:56:ae:cf:22:5b:71:1f:76:82:f8:7e:ac:49:91:
e2:16:a2:fd:72:b3:89:05:7f:e0:55:d9:6c:f3:54:
6f:8a:5d:f5:19:18:e5:8b:79:e3:af:6c:aa:f8:a9:
76:18:5d:0b:b7:a0:b9:50:f7:c0:92:2f:95:17:20:
87:26:b6:0f:62:16:cf:0b:a3:5d:93:9e:63:8d:0d:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:79:0C:8C:6F:93:22:67:89:15:C3:12:B4:7E:79:1E:BC:2A:83:85
X509v3 Authority Key Identifier:
keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ea:c9:ef:89:18:62:4e:e9:3b:50:f7:b6:35:09:0e:29:69:
9c:af:7d:8d:ca:a5:d4:27:84:c1:26:e8:28:9a:1f:7c:b5:d1:
1f:b1:f3:ea:24:4e:ac:0a:fe:c4:8b:c7:2b:dc:0e:48:22:31:
e3:bf:e9:03:00:e3:7e:db:34:dd:42:56:41:f7:48:16:2d:3c:
65:bd:a9:37:0f:7e:d8:e4:4f:a3:81:78:5c:77:ed:4e:db:74:
74:e7:c4:91:41:08:26:c6:18:6f:52:da:9d:b4:df:0a:f3:df:
2f:78:35:55:30:58:38:d5:9b:f7:69:3c:29:80:fe:c5:7a:d7:
aa:47:cf:cb:cd:ad:64:14:bf:9e:bc:1a:1c:b4:2a:48:22:a7:
5d:20:16:8a:59:31:bf:42:e8:8a:82:17:a9:de:92:9e:66:45:
83:80:d0:ba:3d:9e:af:9d:a6:b9:c3:62:35:50:74:b8:96:fb:
98:37:84:04:f8:ef:9e:c8:23:1e:d0:94:fe:13:49:f4:be:c3:
a3:11:41:d0:dd:39:6f:2b:9b:d1:5d:6b:7f:00:a3:6c:7f:55:
6d:cd:02:ce:3d:3c:9f:09:9d:31:ff:23:5f:ac:ca:64:b0:e1:
30:88:b2:7c:03:5f:77:9b:c7:04:07:8b:0a:01:8f:3c:7d:26:
b5:0e:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:31:30 2025 by rpki-client