Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: x2VDPjnkFCtVGayXWOUDHZKpYY9axXYgJcFp065MC1A=
Subject key identifier: B2:9E:5F:D7:F5:09:E3:E6:4C:41:09:44:A3:DB:37:A1:63:FE:99:54
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 01968EB992A5A4C61ACC595E0577B8E3AD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 11A1
Signing time: Fri 02 May 2025 02:00:48 +0000
Manifest this update: Fri 02 May 2025 02:00:48 +0000
Manifest next update: Sat 03 May 2025 02:00:48 +0000
Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: gl9/mxznOB3TCcYLa6AMIL40Z70JMreS+e0T4/FbFxI=)
2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=)
3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:b9:92:a5:a4:c6:1a:cc:59:5e:05:77:b8:e3:ad:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: May 2 02:00:48 2025 GMT
Not After : May 3 02:00:48 2025 GMT
Subject: CN=b29e5fd7f509e3e64c410944a3db37a163fe9954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:d5:44:b7:e2:47:02:67:69:b9:3a:b7:5e:
97:fe:3b:01:be:b1:52:d6:57:99:d6:90:1c:64:ab:
98:b4:86:40:b0:f8:84:68:ec:0d:33:9a:28:71:a3:
16:d9:22:c0:37:85:8d:ce:37:4e:3a:f7:db:49:f1:
0b:56:83:c6:4d:26:89:6d:8d:38:3f:71:f0:14:c7:
e5:7f:e9:42:ab:a3:bc:41:b1:c2:27:3d:4e:27:d0:
81:6e:14:aa:37:b1:cf:aa:fd:5a:63:19:ce:23:3e:
d7:6e:72:da:e2:01:9f:8b:d6:9a:eb:b7:b9:55:07:
29:f0:c7:f5:89:44:74:df:de:94:4b:ca:11:d9:5c:
1b:7d:18:ed:63:dc:1d:ad:20:21:1c:12:41:02:7e:
6a:9c:83:44:b7:91:f1:f5:c9:ce:1e:16:71:95:ae:
8c:c1:06:b7:c3:e1:f3:04:9a:d1:a7:36:20:16:d5:
82:28:b1:70:2b:e3:11:bb:91:c3:dd:85:53:e2:1a:
80:67:97:d5:e6:8f:71:ef:16:5d:3c:8f:21:79:7a:
23:19:e2:79:e2:24:01:bc:ae:46:da:33:50:09:ae:
7f:10:80:2d:a2:c3:fb:d8:25:50:d8:c3:3b:6c:5c:
3c:5d:7f:94:7d:05:36:c8:db:f1:9b:43:77:ec:a3:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9E:5F:D7:F5:09:E3:E6:4C:41:09:44:A3:DB:37:A1:63:FE:99:54
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:54:10:79:f4:4e:8d:7a:f4:ee:b6:1f:fd:68:20:21:d5:ad:
88:d3:44:45:ff:ad:39:97:78:ff:cd:e8:d4:c0:c5:3e:4a:fa:
39:9b:e4:b3:54:ca:78:37:06:10:65:05:e8:08:57:45:c5:e0:
87:6d:ea:7b:1c:07:a0:46:b0:36:c3:3d:fb:69:3a:26:31:47:
cc:fe:1c:61:15:03:a0:9f:16:c7:d2:a2:e0:e4:32:b4:ce:0e:
b8:22:7b:5c:73:4f:9c:33:0c:a7:ca:6a:47:83:09:1e:60:36:
94:48:14:f7:ef:d2:00:f9:21:e8:56:ef:c7:a6:4f:ac:4f:f8:
c1:d7:24:d3:97:ce:bb:eb:89:1a:6a:c6:84:2c:1d:9d:09:50:
e1:67:b5:60:06:df:d7:1f:bc:2c:9b:c2:7c:85:44:99:53:05:
ea:42:c1:e2:07:df:8e:54:00:63:16:be:0d:0d:d7:29:fc:af:
55:1b:9a:ec:7b:0f:01:63:b6:0c:d1:f2:8f:f5:2e:e7:fe:de:
00:b1:aa:91:c2:81:64:08:c0:32:d3:b1:8b:f3:48:35:df:ca:
d5:12:54:1b:68:e2:11:f9:f9:ea:66:92:c5:31:cc:53:60:b2:
86:6a:2a:76:58:bf:aa:74:78:57:65:f5:f0:24:9e:6e:60:12:
13:c3:50:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:35:08 2025 by rpki-client