Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: UQ2glIhSwva5zogHW2uaam1sCGhnaQW2SWgOSjmxPL0=
Subject key identifier: 8B:23:40:B9:1D:0D:9F:E7:AF:BB:B1:F6:E0:61:3C:02:E2:43:56:62
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 01967B69E7545A55F67472E620C6CFDF3DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 0E7E
Signing time: Mon 28 Apr 2025 08:01:00 +0000
Manifest this update: Mon 28 Apr 2025 08:01:00 +0000
Manifest next update: Tue 29 Apr 2025 08:01:00 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: lCAYJSMv9PCz7rniZVpPGYjSIKnUhOW9nEIMYxkKqYY=)
2: LjvscEK241_TnXIZYmD9gfa2eq0.roa (hash: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:e7:54:5a:55:f6:74:72:e6:20:c6:cf:df:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Apr 28 08:01:00 2025 GMT
Not After : Apr 29 08:01:00 2025 GMT
Subject: CN=8b2340b91d0d9fe7afbbb1f6e0613c02e2435662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:10:15:95:03:5b:6e:81:91:5e:47:e7:ba:79:
43:66:fd:eb:0a:ad:00:35:6e:99:0f:c5:49:1f:37:
44:99:ce:cc:1a:41:1e:21:aa:38:5d:5e:49:49:07:
91:ac:f3:de:bf:67:ec:31:21:87:18:66:eb:ae:92:
58:bc:3e:91:6d:ab:93:f3:50:37:3b:a6:fb:dd:eb:
9e:bb:b1:db:e2:71:61:2c:94:76:09:72:86:ab:02:
ff:06:d5:89:4f:1b:a3:16:03:70:42:5e:b1:47:5f:
02:59:bf:01:73:c1:3b:28:54:57:1b:ff:07:84:ea:
48:27:e1:03:34:28:8a:72:7e:4d:31:a9:48:2d:c5:
e2:87:b0:2f:1f:c1:8a:ba:e4:a7:d1:c2:ae:e1:0d:
34:63:10:ed:a4:54:e6:1f:84:c1:5c:d5:2f:eb:4b:
6f:cb:db:0d:e3:5a:aa:fc:0b:ef:d3:9c:a2:32:7f:
07:89:96:f5:0c:b9:f5:c4:8e:f1:81:32:26:f0:81:
fc:a4:7a:a8:cb:1a:6f:5b:59:56:94:e5:ae:98:4d:
65:c0:3d:b1:0f:c1:44:78:71:fb:7c:b9:a0:a5:17:
05:5b:79:79:92:98:7f:8a:f5:9e:04:c4:bf:42:d9:
d7:29:9b:be:ea:4d:42:b6:d2:d7:30:f6:3c:aa:69:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:40:B9:1D:0D:9F:E7:AF:BB:B1:F6:E0:61:3C:02:E2:43:56:62
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ce:eb:f1:c1:da:38:e3:c4:f9:99:4a:25:e8:50:50:13:7f:
1a:3b:f6:1d:91:16:eb:12:84:cc:ed:d2:a3:a3:41:76:17:14:
60:f4:59:70:97:ef:d4:9c:ac:cc:6a:3c:19:91:05:94:9d:9c:
b2:6b:93:66:ea:63:c4:3e:d4:4f:7d:15:84:97:34:ef:6e:0f:
59:c7:57:4f:e3:e7:6e:a2:2f:3c:0c:62:b8:c2:97:52:22:02:
a4:59:bc:8f:c2:d8:16:a1:9d:c5:79:c3:44:96:f7:bd:fb:f8:
51:96:02:65:4c:0c:be:1b:61:4c:49:0f:bf:d5:1d:cf:c8:d8:
f3:96:cd:2b:be:5b:0f:db:40:54:b9:68:7e:fa:e2:c1:51:73:
f1:fb:ec:9f:69:27:74:b6:77:dc:7a:1c:45:0a:cf:6a:1d:30:
20:ea:c6:e2:11:89:ce:f0:ea:71:d1:fd:68:43:2c:56:f7:70:
c5:b9:fb:7c:57:51:c0:d0:48:ba:1b:08:35:50:33:0d:80:c0:
ce:1e:9e:42:4a:01:08:0c:14:82:6f:5c:c8:08:b6:e5:26:f9:
82:ba:93:bf:ad:45:c6:53:69:4e:d3:4b:96:31:2b:74:63:6c:
8c:1a:46:77:1a:a1:4d:ba:82:cf:e6:4d:d6:4c:4b:dc:0c:c7:
28:d3:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:41:33 2025 by rpki-client