Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: y5FNf2wBq6Ykm7nsNdsl63wQLTkqsZxCAZwBgOGmRxk=
Subject key identifier: FA:EE:33:01:AE:63:C5:15:05:F4:88:F4:D5:FB:AE:83:04:BD:B4:8F
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 0196A164891A73B997CF18FF63DD80DE10A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 17:00:42 +0000
Manifest this update: Mon 05 May 2025 17:00:42 +0000
Manifest next update: Tue 06 May 2025 17:00:42 +0000
Files and hashes: 1: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: QlcjRIUo46zDL640Y9lXSJVRZBSyDQ12XwcUkT43z7Y=)
2: JAj8K9FK0yJ4abLe6Fga6ihptw4.roa (hash: EFhtWb0ps1NNZCAlSUS+dLCZTzQuPXq8Ov+/YyEbgx0=)
3: _IKA2Fs9sk_HXgYRoE_hIh9ff0o.roa (hash: 7fFt0WExoH93JNOsEPipdfERGEC89/UjUDUL8wmgczo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:89:1a:73:b9:97:cf:18:ff:63:dd:80:de:10:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: May 5 17:00:42 2025 GMT
Not After : May 6 17:00:42 2025 GMT
Subject: CN=faee3301ae63c51505f488f4d5fbae8304bdb48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:a5:66:c3:94:ac:89:6b:27:91:a7:30:0c:
6d:73:d8:bc:28:12:53:88:10:6a:48:d1:43:d3:ad:
af:54:8a:f2:b3:b1:44:86:05:ea:af:d1:26:07:31:
ce:ca:f5:05:d8:b4:77:ee:b9:a8:53:9f:4e:12:4f:
41:05:9a:03:c0:d7:1d:35:24:34:51:8d:0a:5e:4e:
29:d5:16:90:2d:58:15:d1:da:1e:de:27:f8:71:ea:
5c:4b:ce:a6:3f:f9:8e:b6:59:03:8f:ae:8d:50:bb:
7f:5b:63:c5:65:83:b0:b4:57:29:eb:28:fc:4e:7b:
30:b8:d0:bc:9e:f9:86:c1:55:aa:58:bc:52:0b:e9:
d2:9e:a8:a9:98:39:89:7e:91:d9:41:a1:18:16:6a:
ae:80:a1:77:63:5c:21:7a:b8:fc:bc:7c:bd:90:30:
a6:eb:25:bb:03:32:1a:f9:89:04:73:e0:7e:54:a7:
8c:b7:95:50:d5:11:00:26:1d:f8:a2:2c:b2:fa:cd:
34:2a:8d:43:fb:96:76:d7:4d:ac:0f:af:f9:17:36:
22:41:7f:f5:16:7a:ca:3c:51:35:6d:fb:c4:1d:96:
ca:b2:f9:cf:3a:e1:63:e2:3c:9c:52:32:74:56:52:
bf:01:d9:56:80:c9:d8:65:85:15:03:83:18:dc:3e:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EE:33:01:AE:63:C5:15:05:F4:88:F4:D5:FB:AE:83:04:BD:B4:8F
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:25:85:b1:be:ee:0d:be:cb:d4:76:14:5d:50:4b:1a:47:08:
c0:82:5c:0a:fc:04:d4:bf:7a:96:ba:91:95:9f:d8:ce:55:04:
20:0f:6b:4b:6a:06:eb:a3:fd:6e:61:9f:c3:e9:95:80:18:dd:
4c:b7:bf:9c:26:33:5b:f1:49:0e:db:59:af:90:22:be:4c:45:
e5:fb:19:ac:32:dc:4c:82:6c:11:d1:27:65:ef:01:7a:7a:2f:
a6:ad:2a:7c:5d:a7:39:03:08:fd:1f:66:76:9e:26:9f:d7:2e:
dc:1b:56:17:ee:81:32:48:fd:18:1a:05:0f:2d:a9:f8:ee:b0:
b2:5e:3a:5f:7a:aa:bd:44:7f:ff:4f:41:5f:22:f2:82:21:c2:
5d:15:2e:5f:cf:ef:87:f8:f1:43:7a:37:4c:83:99:26:55:80:
07:b8:90:fe:e0:cd:fb:71:fd:20:26:b3:6d:f1:46:d9:aa:96:
c0:60:f8:90:19:c0:a5:e7:6b:73:f3:71:ee:7d:c1:de:e9:34:
7d:1e:76:3a:36:ea:5f:77:58:5c:f6:06:7d:22:3d:0b:02:86:
ed:eb:1d:82:aa:4c:03:5c:df:3c:11:df:71:cc:e8:20:b9:13:
7c:e7:1a:cd:ef:8b:d7:9a:02:6a:93:38:fd:5a:3a:42:1e:e9:
ad:5d:d8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:11:12 2025 by rpki-client