Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
File: HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft (raw, json)
Hash identifier: 60xDIZE4GnsN+v99Vui4rSZ4urXfCt2/3UpE4Lh8/T0=
Subject key identifier: 75:20:6C:F4:84:96:68:4B:03:56:2B:86:1D:4C:D0:95:FC:CB:EF:CC
Authority key identifier: 1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
Certificate issuer: /CN=1c1618e04372d9b27f417d229f82614027bc3c60
Certificate serial: 0196B7B5850A78A0E410C32E7A677527970E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
Manifest number: 088D
Signing time: Sat 10 May 2025 01:00:48 +0000
Manifest this update: Sat 10 May 2025 01:00:48 +0000
Manifest next update: Sun 11 May 2025 01:00:48 +0000
Files and hashes: 1: HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl (hash: Qz/bzQMVyK7Xzz+5U/BLGJLyGiFl0qAWJmKVIZIBaeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:85:0a:78:a0:e4:10:c3:2e:7a:67:75:27:97:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1618e04372d9b27f417d229f82614027bc3c60
Validity
Not Before: May 10 01:00:48 2025 GMT
Not After : May 11 01:00:48 2025 GMT
Subject: CN=75206cf48496684b03562b861d4cd095fccbefcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:1d:c8:91:96:a4:71:7a:8f:1e:47:f4:6a:
11:77:b3:2a:67:e6:ca:b8:11:c4:b0:cd:cb:06:92:
70:3a:2f:08:39:a9:96:21:bf:eb:cd:36:6a:f5:d0:
eb:62:57:b5:93:91:4e:ec:2c:c6:d3:44:fc:91:e9:
20:89:4f:64:50:8e:0c:4c:85:b1:fd:5a:e2:68:e0:
a8:47:0f:53:ff:0e:47:45:6a:67:48:d9:29:6b:4a:
07:ce:d9:9f:fe:e4:58:c3:f0:0a:a0:c3:d0:8d:77:
cc:4b:7d:96:5b:f5:64:90:2c:56:01:4a:d2:ac:d1:
3d:a2:ee:3d:8d:97:62:4c:83:a3:8e:b5:74:82:af:
cc:76:26:52:d2:e3:1c:26:da:33:ac:0d:2b:2d:c3:
92:8e:c3:98:8e:a0:67:3b:1b:1b:37:0a:3f:ab:15:
ad:ce:80:36:33:d8:4b:8e:f5:23:23:57:4b:28:ff:
c4:27:96:64:5e:c8:a8:e4:63:5c:8f:35:bc:2a:1d:
b7:0a:b8:e2:a2:3a:24:0d:89:e7:22:74:20:89:06:
81:0d:a6:12:61:99:9a:26:c9:87:d8:1e:3f:6f:a9:
54:08:e7:e8:05:80:50:94:ca:11:a0:7d:63:62:1c:
82:c3:de:87:d0:9e:f4:a9:a7:40:1f:09:37:d8:c2:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:20:6C:F4:84:96:68:4B:03:56:2B:86:1D:4C:D0:95:FC:CB:EF:CC
X509v3 Authority Key Identifier:
keyid:1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:69:9c:53:ee:76:56:51:6b:d8:74:0d:6b:37:90:e5:24:
6d:7b:e3:21:60:15:f0:5a:5c:50:d2:b6:0d:73:60:bd:eb:13:
ae:38:c6:78:30:1f:d9:fa:f7:ea:90:68:fc:25:9c:2e:c4:97:
c0:2c:64:63:c8:24:12:b0:4d:57:ca:08:13:5d:96:ea:58:5c:
77:58:70:13:45:c1:ce:bd:09:bb:80:32:6f:c5:e4:0b:e6:67:
0f:55:33:92:36:51:3c:c0:90:aa:c2:8e:a2:4a:25:77:93:ff:
fd:91:2a:c7:ea:c2:f6:cd:85:a3:ba:7d:50:04:14:2e:1f:6e:
19:1e:fc:35:4d:42:80:c9:33:61:5d:e7:4c:61:13:2c:9f:cc:
20:9b:6d:18:8a:ae:be:44:c4:10:4a:c7:39:a3:cf:2b:70:95:
7e:a7:8a:3d:21:38:a7:bf:cb:7d:d0:7d:2e:26:31:7d:f2:fd:
47:a0:ba:53:2c:fe:6f:f1:a2:37:6a:2f:ec:d5:bd:8b:07:9c:
01:07:73:06:cd:47:a8:52:8a:8b:b5:e1:37:8f:55:ce:5d:0f:
30:9a:62:34:16:0e:62:2c:17:50:3e:05:bb:40:8a:c9:3a:da:
db:cf:93:8e:a4:79:32:50:72:2d:bf:f5:91:72:80:11:9a:8b:
d0:e2:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:52:01 2025 by rpki-client