Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
File: hRwTZejd_OV1mPvo3n6oesYD4iw.mft (raw, json)
Hash identifier: 1XBWpDV2MiPZ4ghZNfxRUMFJ6KFE/LQBRRIvJxFPqPU=
Subject key identifier: 7A:6A:A8:BA:DA:73:83:2C:1D:9B:14:D6:9E:CB:43:B4:2E:93:E2:22
Authority key identifier: 85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
Certificate issuer: /CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Certificate serial: 0196C53A4E74DC5C5401E11E4317FBED9550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
Manifest number: 0788
Signing time: Mon 12 May 2025 16:00:54 +0000
Manifest this update: Mon 12 May 2025 16:00:54 +0000
Manifest next update: Tue 13 May 2025 16:00:54 +0000
Files and hashes: 1: hRwTZejd_OV1mPvo3n6oesYD4iw.crl (hash: o9onuDxsGwFMiVDkIUrh4KtiPZu/vOuYcV8Ygg3hp9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:4e:74:dc:5c:54:01:e1:1e:43:17:fb:ed:95:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Validity
Not Before: May 12 16:00:54 2025 GMT
Not After : May 13 16:00:54 2025 GMT
Subject: CN=7a6aa8bada73832c1d9b14d69ecb43b42e93e222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:f7:89:9e:2e:71:c3:77:1e:02:c5:cd:e9:
3a:10:a7:e1:50:2c:8a:fa:1b:a3:1a:8e:e8:e5:df:
87:26:2a:e1:52:e2:b7:70:e0:b0:24:e4:66:d0:ae:
06:e0:d4:7d:5f:b2:d7:8d:e6:5f:66:b4:04:c4:12:
1e:8a:62:4d:24:eb:d0:ba:b8:54:2d:d1:46:44:47:
5d:0d:b7:d6:46:a9:28:6e:b1:e0:d9:05:9b:41:e8:
ba:38:48:a3:12:d0:1f:bb:75:29:82:1c:0a:1f:9f:
1f:36:ab:4b:0b:90:ac:7d:1e:6d:14:41:3b:07:d4:
07:e5:67:dd:41:24:e5:28:32:dd:bd:a8:ea:e0:86:
c8:e1:58:4f:01:9b:fc:7e:5f:cc:8c:52:40:f5:4a:
6c:b0:24:47:57:4e:60:c2:05:49:46:cc:79:14:23:
d0:68:ea:ed:09:7f:09:63:3f:e7:f3:6e:d7:06:fd:
1f:64:ad:54:2a:92:8a:15:57:8f:3a:8f:e8:87:f3:
31:29:ae:53:cc:f7:28:f1:d8:ac:14:2f:b9:3a:23:
b2:c7:1a:53:c8:cc:94:26:51:26:cd:df:3c:e2:7a:
e8:f6:60:aa:af:a7:1c:c0:ad:e4:58:9b:4e:a9:b8:
c7:59:37:c2:d3:73:82:56:d0:ed:a4:c4:4c:21:94:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:A8:BA:DA:73:83:2C:1D:9B:14:D6:9E:CB:43:B4:2E:93:E2:22
X509v3 Authority Key Identifier:
keyid:85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6c:7c:27:9a:47:1d:a8:f1:55:ac:7a:71:bd:45:b1:0f:87:
9e:ce:91:6e:3b:fc:16:84:0e:68:1b:f6:6b:c4:0e:45:cd:b1:
58:30:45:6a:41:da:26:c3:96:07:38:57:9c:0e:a0:0c:c2:a7:
88:05:5d:34:81:d9:8f:8a:35:25:b6:6e:5b:ec:ec:5b:a5:a5:
26:76:66:7b:ec:f1:66:6d:7a:5b:5b:02:44:cc:42:ac:54:ba:
c2:5f:65:8c:e5:ca:a8:c7:bf:b0:17:0f:46:23:84:d2:de:ee:
a0:d5:a7:c0:0a:09:ce:cc:db:ac:eb:a3:ac:02:8c:11:4e:e3:
10:87:36:5c:74:61:20:13:c7:b2:73:c9:ac:92:b4:3d:2f:da:
b8:ca:9a:5c:5c:b3:82:97:92:c5:75:f7:5d:c4:e4:41:77:01:
95:60:d4:83:18:97:dd:c9:eb:0a:8e:ab:e1:f5:49:93:d2:0c:
a1:8a:90:02:ea:ef:36:2f:b8:cc:c8:69:05:4b:f7:b4:70:f5:
69:d3:53:2f:2a:78:30:b1:c5:42:a7:6c:c3:30:d6:72:2f:e9:
7c:9c:4b:2a:82:a7:5e:b8:3a:2a:28:fa:5c:ff:fc:dd:cc:af:
38:c9:31:32:78:39:d6:c7:83:ca:05:18:d8:f6:e2:96:31:e3:
f1:36:3d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:17:36 2025 by rpki-client