Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: 8j8+JGFE1XIaK/cLr2C43l4QUebEi0k2n7HR7wWu8Sk=
Subject key identifier: FA:A2:EC:97:95:01:9E:CA:75:2D:77:58:9D:46:7A:52:A9:86:BC:DA
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 0196A0BF5983672E737B276FDFEE0DA9654E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 14:00:16 +0000
Manifest this update: Mon 05 May 2025 14:00:16 +0000
Manifest next update: Tue 06 May 2025 14:00:16 +0000
Files and hashes: 1: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: v4GWkomy7aDgq1nPkgF8U0dNxTWczhdzk8cw/g+jSU0=)
2: S8E-qbm1BXEqIdetmmA1nZNgj7U.roa (hash: 3uwA4cyu+agvPaXd967UOebPOsNVk53AsWpnmfz8XsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:59:83:67:2e:73:7b:27:6f:df:ee:0d:a9:65:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: May 5 14:00:16 2025 GMT
Not After : May 6 14:00:16 2025 GMT
Subject: CN=faa2ec9795019eca752d77589d467a52a986bcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:26:81:28:4b:fa:37:7a:8a:d3:c9:10:05:
21:1a:1e:71:c7:fe:af:ff:8c:08:fd:38:4b:b8:14:
dc:95:17:95:ba:fb:bd:c9:50:65:7b:48:ff:ec:26:
91:e8:40:76:7b:ad:a8:45:de:e0:c8:4e:8d:03:65:
66:f6:dd:91:20:d3:bb:8c:12:61:24:ef:cb:23:fc:
87:85:1d:9c:41:ca:d6:c1:ff:32:b3:ec:44:ab:d0:
c2:45:fa:ba:8f:17:fe:1e:10:65:ff:60:e3:05:a5:
fd:04:11:e8:53:81:1b:6b:e3:3b:67:f2:94:e5:d0:
25:fc:b8:af:33:fc:66:e7:82:89:d4:42:4f:af:cf:
6d:35:6d:cb:b7:4e:39:5d:fc:66:fb:2a:e3:82:ba:
c4:a1:f3:ad:3e:62:e2:9a:76:43:36:0e:cf:7f:cf:
bf:e3:c4:e6:96:0c:7a:a9:44:4c:9b:f9:39:51:6e:
6b:12:7a:82:f4:d6:5a:16:29:9f:b2:26:b1:2e:3c:
43:92:40:a4:d0:32:c9:b7:ee:fc:cf:d3:bf:39:bc:
f4:e1:48:57:fc:14:fd:7e:18:a7:05:80:3a:8d:0c:
b2:07:c6:7d:c5:97:e5:cb:a9:0c:d1:c0:2c:67:a0:
7d:ee:ad:8c:02:0a:0e:13:9b:b1:31:4a:0c:7d:04:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A2:EC:97:95:01:9E:CA:75:2D:77:58:9D:46:7A:52:A9:86:BC:DA
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e1:4e:8d:af:9f:05:a9:b6:33:de:bc:28:cd:df:76:4e:72:
60:41:eb:6c:5a:73:6a:60:e8:cb:20:df:f0:4d:54:1c:bc:95:
9f:15:a1:63:48:0e:ad:94:61:f8:29:a8:4f:cf:10:cd:1d:e2:
1f:d6:28:ce:b0:ed:3e:ec:3a:4c:fb:d7:76:8e:69:cb:10:6d:
1c:c1:f9:7f:d7:e2:7a:86:66:c7:ae:ef:23:54:c2:7b:70:c4:
8a:9f:db:31:c6:af:6e:a9:c9:2c:37:68:81:eb:c0:dd:77:9e:
29:d0:83:1b:21:3b:0c:22:9a:e6:e8:b3:e4:1e:7b:45:48:4d:
c5:45:83:bd:34:e6:af:98:1c:35:c8:e0:62:09:98:b5:dd:8b:
27:c8:74:c3:a4:1a:68:d4:54:64:7a:ae:06:44:b7:d3:4c:5f:
76:ab:a9:8d:29:71:85:6a:9e:c1:6f:b9:b0:55:77:02:1f:21:
ea:d7:14:8d:98:8b:28:7d:7f:9a:51:6b:28:1c:7d:ca:f1:f4:
01:cd:00:f0:3b:8c:81:22:8e:cd:3f:6d:c8:40:2b:e7:dd:5e:
7b:a0:b6:82:0e:d9:e4:94:54:b9:97:98:0b:52:ee:de:fa:ee:
3d:d5:89:b4:f9:79:43:5c:cc:df:a1:01:8a:72:21:5e:36:fd:
6a:60:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:01:22 2025 by rpki-client