Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: gm936fHzBM0uuKbrpY7hwhviPucYgpEnHJlhn6WcYSg=
Subject key identifier: 46:B9:5B:1A:CF:49:A2:43:86:B6:3B:C6:1E:67:FC:EA:A7:FC:30:E7
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 0196A01A8E0873E176AE044631523AB96402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 12B5
Signing time: Mon 05 May 2025 11:00:16 +0000
Manifest this update: Mon 05 May 2025 11:00:16 +0000
Manifest next update: Tue 06 May 2025 11:00:16 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: H42ig+zBgpRhTmQyVWMdIua2HutKXJHdk4gdKHiz5BY=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:8e:08:73:e1:76:ae:04:46:31:52:3a:b9:64:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: May 5 11:00:16 2025 GMT
Not After : May 6 11:00:16 2025 GMT
Subject: CN=46b95b1acf49a24386b63bc61e67fceaa7fc30e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:30:62:04:cf:e0:f8:06:82:b3:ad:1a:5b:
21:85:01:10:c8:6d:3c:27:98:29:6b:4c:dd:1a:a1:
f0:ad:a8:a1:a9:13:53:b9:97:63:d0:47:79:f6:89:
e2:c4:26:8b:73:43:e2:6e:f1:7d:72:b0:49:48:75:
32:6c:e8:f2:1f:37:38:d3:10:c1:65:3d:2b:0f:30:
be:a2:0e:03:6d:d1:fd:40:ee:f0:6f:40:cc:ae:b0:
e2:91:ae:36:1a:94:96:51:c0:8e:90:68:02:de:5d:
7e:30:fe:f5:95:32:63:59:ff:c9:72:0c:8a:e1:cd:
fe:6a:d2:82:7e:f0:31:43:be:18:28:1d:e4:e0:eb:
14:af:e9:d7:08:4d:c0:39:f9:65:78:41:ac:cc:8b:
08:98:65:aa:d0:f1:a4:8a:3e:22:f0:e7:b8:96:d9:
1a:fc:3f:74:58:95:2d:5b:a0:ce:52:ba:89:f0:f8:
4a:68:8a:8b:41:4a:bf:99:57:01:ba:5c:dc:ae:3a:
e2:1a:52:dc:97:8e:93:2b:dc:a6:cc:a7:68:9d:3e:
95:b5:78:e6:12:01:8b:25:65:df:22:c4:26:a3:93:
ef:cd:71:a2:dd:49:fb:b2:df:5b:77:0e:d2:fb:8d:
16:eb:6c:5a:a7:32:66:22:e6:5c:a4:67:b0:af:c7:
7a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B9:5B:1A:CF:49:A2:43:86:B6:3B:C6:1E:67:FC:EA:A7:FC:30:E7
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:34:20:fd:cb:b2:76:06:fc:87:fb:10:3f:7b:66:52:92:23:
5f:c8:f1:f3:80:3c:f9:ee:0c:42:27:ec:f3:cb:66:2f:e7:9d:
cb:e2:64:69:f5:5f:c1:d0:4a:eb:a9:53:12:84:82:f6:97:6f:
8e:b9:9d:bc:09:ec:bb:c8:c1:1d:df:fb:77:2c:08:d4:05:0f:
85:1c:81:19:a8:ac:d7:c7:82:09:b4:46:7b:0c:72:df:9d:90:
24:01:d5:e2:30:89:f6:a8:e1:da:0c:a7:5d:6c:69:6c:5d:34:
85:25:13:be:50:7b:73:82:32:36:de:84:f0:5d:d5:6d:52:fd:
f7:13:48:6a:a0:e5:65:ec:f2:c5:93:f5:09:a5:12:9b:08:83:
75:8f:63:c2:43:0a:0d:b9:7a:11:03:a8:fc:94:e6:96:3d:93:
bd:f7:81:88:25:0e:fd:6d:18:5b:a2:b3:7d:f2:b3:d9:5b:47:
f1:f6:23:db:22:f2:4b:7d:99:38:49:42:99:ac:5a:c8:14:65:
aa:47:55:b3:13:af:10:7c:d2:cd:39:3b:de:71:1a:ac:24:95:
70:04:b4:7c:07:84:9e:2b:4c:b6:30:68:00:99:6e:04:c9:12:
dd:6b:a7:31:88:f2:3b:ad:c3:c7:ea:d2:57:0e:92:ab:54:ec:
00:7e:cb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:16:07 2025 by rpki-client