Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json)
Hash identifier: 9zEuqquMROnkyyZ38e+/hYjOmjIZuoTyNkHkm4Z70MM=
Subject key identifier: E5:0C:2B:B6:EA:1F:EA:45:50:F8:5F:13:BE:F2:3E:C8:8D:CE:5B:37
Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Certificate serial: 0196C917515DF67FBAE7CDAA2353D6B7F1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
Manifest number: 0B0B
Signing time: Tue 13 May 2025 10:01:10 +0000
Manifest this update: Tue 13 May 2025 10:01:10 +0000
Manifest next update: Wed 14 May 2025 10:01:10 +0000
Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: hA+zHXLjdP4OrmDhTIui0qlAiuUNu0uvnNseOoo4E2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:51:5d:f6:7f:ba:e7:cd:aa:23:53:d6:b7:f1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Validity
Not Before: May 13 10:01:10 2025 GMT
Not After : May 14 10:01:10 2025 GMT
Subject: CN=e50c2bb6ea1fea4550f85f13bef23ec88dce5b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:38:8d:45:9c:58:39:a2:95:11:3c:2e:b0:
7a:1c:bb:4f:28:32:de:45:13:e9:02:85:4b:10:f5:
d6:17:f8:46:10:ea:a7:8b:1d:82:86:48:64:e2:bc:
81:f4:37:c5:0a:fe:b3:b7:a4:23:10:a4:72:b1:e2:
69:d5:9f:d7:67:9d:d0:05:db:08:e7:a4:93:61:5a:
e1:03:89:fd:fb:6e:cd:03:61:25:ec:6d:d0:f7:e8:
56:a9:91:cf:e3:dc:73:34:05:a1:1f:81:a5:67:f9:
c4:36:06:31:e0:d6:2d:97:9c:9a:c8:fc:fe:ee:88:
a0:ae:4d:5f:83:80:30:bb:be:97:53:bb:a7:f3:72:
db:25:89:b7:ea:dc:b9:d9:0c:5c:1b:b5:7a:9e:4d:
79:e1:64:ab:f9:96:8d:cf:ac:19:80:4c:73:cb:04:
67:ec:ba:f8:4b:e2:26:d5:2b:2d:71:a9:54:74:bd:
90:dd:99:6c:6f:37:cf:32:6d:b1:49:f2:67:84:6b:
53:4b:ef:b2:04:34:a6:4b:37:17:81:7a:54:b7:97:
84:2a:84:32:a6:7b:51:ab:52:9c:c7:c0:4f:53:1d:
0c:1e:37:f4:70:51:9f:75:f7:10:e4:37:d2:0f:7d:
98:96:bc:fa:ab:2d:8d:85:5d:98:a2:4e:fb:48:95:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:2B:B6:EA:1F:EA:45:50:F8:5F:13:BE:F2:3E:C8:8D:CE:5B:37
X509v3 Authority Key Identifier:
keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3c:30:8e:c2:4b:35:47:49:ca:b8:bc:63:96:4c:aa:1f:5f:
d0:7e:a2:94:cb:6a:51:ad:5d:f9:52:57:46:3a:78:4a:42:67:
c3:25:be:db:f1:d2:a7:ce:90:af:f8:c5:61:d7:3a:9d:08:b3:
f5:ef:7a:6f:bd:9a:df:dd:04:c5:9e:d8:7e:82:79:a6:92:e8:
32:09:23:e3:37:7c:f9:bf:b7:9b:10:12:0d:8e:09:7a:1d:60:
d9:7a:eb:1e:5a:34:6f:d4:22:b8:42:ba:2a:17:5e:a4:10:71:
79:9f:0c:b9:66:f0:e4:fd:af:54:f6:f5:72:9f:99:69:80:18:
24:9d:e7:06:b4:c9:68:dd:fb:f1:4a:cb:29:37:40:25:e8:92:
84:fe:d3:22:52:dd:d9:24:66:4f:7e:32:97:1a:08:79:eb:eb:
15:85:50:2f:29:0c:57:0e:7e:d1:d1:7d:59:88:55:08:72:1b:
48:b2:1d:62:35:03:37:bb:35:7f:32:56:55:de:4d:08:81:80:
db:52:f6:06:30:03:b9:62:a9:a6:9a:c3:73:79:e8:a1:da:1c:
d3:16:03:b5:84:62:f0:00:b7:c9:f0:dd:8d:ec:5e:96:58:67:
4f:14:22:50:e0:77:a8:9f:4a:c3:ef:dd:e8:50:d4:75:a1:3b:
6d:ff:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:33:36 2025 by rpki-client