Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: qGsSy3WwWuG5kAOoZ4qxFHo0M1akvqijDtlOrveCNOc=
Subject key identifier: A4:64:04:D8:0F:6B:20:E5:8C:DE:FB:C2:FB:0A:54:B1:76:60:3B:4C
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 0196BB92C0626B3E5A7C9D624F19FF9873C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 0611
Signing time: Sat 10 May 2025 19:01:18 +0000
Manifest this update: Sat 10 May 2025 19:01:18 +0000
Manifest next update: Sun 11 May 2025 19:01:18 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: dvjfPrpu/pgego5YeQx1QD6uukv7GbotkGy45YB365c=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:c0:62:6b:3e:5a:7c:9d:62:4f:19:ff:98:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: May 10 19:01:18 2025 GMT
Not After : May 11 19:01:18 2025 GMT
Subject: CN=a46404d80f6b20e58cdefbc2fb0a54b176603b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:c3:40:a6:1d:b0:cf:68:95:d9:82:ea:e1:
f5:8e:8c:42:39:8c:3b:27:e0:f1:76:c8:0d:54:d3:
79:95:a8:21:c5:25:b2:28:50:a2:a9:6d:96:e9:dd:
8a:6c:d0:bf:9b:56:d9:e1:c5:2c:0c:8d:5b:32:98:
90:c1:72:18:41:fc:ff:57:96:4a:59:ed:c8:ab:a9:
ed:e6:79:92:fe:b8:2f:fc:69:4d:c0:01:17:48:25:
3b:8e:64:f4:d9:44:05:57:7d:55:b6:24:8f:72:66:
05:31:18:bb:91:2c:13:ff:6d:a0:ea:18:d2:d5:c3:
c5:70:ce:81:9f:e8:73:1b:a9:21:7a:ee:09:67:f0:
72:d8:c6:f1:b4:e0:fd:14:62:3f:d0:8c:7c:6a:a4:
45:6c:f3:8e:bd:bb:5e:dc:10:fb:ca:be:a6:26:40:
fa:6b:89:ef:60:8a:f4:6d:99:5f:38:80:99:a9:3e:
b6:ba:b6:0d:da:df:fb:f4:cc:8b:93:5b:42:d2:a4:
ba:f6:7f:09:cc:c8:e9:38:0c:3e:76:4f:fe:93:b8:
e5:b2:f5:9a:bd:fd:b3:0c:23:d8:45:18:a4:3c:66:
6a:f3:56:65:3e:d7:af:bb:2a:fe:bf:c7:06:a5:87:
ac:97:e0:19:2e:b5:ce:88:d6:b2:9c:c7:e4:dd:f6:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:64:04:D8:0F:6B:20:E5:8C:DE:FB:C2:FB:0A:54:B1:76:60:3B:4C
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:59:c2:73:14:cb:31:7d:41:04:a7:0e:dd:31:bb:bd:b0:0e:
49:14:24:84:18:f9:ef:19:cb:4a:a7:dc:b9:a0:19:08:82:c8:
3a:0a:bd:ef:1c:27:76:60:76:b4:4e:76:72:c2:aa:e2:d3:81:
c2:ea:45:45:fe:77:80:70:78:ed:62:23:e7:79:b8:3b:25:b1:
fb:20:d5:62:0a:22:70:e5:9e:9d:36:f8:da:9f:02:77:0b:00:
37:5d:a9:9d:d7:d1:2f:60:28:17:1f:a1:8f:59:80:1c:a7:6b:
f4:56:b2:19:94:91:b2:ae:fb:c7:32:a0:93:cf:96:c8:2c:fe:
22:4e:38:26:d9:60:83:73:fb:20:7c:ce:53:51:85:97:5a:60:
51:cf:42:a2:cf:59:a7:12:38:49:e8:56:5f:8e:53:48:ef:d2:
7e:a5:79:8c:38:45:20:0c:a8:d8:17:90:28:6a:e5:3e:c3:31:
e3:7e:c8:cb:32:1b:46:24:ca:2f:3f:07:3e:53:7e:8b:85:0e:
3b:a2:d3:ce:d5:00:b1:4e:7e:8d:66:89:8a:d3:3f:86:83:7c:
76:9e:38:3d:e9:27:f6:1d:df:2b:26:f9:1a:fa:b7:87:4a:7e:
e3:72:9b:0a:07:56:63:8a:43:22:92:a6:68:35:1b:2f:87:36:
d8:a6:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:44:37 2025 by rpki-client