Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: WfihbK+lYob4nN02voRllyeCqFfuiAt7K8LjgaA1oPc=
Subject key identifier: 6F:11:4C:90:88:DB:C6:A4:43:0A:3C:8D:3D:62:9E:DC:16:FD:1B:5A
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 0196C34B9CDBDCA067E149A7AE6505140FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0673
Signing time: Mon 12 May 2025 07:00:34 +0000
Manifest this update: Mon 12 May 2025 07:00:34 +0000
Manifest next update: Tue 13 May 2025 07:00:34 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: 1qwO8fWjovvZAjSwYzcoa0Ee2Y8HzaJPA524gsYPiRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:9c:db:dc:a0:67:e1:49:a7:ae:65:05:14:0f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: May 12 07:00:34 2025 GMT
Not After : May 13 07:00:34 2025 GMT
Subject: CN=6f114c9088dbc6a4430a3c8d3d629edc16fd1b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:85:16:70:63:62:d8:bd:2e:c0:5d:66:3b:
33:12:02:8a:a1:22:ae:d9:1d:08:aa:33:12:36:bc:
a2:c6:23:0d:5d:f3:6a:1b:05:2c:50:79:a3:00:2e:
e8:a5:6d:bc:42:c0:37:b4:c5:fe:38:7b:36:c5:dd:
ee:26:d3:33:5d:37:77:9d:9c:be:88:42:fd:6e:28:
b4:47:56:af:0f:a2:1a:05:b9:e8:10:fb:f4:9e:f6:
fd:79:1f:4a:a1:78:28:a1:c2:86:31:e0:4f:d2:fb:
e0:cd:d9:ad:b8:be:93:34:70:d3:80:34:3a:18:20:
6a:96:2b:6a:5b:70:73:40:b9:08:cd:e8:e3:20:a7:
08:3b:86:ae:f9:a8:08:9f:f3:ab:49:40:6d:a6:b4:
0d:ca:17:28:86:33:bd:4d:3f:04:f0:de:60:25:67:
e3:56:73:32:da:bb:d9:6f:9f:f3:05:29:33:b7:23:
99:2e:62:09:6e:70:2f:49:31:c7:f4:30:a0:99:44:
06:bd:a2:f7:68:53:f0:a5:f2:d0:08:c9:ff:85:1e:
de:a0:f2:a2:29:2f:11:ea:a2:ec:fc:d8:a1:59:94:
01:fb:7a:f7:03:d3:8d:30:22:30:98:2f:ab:9d:a9:
81:75:dc:79:0f:c6:14:af:53:0f:30:20:5e:50:40:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:11:4C:90:88:DB:C6:A4:43:0A:3C:8D:3D:62:9E:DC:16:FD:1B:5A
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:42:97:5d:ec:6e:bf:5e:55:99:1c:ee:87:1f:58:e9:c0:
98:48:e4:06:e2:72:16:5c:90:b2:3e:c5:15:02:79:9b:60:71:
3b:39:26:30:bb:45:b0:e3:61:fe:33:99:70:69:30:42:37:2d:
03:95:47:71:b8:bc:de:34:f3:f5:df:2e:e1:ba:04:59:75:55:
e9:b8:e5:2d:85:30:93:f7:e8:26:f1:2e:4f:d4:63:af:f6:50:
d5:6f:54:9b:d0:1b:c5:05:0b:5a:3e:72:1b:a0:ec:84:75:b1:
59:5e:97:ce:3c:29:eb:8f:eb:27:2c:77:a9:6a:4f:9b:f1:43:
58:0c:c4:a4:a5:7f:e4:d0:df:b3:e9:55:09:9a:db:e4:be:ab:
a2:ec:a7:db:91:f2:dc:ee:f0:fd:d5:64:35:67:3f:65:3d:57:
c8:42:f8:6d:57:6b:54:fc:35:1e:2e:ed:4a:74:8e:c9:fb:c8:
16:25:b9:df:99:fa:35:48:74:95:73:d4:95:91:f3:8d:45:50:
08:96:e9:1d:a7:70:d1:9a:19:4e:ea:ad:2c:9a:48:32:6c:18:
74:45:94:34:86:b3:f2:5b:d4:16:bf:ba:94:4d:c5:f7:03:ec:
cd:80:95:20:a3:e4:87:82:a5:2d:f8:09:54:0a:d9:1d:d1:0e:
63:95:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:11:06 2025 by rpki-client