Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: banz1Y38DfbU6aLwjv/fnMyurijnVfUC5TTs6rw+SqQ=
Subject key identifier: 5E:68:CA:71:28:2A:16:50:43:3F:E2:66:67:C2:76:C6:2D:68:50:75
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 0196ABB0E1650784FBE97C4B65E517F1F003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 1394
Signing time: Wed 07 May 2025 17:00:18 +0000
Manifest this update: Wed 07 May 2025 17:00:18 +0000
Manifest next update: Thu 08 May 2025 17:00:18 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: Dy/0WWkGhHH94oNSMLRANla+u6ijOkqHmPKDOOZoIgk=)
2: tgyZkzPX7bihftRh5146EqjAV6A.roa (hash: L1eC4dA0U4fTfxsmRjGD9jUtXUFmiIJqlEhkJQO47Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b0:e1:65:07:84:fb:e9:7c:4b:65:e5:17:f1:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: May 7 17:00:18 2025 GMT
Not After : May 8 17:00:18 2025 GMT
Subject: CN=5e68ca71282a1650433fe26667c276c62d685075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ae:4b:23:1d:35:a9:7f:d1:70:5f:c8:cd:a4:
8a:e5:52:31:2f:78:32:27:f3:69:10:18:aa:c1:52:
bc:63:b1:d3:3e:9e:ce:e7:91:59:44:5a:0d:58:93:
ff:38:7c:a6:db:75:29:b8:4d:3f:d5:3b:d8:b2:16:
8f:7b:69:a6:0a:57:6c:80:06:f9:a4:03:92:9e:a2:
a7:2b:0f:5d:5a:a3:0d:c7:4f:f0:28:6f:7b:d8:71:
97:f4:8e:2e:d3:eb:cf:8b:79:11:15:0f:e0:5a:5e:
61:7c:5a:44:89:fe:55:28:d1:b4:0e:29:11:b3:a3:
62:1c:14:a4:9b:68:fb:09:59:a5:8b:43:6b:e3:f4:
4d:35:ce:c4:aa:6e:25:2b:df:c4:74:1e:31:7c:52:
ee:ca:db:3b:5b:d6:7f:bf:3b:90:e9:d3:0d:1d:e7:
32:b3:df:66:80:b6:90:a7:12:71:f5:f8:b8:3c:d6:
cb:29:a8:76:3c:b4:4d:eb:b1:a5:fc:8f:e9:06:54:
0e:3b:0c:1d:49:7a:2e:9b:f0:ca:de:a1:f6:bc:d7:
c1:2f:8c:ba:14:b1:d9:9d:b1:d5:dc:dd:39:ca:0b:
37:8c:3b:8f:84:80:17:fa:6b:f3:5b:42:97:43:9c:
be:da:b7:7b:c1:4e:77:68:58:46:3e:44:ca:de:56:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:CA:71:28:2A:16:50:43:3F:E2:66:67:C2:76:C6:2D:68:50:75
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ae:d8:8a:7c:db:1f:d0:0c:c8:06:d3:01:25:9f:80:b7:d8:
68:ff:59:60:e4:42:57:d5:a0:9f:f9:d2:14:7a:54:cf:83:62:
83:05:0c:36:fd:e3:5d:33:d0:3d:19:c7:19:e8:4f:40:9e:cc:
9e:ac:40:e1:69:0d:d1:48:20:2a:b3:07:f0:93:8a:5a:89:09:
15:0e:00:69:12:10:1b:40:ba:25:71:7b:53:d6:c4:65:96:a1:
ec:6a:3c:cf:d6:ff:c0:cd:78:c5:6f:68:6a:e0:af:30:8a:31:
3c:08:c9:75:60:65:c2:e0:37:61:86:38:7c:88:21:90:bb:c3:
89:fa:ee:06:dc:a5:d4:70:b7:6f:fe:fb:3d:f2:e7:41:20:f9:
e3:1f:6a:8c:1c:da:c4:ee:ba:61:7e:4c:07:40:0f:ec:ba:e5:
10:48:3c:15:ae:b7:85:15:73:bf:05:dd:3f:af:fa:62:76:a0:
4d:70:10:ab:4c:26:2a:71:2e:bc:68:3f:8f:63:66:d3:ce:b0:
0b:76:5e:60:43:39:f6:60:1a:4b:e4:2c:89:eb:28:11:7d:9e:
b4:b5:b1:03:73:85:c8:19:69:96:28:f1:64:72:36:3e:f7:c3:
98:59:1e:d7:72:7e:bf:4e:66:80:0f:59:6d:a5:fb:b8:4d:c6:
cb:78:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:01:13 2025 by rpki-client