Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
File: hJxbptQKtOTjm3tpttLZhEqiSK8.mft (raw, json)
Hash identifier: 6TxjppbMnbPqK4DWJVhdiIC+awsze8/3MD1oFFjfBek=
Subject key identifier: 3F:AA:67:55:C0:B9:81:C8:F5:0C:8F:0C:C9:C6:D0:13:C5:1D:73:AA
Authority key identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
Certificate issuer: /CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Certificate serial: 0196D21A2A71547A0F81BF0736BEE370805E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
Manifest number: 0C1E
Signing time: Thu 15 May 2025 04:00:52 +0000
Manifest this update: Thu 15 May 2025 04:00:52 +0000
Manifest next update: Fri 16 May 2025 04:00:52 +0000
Files and hashes: 1: hJxbptQKtOTjm3tpttLZhEqiSK8.crl (hash: sqIq/f0PX6Glauan1XPm+Gue/XXZDNu25RHUxHQD+SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:1a:2a:71:54:7a:0f:81:bf:07:36:be:e3:70:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Validity
Not Before: May 15 04:00:52 2025 GMT
Not After : May 16 04:00:52 2025 GMT
Subject: CN=3faa6755c0b981c8f50c8f0cc9c6d013c51d73aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:d9:20:1e:5c:46:ea:30:1e:00:6f:32:89:
6b:48:0c:da:c8:79:bb:dc:8d:c6:6c:ee:13:21:ed:
50:84:81:d7:6e:79:e3:26:4d:59:5d:66:cd:6a:cf:
cb:a0:3a:06:88:7c:e3:de:9b:d6:53:50:6b:ce:55:
63:45:87:94:76:60:3c:8d:06:c1:1f:6f:90:30:59:
19:7d:02:bb:6b:72:9e:a6:9a:88:c3:81:ab:f5:71:
d1:b4:90:e3:0e:d1:17:4a:b7:b1:5e:b9:7c:2e:f8:
f9:7c:2f:a1:a5:da:00:5b:ac:e1:a5:05:29:f1:4f:
f1:c6:99:e2:7a:dd:c4:2b:e9:41:f5:2e:0f:a3:b0:
a2:d7:c7:03:3f:7f:9e:8f:3e:66:9b:f5:74:1a:b7:
80:2f:1e:e3:bc:c6:0d:da:47:59:a7:9f:ef:09:84:
7d:92:45:10:e5:f5:fe:0b:59:b3:3e:b6:e2:99:b0:
12:da:50:bf:27:3e:d0:62:d8:47:17:4f:5a:b8:29:
a2:0e:84:89:b4:f4:68:28:b5:59:3c:6c:8c:3d:24:
48:e4:ac:5d:fb:7c:d3:bb:68:87:4b:a4:c0:19:35:
26:97:6e:44:2d:f8:7b:ed:c7:de:72:a3:7e:e8:b5:
d8:5a:27:43:a6:d6:61:8e:0b:8d:30:93:95:4e:cd:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AA:67:55:C0:B9:81:C8:F5:0C:8F:0C:C9:C6:D0:13:C5:1D:73:AA
X509v3 Authority Key Identifier:
keyid:84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:10:9f:81:10:df:21:9e:2e:32:df:07:87:ba:7c:5d:46:6f:
ad:cb:a7:49:7d:7c:31:8c:ae:9f:7d:27:cf:7e:03:62:ec:9b:
b7:47:a1:23:49:2c:f0:0a:ee:09:b0:eb:47:77:e5:25:f0:c1:
a3:1b:31:b4:61:dc:fc:02:ad:60:84:8c:d9:0a:9c:14:9f:61:
75:5b:33:7a:cc:99:5a:9c:2a:90:4f:e7:d3:3a:df:74:3e:2e:
78:b8:a4:88:c2:fe:64:89:38:c0:c5:4f:fd:2d:c1:93:7c:ae:
c0:d9:c8:78:c1:96:c4:0d:9b:18:06:3b:06:ce:64:0e:06:d1:
e7:98:5a:dd:f3:04:5a:f4:a7:a1:90:06:31:8b:2f:d2:cd:44:
07:d7:ff:c4:04:b2:5b:5a:f9:2b:a9:c9:3d:3c:f1:7b:80:ef:
58:16:89:6a:cb:ca:cc:5f:0e:7a:e4:bf:64:28:59:cc:08:dc:
d0:eb:f2:72:ce:d5:c2:7b:b6:43:48:b5:b5:d4:30:0b:15:03:
db:67:f3:74:6c:1f:a9:6a:ab:14:8b:a2:94:f1:0e:c9:18:97:
7f:41:9d:bf:5f:35:19:81:93:06:b7:30:ff:a0:3a:d8:8f:60:
21:75:6a:c8:a6:c6:51:9d:ee:cc:f3:ef:42:4e:27:95:92:f0:
f9:e4:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:29:09 2025 by rpki-client