Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: U3QJmw9zDeNpt7+q3Ir+S0UmS5MwTqunpCBiaGFaRNw=
Subject key identifier: 1E:B4:3B:24:4C:C2:D3:0A:9E:68:D6:A1:B3:21:38:00:DC:10:C7:8E
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 0196A0BFA59E9D7B7272C8FCD2D3EC06CF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 1531
Signing time: Mon 05 May 2025 14:00:36 +0000
Manifest this update: Mon 05 May 2025 14:00:36 +0000
Manifest next update: Tue 06 May 2025 14:00:36 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: czU/jWFpvjqRGfYB8qCIXsNoc0Bxjlr51VfThcW4qvU=)
2: ppcwt792_0fJ4KuVU5oh5bBxCK8.roa (hash: aGVLz4AJdDai2w17wkg6qcb6wYCOJ1V940AR2tF2zrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:a5:9e:9d:7b:72:72:c8:fc:d2:d3:ec:06:cf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: May 5 14:00:36 2025 GMT
Not After : May 6 14:00:36 2025 GMT
Subject: CN=1eb43b244cc2d30a9e68d6a1b3213800dc10c78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:61:af:3d:36:80:f5:03:e2:65:3a:25:5b:
84:89:59:d4:89:1c:53:eb:1e:5a:34:ca:b8:47:b1:
5f:8d:a4:f6:0c:f6:92:fc:24:4f:79:5d:ff:60:f6:
af:ea:0e:a7:97:fa:c9:0d:03:18:c2:33:74:55:4e:
ba:40:df:03:d9:b1:8f:f5:42:c6:4a:41:4b:c3:7a:
12:b2:c9:10:e6:93:32:b8:54:3d:da:47:df:e8:25:
92:ce:21:7a:4e:f2:a3:95:d3:80:2a:21:81:dd:e0:
22:e0:4a:46:1a:40:20:dc:6b:43:8e:8b:75:54:e7:
72:80:6a:17:e8:1b:b4:58:79:7c:67:c4:6e:67:ce:
08:ae:ba:2f:34:7a:41:19:49:6b:63:61:97:72:60:
ba:6c:b3:2c:e4:d4:2e:20:5c:80:11:33:a4:6c:c8:
08:5a:5b:0c:d5:5a:cb:0f:92:9b:2a:bf:21:7d:6f:
07:1b:62:90:2c:65:99:ed:9e:af:f3:66:83:e4:36:
ef:b0:03:7c:c5:68:76:ec:f3:ac:23:90:4c:df:a4:
6a:45:6a:38:6a:f0:c8:b8:c2:1c:f5:89:01:b7:4c:
8c:f7:b1:59:91:f1:24:47:1b:c1:ca:65:ea:ea:36:
01:cb:f0:0f:4b:60:56:d5:f7:0b:9e:64:6c:12:c9:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:3B:24:4C:C2:D3:0A:9E:68:D6:A1:B3:21:38:00:DC:10:C7:8E
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2f:24:5b:02:23:b9:f0:89:36:a1:b0:2f:c9:be:96:56:a1:
68:72:16:b5:3a:41:6f:17:e1:de:b6:ba:7a:56:15:8f:c1:fe:
f6:3c:d1:f5:ce:b4:00:1e:e9:1e:55:3e:2d:98:c9:17:7f:a6:
e4:ac:d0:2b:4a:8c:4d:17:ad:11:b8:4b:e3:f0:8a:64:2b:52:
ec:26:85:cb:44:16:50:5a:e3:c1:7a:51:aa:91:07:a9:c2:3f:
bd:db:ef:5a:d6:b8:f9:90:d9:d8:26:2f:d0:7f:d0:f6:cc:ee:
5f:da:b1:c2:58:c0:b1:79:c3:8c:7f:10:6d:a9:a4:93:68:cc:
5c:5d:2a:29:9f:ee:91:fb:42:eb:0c:ce:6f:67:ac:51:78:24:
38:86:c8:80:89:b9:48:f2:f1:46:f2:53:e0:41:54:cd:ba:e0:
18:3a:b2:d0:72:84:bc:ac:3e:d3:a5:6c:9d:37:13:55:61:c6:
4f:1f:f9:f5:56:64:d2:8b:01:50:e5:5a:f7:a3:34:1e:13:5f:
0e:57:3a:c5:fe:47:7d:55:ef:f0:54:46:9b:3f:4e:f7:26:c9:
ea:19:bc:a5:c2:bf:37:01:5e:45:f6:76:75:13:b4:9f:97:df:
e0:c2:40:a3:84:c6:3e:c6:38:20:42:10:5e:d2:e6:2d:32:53:
ca:6d:cf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:40:39 2025 by rpki-client