Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: nXglqeQ7vuIk+BnUy+EQNTcndBiumjXofRyYe2zewUE=
Subject key identifier: 2D:BC:A0:19:5E:97:8B:E6:F3:66:28:F9:7D:11:85:BE:72:FA:B3:F0
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 01969D1A0E8EA1761DB14D503FF2DAFDFF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 149D
Signing time: Sun 04 May 2025 21:00:52 +0000
Manifest this update: Sun 04 May 2025 21:00:52 +0000
Manifest next update: Mon 05 May 2025 21:00:52 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: IumjIIHv+kZpfNh33fXC1+kiorzjtui7209jUXSTjV8=)
2: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (hash: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:0e:8e:a1:76:1d:b1:4d:50:3f:f2:da:fd:ff:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: May 4 21:00:52 2025 GMT
Not After : May 5 21:00:52 2025 GMT
Subject: CN=2dbca0195e978be6f36628f97d1185be72fab3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:20:d0:87:f8:eb:0e:34:12:7b:fb:3b:2f:
a7:76:7d:a8:f0:5a:b3:ac:c4:8b:0b:b2:c1:da:c8:
55:0e:f8:38:f5:4d:15:46:00:6e:77:55:40:6b:83:
dc:c7:f9:12:ef:a7:5f:ec:57:1a:bc:4b:81:40:78:
29:a2:60:44:3f:7c:86:e0:fb:b9:79:3e:aa:c7:60:
39:8f:5e:41:bb:dd:39:50:f5:54:18:40:54:d2:a7:
1d:b1:ec:eb:1a:be:58:50:79:d8:31:fa:02:69:fd:
dc:64:9f:ce:06:cf:22:71:f3:ad:50:b0:c5:71:60:
7b:ed:47:20:bc:22:95:b8:8e:92:0b:02:d4:e8:17:
c5:4b:47:33:50:8f:d8:68:49:f9:7c:c1:ac:2e:d3:
b2:5c:44:85:4d:36:a7:44:7f:97:82:a1:19:79:e6:
e6:6e:ba:e8:48:7f:8e:be:42:e4:e9:22:56:d7:9b:
c5:f0:07:db:33:1f:e4:bd:74:30:c1:ab:2e:a8:9f:
03:45:d5:0b:d7:e6:ba:6d:89:33:1f:9c:1e:4a:03:
99:90:cc:17:3e:da:36:d5:96:6f:1e:7d:8d:e9:03:
85:72:be:2d:20:9b:a0:2e:2a:36:27:9c:91:15:ae:
a3:ad:4f:1e:fb:bd:bd:4b:b7:18:8f:73:4f:5b:2c:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BC:A0:19:5E:97:8B:E6:F3:66:28:F9:7D:11:85:BE:72:FA:B3:F0
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7d:18:f2:c4:e7:58:92:84:a6:be:0e:6a:ae:19:19:84:d2:
73:87:83:37:df:39:94:3c:be:91:bf:31:dc:59:76:c8:a5:5e:
a7:96:f8:b7:aa:7b:88:09:84:34:3a:d1:b6:3c:e5:2f:12:0a:
e1:ec:9b:9f:e9:4a:a0:26:ef:9e:04:e9:b2:4d:ca:9a:65:a5:
8c:ea:d6:21:b9:9e:89:3a:75:5f:d7:7b:51:fd:f2:d1:c2:84:
c4:a4:c2:b0:e8:d7:de:70:00:a2:80:1e:d3:4b:36:c9:ba:06:
48:51:9d:0a:da:33:77:8b:87:e9:0a:61:7a:03:0c:c3:ca:06:
48:a1:e9:17:a4:a1:3b:69:be:91:2a:b9:16:d8:f1:e9:da:60:
2b:5f:d3:57:fd:dd:58:bf:30:48:8a:ba:76:61:33:f0:06:b0:
61:00:34:52:25:43:dc:d6:ec:36:f8:1f:7e:8a:b9:21:ab:d2:
7a:a6:7f:8a:6f:69:9b:46:bd:e7:e8:c0:5d:a6:58:fa:33:cd:
69:e0:af:b0:3f:70:46:97:50:16:ed:51:58:a2:c2:b5:78:f9:
c0:94:01:ce:22:9f:68:8f:88:64:c9:6d:75:80:68:ee:53:4f:
87:a5:4e:a7:1c:cb:8f:26:75:e7:7d:30:33:46:4d:a4:5b:7d:
80:ee:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:27:21 2025 by rpki-client