Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: ZnlmArv0OXM46LPcI1ml7IfHbV2BOnCzxGyYw7Ovvnc=
Subject key identifier: 67:C5:FE:ED:4A:3A:09:DF:88:E2:85:BA:73:50:54:6E:91:57:C5:BB
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 0196B1E9EB10C04F023F9CDDF0936CB97247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 22:00:19 +0000
Manifest this update: Thu 08 May 2025 22:00:19 +0000
Manifest next update: Fri 09 May 2025 22:00:19 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: Rb4diGVcCzsQrBeOsQc55xqc8DddUGxytMxZ3iV1orc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:e9:eb:10:c0:4f:02:3f:9c:dd:f0:93:6c:b9:72:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: May 8 22:00:19 2025 GMT
Not After : May 9 22:00:19 2025 GMT
Subject: CN=67c5feed4a3a09df88e285ba7350546e9157c5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:91:7b:c2:a1:32:4b:e9:d0:89:52:24:fe:
7f:ae:5c:ed:08:88:91:5f:be:e7:e1:ce:40:e2:36:
dd:b6:a0:70:42:5b:8c:f5:cb:cc:21:cb:5a:76:81:
93:8c:c0:80:68:c0:ae:a2:06:f1:ac:be:38:6d:10:
67:9c:d0:36:f4:3e:e3:d4:82:a4:6a:14:09:fe:64:
c5:67:78:cb:d0:c6:58:b5:6a:31:38:13:25:53:4a:
79:f2:94:49:9b:1c:f3:27:0e:3d:6a:4d:9a:36:12:
37:7c:d0:db:28:5a:26:36:39:2b:a4:ee:c0:5f:99:
96:c1:fd:7e:4e:0d:f9:26:3c:e6:19:39:0f:4f:c8:
bf:87:ad:e3:46:82:8e:2f:b7:aa:d6:02:98:08:2f:
22:85:27:9b:12:56:a4:79:d0:0b:09:14:75:24:59:
db:e7:49:22:02:79:e2:03:35:ea:bd:7e:44:c0:13:
3f:79:19:f0:f2:1b:52:25:93:5a:24:24:a6:c2:9c:
67:99:be:bb:86:68:8b:02:4a:2e:02:03:07:a3:77:
f5:70:b4:96:b1:bd:40:49:ae:27:57:b0:0a:6d:ad:
83:eb:fa:92:90:79:1d:a4:f0:21:d7:1d:09:2f:25:
32:81:75:43:28:d4:59:fb:53:8b:7d:0e:d9:1f:1e:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C5:FE:ED:4A:3A:09:DF:88:E2:85:BA:73:50:54:6E:91:57:C5:BB
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:62:5f:58:05:d9:f3:19:30:66:07:d1:5b:4d:3c:7c:ee:91:
8e:9e:b7:d0:96:b6:6a:6c:b3:d6:6b:0b:3f:f3:74:9e:ed:28:
07:ef:14:e6:55:f4:ac:f0:af:6d:83:a3:c7:7b:0a:ee:59:27:
06:36:84:cc:0a:65:0d:97:67:cc:e3:28:5d:2a:49:be:ee:08:
b6:e6:75:43:86:00:74:38:3f:8c:82:bc:d2:f3:ad:d7:e9:b1:
39:4e:63:4f:e3:0c:7e:f2:a8:3e:f6:c0:ed:a8:f4:bc:08:b5:
79:89:50:d3:cf:a5:12:f3:9c:b4:c8:a9:3a:42:eb:4e:45:8c:
59:4d:19:19:78:63:7f:ee:bf:45:e9:7d:da:51:3e:73:9d:6b:
d5:a8:e4:3a:8d:74:ef:51:f8:06:98:e0:c7:69:a4:42:95:6c:
8d:80:4f:01:58:dc:c4:fe:f6:78:4e:4c:c4:09:5b:30:1a:96:
42:88:f2:bf:aa:a6:67:7d:14:95:cd:fd:ad:d3:a7:79:14:92:
c6:e9:2a:9b:a8:5c:00:99:57:53:a2:79:d1:aa:8a:7d:ef:8b:
f5:05:f1:11:7c:61:aa:b7:e5:0e:6c:f6:87:08:5b:21:41:b3:
0f:24:3e:bc:01:83:0c:b4:29:0a:fc:b1:f9:67:4b:5a:06:6e:
f1:3c:f0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:35:43 2025 by rpki-client