Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: 9w3bzfiaHVIn99PUzWXaCSJ6NUNmQRwGEYJSY2PU4Uc=
Subject key identifier: 1F:35:F9:36:06:21:E5:48:8D:1D:A4:E9:03:1E:A8:1B:7C:63:39:17
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 0196C382BB62D6C4155B5D6A9EA7CA314B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 0CFC
Signing time: Mon 12 May 2025 08:00:46 +0000
Manifest this update: Mon 12 May 2025 08:00:46 +0000
Manifest next update: Tue 13 May 2025 08:00:46 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: uI7UlUd4EHYD6b7TV8dD51yyjy6N+DcjyiRcm09oKio=)
2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:bb:62:d6:c4:15:5b:5d:6a:9e:a7:ca:31:4b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: May 12 08:00:46 2025 GMT
Not After : May 13 08:00:46 2025 GMT
Subject: CN=1f35f9360621e5488d1da4e9031ea81b7c633917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:54:ff:16:4c:3a:38:9f:93:20:77:38:fc:
dd:f5:6e:4b:d7:17:db:43:35:6a:a5:46:c4:6c:ab:
51:f1:1f:d4:b7:20:cc:7a:a4:af:94:4d:b9:83:93:
50:61:0b:89:2e:34:5a:e2:aa:cf:e1:af:61:9e:cf:
17:61:d4:d9:03:17:ab:a4:c9:4f:a5:76:49:61:92:
d0:3a:81:46:05:60:2b:fd:ce:26:dd:b7:70:f2:ad:
84:90:89:b6:5c:71:41:c7:d9:f2:54:a9:fa:a8:50:
c0:ed:a0:fe:84:b2:10:1b:31:05:3e:4e:bc:42:a7:
25:db:a9:7d:2c:bb:6c:69:10:69:80:3e:bd:ae:75:
0b:5b:0c:4e:b5:ba:fe:cb:07:79:c7:e4:76:dc:73:
88:3c:fb:2e:7c:e0:a1:31:09:1b:dc:c9:56:35:ea:
d7:5e:d5:3b:af:28:ff:13:d9:48:f9:69:42:8d:73:
5b:b1:c0:18:33:fe:83:d3:cb:37:d8:c8:b5:56:3e:
1b:bf:d4:11:be:45:37:b6:8a:6e:f6:51:52:80:21:
01:72:3c:fe:05:b1:59:43:ab:6e:fa:89:71:62:e8:
11:9d:6c:45:02:fe:1d:c5:62:03:38:2f:fa:c1:d8:
f4:57:f8:af:6a:eb:01:e3:bc:e2:fa:bb:b3:01:14:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:F9:36:06:21:E5:48:8D:1D:A4:E9:03:1E:A8:1B:7C:63:39:17
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e3:a7:0f:73:08:2d:6a:ae:b8:71:ea:c9:8b:ad:91:0f:04:
f5:b1:02:f0:44:84:52:ad:5b:ce:71:ad:36:af:ee:48:4a:ba:
bb:00:e5:d1:d0:d4:ad:ff:3d:a8:6c:9a:f8:9b:c4:c8:ab:b5:
cf:26:6d:92:a9:38:3a:ed:c4:30:64:56:00:b2:28:37:0d:18:
15:a1:0c:87:31:1d:07:6c:b6:62:c0:ca:fd:a3:87:ce:a5:c6:
0a:67:68:00:8a:b3:33:8b:9d:5d:a1:00:e7:da:1f:73:eb:f3:
ba:a6:a1:bd:1f:f3:a8:7e:31:3b:38:08:12:23:d9:6b:4f:e9:
12:55:d2:c8:a8:7b:0c:83:0f:25:5e:39:17:7c:19:94:aa:74:
04:39:f6:71:10:7e:0b:b2:8f:bf:50:70:fa:0e:92:b1:d0:49:
44:d0:25:af:7d:bf:47:87:3c:8d:50:a1:f7:bf:38:00:a2:32:
11:b8:ca:ec:62:8d:65:b0:a4:72:e8:d6:81:be:94:5f:81:b4:
48:16:0f:93:c4:56:14:62:09:3a:f6:c9:04:20:6c:8a:64:fb:
d9:4a:50:99:98:5f:87:38:2b:2a:d6:88:21:d9:65:69:b9:cf:
dd:bf:52:cb:46:f1:7a:3f:99:91:ad:68:31:a8:51:19:50:a0:
4c:27:26:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:26:29 2025 by rpki-client