Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: 2jUoMIXa8hAm5DRQWVxNdHTkAlu1TpZJk8znx0Fj98U=
Subject key identifier: 12:C1:5D:C6:34:CB:A8:EA:47:3B:0A:A8:D1:8F:91:50:20:E6:56:BF
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 0196BC6E24D9D9BAA47D64D8D3DE6C4AC0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 14E3
Signing time: Sat 10 May 2025 23:00:57 +0000
Manifest this update: Sat 10 May 2025 23:00:57 +0000
Manifest next update: Sun 11 May 2025 23:00:57 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: yZUki85DI5XBdC+M0Ag6DGKnQodZynMvs7xjYd659Ew=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:24:d9:d9:ba:a4:7d:64:d8:d3:de:6c:4a:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: May 10 23:00:57 2025 GMT
Not After : May 11 23:00:57 2025 GMT
Subject: CN=12c15dc634cba8ea473b0aa8d18f915020e656bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:8b:c2:25:ea:35:e2:f1:7b:ef:30:27:a7:
00:40:9b:ba:d9:2d:65:8e:98:65:a1:04:d5:69:01:
fb:71:98:a4:12:c8:ba:73:df:b6:0b:77:9a:f9:ea:
d5:36:4a:77:00:93:c9:d2:3e:be:b3:32:14:40:31:
fe:6b:80:95:ac:bc:82:c6:a9:3c:4d:5c:4b:f7:9e:
99:24:de:fb:75:e7:8d:0e:a2:fd:3f:2f:6b:7d:62:
30:3e:e4:19:29:d6:20:b3:1e:c0:be:04:72:28:fa:
76:ef:66:99:9b:92:2f:c7:13:a4:fd:f7:14:09:96:
d3:16:77:36:25:2c:b2:61:59:81:4f:9d:4d:9e:1d:
06:fe:b9:64:48:b9:05:73:62:4f:b0:b7:9a:21:0c:
7e:71:33:b0:14:61:dc:79:8c:da:2f:4e:78:73:ea:
08:b9:b8:89:7c:0f:50:52:e4:61:85:8f:08:e3:a4:
54:81:14:a8:9b:b6:73:ce:11:8e:db:90:7a:3e:af:
9b:22:b3:bc:23:13:81:7c:9c:af:28:81:0c:a8:74:
fc:cc:dc:cc:02:dc:5f:df:6d:31:58:ce:8d:5d:82:
62:3b:77:59:b8:54:e2:5b:0c:b0:93:f8:73:a6:5d:
cf:cb:9f:cb:e4:45:78:71:1f:35:e8:cc:52:ab:b3:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:5D:C6:34:CB:A8:EA:47:3B:0A:A8:D1:8F:91:50:20:E6:56:BF
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:42:7e:97:59:47:8d:40:52:cf:ac:1d:b9:bd:e0:21:21:ec:
42:bf:c2:ca:f2:34:8b:50:f4:9a:d0:f2:18:cc:b6:0a:59:35:
0a:eb:84:87:4d:60:f4:ce:5a:3c:01:5a:ab:32:b3:af:0e:13:
19:3a:e6:1d:de:cf:81:14:36:cb:bc:8b:28:85:ff:31:d7:c4:
a6:1d:68:b4:8d:62:8d:55:a2:09:9a:33:97:2c:d1:cc:ef:1d:
78:02:31:12:93:a4:e2:a2:9a:a4:99:04:8d:6c:29:ff:20:ec:
71:08:27:02:1f:ba:b8:83:f3:20:97:9b:ae:70:5e:dd:82:23:
26:82:06:1a:f8:8b:a3:5d:52:e1:ec:84:02:71:1c:37:aa:ce:
d8:c4:f1:6d:16:6d:a3:79:14:68:11:d0:67:a6:6d:43:16:19:
5d:14:70:1e:07:20:ed:79:7f:00:7b:06:95:43:d1:2e:a7:e7:
09:73:3e:3b:f9:fa:d4:78:68:8b:0b:5f:a6:61:87:1e:ec:f8:
ef:42:d9:70:1c:c8:73:c0:df:4b:6c:d2:09:87:70:c8:a6:ee:
ae:71:30:17:29:fd:ab:12:37:9e:a2:ce:73:6e:79:d8:aa:f5:
a2:9a:6b:8d:77:19:a9:b3:19:6e:eb:c1:6c:ff:c3:13:5f:69:
42:d9:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:18:03 2025 by rpki-client