Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: 4hChEe5Q2KWnetteB13s0whjPC1XUq6GU7vnO2e+sAE=
Subject key identifier: 9B:FF:93:16:4E:4D:22:75:5F:CD:AB:81:0F:2F:47:E2:81:1F:82:6D
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 01969DF56C54A273198E5A226354DF53EE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 01:00:28 +0000
Manifest this update: Mon 05 May 2025 01:00:28 +0000
Manifest next update: Tue 06 May 2025 01:00:28 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: 2FrlGewjL852LmQmToHtDlvArhjbJJ9u+ff1nNNxV/M=)
2: pVvB4DPoqxSwKA7eSS7jFs-QMtw.roa (hash: DbYaOM55FhKgmSDQxNENLAyQLbX8jvEl6m8BL1vC3Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:6c:54:a2:73:19:8e:5a:22:63:54:df:53:ee:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: May 5 01:00:28 2025 GMT
Not After : May 6 01:00:28 2025 GMT
Subject: CN=9bff93164e4d22755fcdab810f2f47e2811f826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:4a:c1:d1:ba:a3:24:62:8c:10:6d:f3:0f:f4:
03:1d:35:a5:52:51:bb:11:04:19:ce:f0:74:e2:b2:
4d:d1:e5:6d:6f:44:ff:cf:83:75:2b:3b:e0:47:11:
57:89:d4:95:f4:94:5d:a8:ce:fe:0e:ee:63:e2:58:
e6:ba:fc:b1:db:8c:cd:61:44:45:27:eb:8c:09:fa:
f6:eb:4b:29:d8:10:ff:6f:f3:af:3a:9d:1a:da:9b:
e3:9b:01:30:3b:77:68:bc:1a:ba:af:16:80:0d:e6:
e5:7b:fc:8b:a9:84:ef:d1:80:7c:4d:25:4b:41:fc:
34:a2:81:fb:96:ae:73:fc:b1:38:b4:10:5b:06:60:
85:88:eb:47:8b:48:87:8e:d1:bc:6b:f3:aa:bb:4f:
5c:5c:ee:f8:81:cb:c7:4c:4f:d4:9b:3c:2a:76:b8:
ef:34:59:46:cc:2d:2d:a6:fb:71:17:3e:b6:79:ba:
09:04:48:ba:74:ba:1c:72:05:8d:6b:0b:73:7d:4e:
95:0c:52:80:a7:b3:2e:50:8d:cb:6b:bf:ae:96:f3:
3c:1f:e6:51:d3:1b:54:a5:f1:0f:ce:5d:76:8a:64:
2d:b4:0c:15:a6:2f:e8:bb:b3:cc:48:b3:e2:86:62:
63:be:d1:4c:ba:4d:d8:21:5f:22:50:d2:9e:b5:e0:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FF:93:16:4E:4D:22:75:5F:CD:AB:81:0F:2F:47:E2:81:1F:82:6D
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:00:89:44:92:e0:11:60:0f:c6:c7:00:59:67:81:b3:71:0a:
25:28:6e:dd:8d:7b:fe:7b:79:ef:92:61:df:b5:f9:21:ff:48:
cd:34:c5:41:ae:70:a1:4e:95:bf:a2:9e:37:7c:0c:eb:95:db:
ba:e3:42:69:ba:2f:aa:56:f0:77:30:6d:64:36:a4:de:6b:3b:
12:38:30:77:59:46:f4:bc:70:3e:8f:e1:e6:5b:a2:61:e9:47:
01:a8:52:47:b2:ca:df:7e:00:96:ad:ba:71:18:5e:78:58:a9:
f2:df:b9:89:d1:72:5a:32:18:1b:9c:b6:57:fa:81:14:e6:0f:
bf:e2:ca:50:dd:fc:08:a7:cc:04:fc:94:59:18:ee:80:14:bf:
bb:36:e8:a9:43:56:89:a6:64:b8:a0:55:06:24:a2:1d:fc:8f:
bc:1f:11:b9:d8:63:54:03:e0:a5:b0:05:45:d7:44:a1:6c:9b:
11:ad:4b:b3:d9:78:75:25:e6:27:1b:3e:be:e8:ed:72:b5:8c:
dc:30:d2:cc:2a:f0:83:db:e6:1f:3d:e9:39:94:f2:84:4e:4c:
5b:75:83:11:31:5f:e9:e1:52:74:c6:30:c8:a3:14:d8:97:98:
a9:80:7c:66:23:df:80:f6:9e:ed:e4:77:ac:5c:5c:74:7a:70:
2b:2f:32:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:30:26 2025 by rpki-client