Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
File: hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft (raw, json)
Hash identifier: ezaukSMrLlU1l+cEfPbN2O/2TdsDWdY4X3u8Y5ZPKUk=
Subject key identifier: BA:1B:69:1D:54:8E:07:6B:7A:89:5F:23:BF:4F:82:75:D4:A3:84:73
Authority key identifier: 84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C
Certificate issuer: /CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
Certificate serial: 0196C34B5422A8C68D4982656B3672D8CB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
Manifest number: 081C
Signing time: Mon 12 May 2025 07:00:15 +0000
Manifest this update: Mon 12 May 2025 07:00:15 +0000
Manifest next update: Tue 13 May 2025 07:00:15 +0000
Files and hashes: 1: hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl (hash: 9tg3y0uNPiblbBMaZduOCmyy42k6mbA2/oLM5gVtFlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:54:22:a8:c6:8d:49:82:65:6b:36:72:d8:cb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
Validity
Not Before: May 12 07:00:15 2025 GMT
Not After : May 13 07:00:15 2025 GMT
Subject: CN=ba1b691d548e076b7a895f23bf4f8275d4a38473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9e:76:ca:52:41:73:81:3b:ac:41:52:9c:cb:
3b:b3:2d:98:a9:35:db:87:58:e4:11:d1:34:25:26:
f5:20:90:95:4e:86:52:4e:c4:15:13:20:67:f5:40:
34:ba:80:d1:e3:9a:72:eb:19:a4:ff:bd:20:af:6e:
48:24:65:0d:54:57:e7:71:2d:d7:a1:dd:7a:e4:8c:
44:e1:17:2c:2d:6b:13:c9:da:a0:d7:31:4e:24:c5:
0f:7d:6f:28:a4:ac:84:8f:ab:89:57:b5:01:99:e0:
06:b1:a8:9b:35:c0:7c:c4:91:7b:25:1c:8a:5f:d0:
13:55:1d:95:37:ea:70:e7:8e:11:01:8f:40:3a:1e:
e3:eb:c2:be:ce:fa:58:23:64:ed:94:8a:53:de:26:
57:1e:04:84:f8:6a:b7:6b:a0:af:73:58:6a:2a:b5:
ed:71:e9:78:08:fd:ca:82:ba:ec:d6:2f:4d:eb:eb:
83:9f:c3:a4:4c:09:a9:ac:58:f5:d4:76:ce:a9:81:
1e:6d:8b:87:f7:57:38:c2:0b:76:12:70:d9:b4:bb:
db:b1:09:8e:c7:70:5b:ee:ea:cd:fd:71:72:18:57:
52:47:6e:bf:ae:c3:0b:8e:19:d7:be:1c:46:7a:a0:
6e:0c:9d:88:83:0e:f8:71:06:5f:2f:61:af:80:66:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:69:1D:54:8E:07:6B:7A:89:5F:23:BF:4F:82:75:D4:A3:84:73
X509v3 Authority Key Identifier:
keyid:84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ef:aa:52:99:1e:86:82:35:f9:65:55:69:d5:77:6c:99:8b:
32:73:43:58:f3:67:98:50:c5:e3:eb:39:9e:69:0e:39:1b:87:
25:22:f3:80:8d:13:b4:8e:16:b3:ae:ab:99:df:28:62:76:18:
15:49:3e:31:76:21:4f:19:27:74:0b:53:75:03:f2:c8:c9:47:
db:8c:b1:fe:96:cb:a3:11:3c:f9:d1:18:0f:a2:df:4c:95:58:
ff:27:0d:92:96:13:40:e2:25:75:20:4b:3c:12:3f:3c:5a:6e:
c7:1b:23:07:2a:6a:0f:c5:cd:20:09:4f:9c:07:e1:dc:2e:44:
48:09:34:cd:a5:d6:e0:45:79:73:93:05:1c:bd:c5:ce:60:aa:
2b:ac:89:62:18:5b:8f:bc:bb:a5:e1:64:7f:56:39:40:63:c9:
39:77:2f:07:53:ca:fd:19:41:5a:69:ba:09:3e:7a:4b:9f:ad:
e1:7b:1e:64:8a:16:ce:5e:29:f0:58:80:f9:0e:a8:6d:8c:d5:
ee:1e:0e:61:2c:7b:02:c1:fa:ff:02:1a:d4:6a:3a:59:6d:fb:
41:ed:42:d0:aa:8b:a6:e4:3c:1b:23:d8:2b:6f:d6:93:e2:ef:
4e:9f:15:2b:ad:f2:2e:31:d5:75:da:4c:c6:ab:98:00:87:85:
30:93:99:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:40:17 2025 by rpki-client