Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: NsVhml0595S2bTauFpweg9GptebgjAwHi806Y62pDXs=
Subject key identifier: E0:75:82:A1:5B:EE:00:35:6D:D5:D9:9A:DA:70:E4:18:98:97:13:49
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 0196C2DDA77F54241B0CA2FB7412EAF2FB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 09FA
Signing time: Mon 12 May 2025 05:00:28 +0000
Manifest this update: Mon 12 May 2025 05:00:28 +0000
Manifest next update: Tue 13 May 2025 05:00:28 +0000
Files and hashes: 1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: SmiXGbFIJLluyONtaa5U1oDCqmfFI/mb5uyKTeQugeU=)
2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=)
3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:a7:7f:54:24:1b:0c:a2:fb:74:12:ea:f2:fb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: May 12 05:00:28 2025 GMT
Not After : May 13 05:00:28 2025 GMT
Subject: CN=e07582a15bee00356dd5d99ada70e41898971349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:c2:13:f3:48:5f:98:10:9c:52:e3:8d:88:
62:97:8d:2f:3a:89:18:ec:f9:14:5b:a0:5e:52:f7:
30:04:ce:26:13:e9:94:48:16:da:20:38:70:50:46:
f1:f8:53:3c:32:99:dd:a3:7b:23:38:61:90:69:cf:
df:9c:13:f3:5a:b1:16:74:41:28:72:7f:d6:46:f4:
33:59:64:ea:69:68:16:f9:63:0f:b7:3d:39:04:94:
5e:0e:03:70:cb:5d:ac:36:4c:68:23:68:75:41:22:
41:39:5d:54:d4:ca:58:8a:ab:3f:8a:ed:6b:66:19:
af:8f:db:7e:23:87:0f:4e:00:d3:d5:e9:bd:80:51:
e6:3a:8a:c4:c2:9e:e7:e3:9f:7f:53:45:e7:13:6c:
11:7f:77:3c:98:a8:70:c0:ef:5d:f1:41:68:7f:36:
bc:46:48:b5:5f:df:17:91:a1:47:44:57:98:1b:38:
d3:2e:cb:10:48:e8:7d:0c:87:8f:26:ea:5b:75:d5:
c0:d5:91:64:a8:d8:e1:49:f6:49:0a:8d:db:1a:cc:
7a:20:11:9c:78:3a:2b:ac:6d:d2:85:f7:39:41:40:
f4:e5:eb:bb:a3:d0:a1:e6:ee:4d:0a:f6:cb:3f:90:
65:ba:2a:58:6e:3c:fd:27:7c:47:c0:5f:8c:8f:eb:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:75:82:A1:5B:EE:00:35:6D:D5:D9:9A:DA:70:E4:18:98:97:13:49
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2c:8c:2d:41:18:a8:19:bd:cd:46:0d:ce:49:65:34:e6:91:
36:5f:3d:26:87:2d:08:c7:ab:2d:06:5b:d1:37:ee:7d:7e:ef:
2c:db:e6:dc:00:d8:a4:77:2f:5b:b8:e2:1a:dc:3a:1d:b2:37:
2c:b4:40:84:37:fa:fa:d9:fe:7e:21:47:e4:3b:be:e9:0b:36:
39:47:93:69:48:31:29:7d:c2:38:93:80:dc:dd:f9:44:fe:6a:
a3:f4:57:2a:27:09:72:5c:8b:ac:df:09:4e:08:a4:ce:7c:d3:
e7:ef:c5:68:24:b9:93:2e:f9:d7:78:5a:ec:52:16:6f:70:73:
82:a7:80:f5:50:de:42:4e:dd:04:df:c2:d8:fc:eb:1a:ef:5c:
27:c7:19:2f:d2:ce:90:5f:55:08:86:b8:fc:b3:5b:b5:0c:a8:
26:87:ec:f2:32:cf:46:41:81:ae:6b:b2:b1:55:27:86:14:70:
1d:73:07:bd:28:e8:16:27:09:04:81:49:df:c9:88:b5:82:f6:
6b:f1:3f:75:6f:d4:30:76:bb:c7:b0:63:96:47:3f:09:61:57:
d4:9c:f7:5b:b3:85:44:95:86:fe:34:9c:3f:05:f2:b4:f4:dd:
a5:4d:3c:30:e4:2a:88:35:84:a7:b8:ce:69:75:3d:4b:d3:e0:
ef:fb:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:37:49 2025 by rpki-client