Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: BqGdo6tuGJwotux+/lzDPZ5/avFEJxAaIP8NjAfzlWo=
Subject key identifier: 0C:CF:4C:ED:EC:68:A7:A1:52:4A:3D:1E:4F:7C:E0:58:32:51:77:28
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 0196C9175D036726D77A7E6A742011F3930E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 10:01:13 +0000
Manifest this update: Tue 13 May 2025 10:01:13 +0000
Manifest next update: Wed 14 May 2025 10:01:13 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: ORw818bUiIGxrs5Eg4IjdGGBprSSouZtWPi+0aaUq7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:5d:03:67:26:d7:7a:7e:6a:74:20:11:f3:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: May 13 10:01:13 2025 GMT
Not After : May 14 10:01:13 2025 GMT
Subject: CN=0ccf4cedec68a7a1524a3d1e4f7ce05832517728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:f3:a1:52:65:4f:d1:27:95:f6:b1:c2:6e:
7e:f0:82:e9:dc:e4:e5:65:b5:20:72:bf:26:9f:18:
0d:ed:70:d8:b5:d1:c1:4e:ef:6a:9b:03:93:18:39:
4b:61:6d:70:75:d8:b6:58:1f:78:c5:43:90:2f:58:
b2:b7:29:7e:7b:9d:95:5a:84:2f:b0:0b:36:4d:ca:
54:37:83:7e:a7:88:94:86:9d:12:b2:4a:7d:04:cf:
87:f6:37:5b:56:1d:ef:5a:ad:50:c6:bd:53:40:63:
92:6b:0a:d6:17:ca:ee:bb:8d:fe:98:1b:87:0f:56:
ea:bb:31:a4:22:b4:a2:07:cd:91:0a:fb:4d:c7:cd:
21:6b:3b:cd:5e:f9:15:04:9f:2b:3c:b2:6b:39:30:
65:8c:0f:01:8c:47:cf:8c:d9:90:af:ee:6c:5e:cf:
6e:8e:19:f2:c3:09:55:84:8f:61:0d:a1:9c:26:ea:
b8:91:04:c7:84:2f:8c:fa:32:45:ea:5d:7a:a3:48:
37:3b:5f:39:38:34:66:30:41:de:65:21:03:dd:41:
31:f3:01:8a:55:23:a3:cf:73:53:aa:45:c4:72:a7:
42:0d:b8:3b:34:c4:6e:40:bc:28:97:80:17:be:ef:
f3:c0:9f:fa:a3:0e:4e:7e:50:07:97:82:5d:7b:44:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:4C:ED:EC:68:A7:A1:52:4A:3D:1E:4F:7C:E0:58:32:51:77:28
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:77:01:14:45:c1:2d:25:e2:75:0e:3b:cc:62:f9:04:3a:f0:
79:df:32:41:69:56:79:a2:9e:57:76:3d:13:b3:ea:9c:a6:3d:
51:df:01:b1:4c:75:8d:aa:21:fe:1c:a4:f6:ee:b4:eb:33:4b:
5e:01:c2:22:7d:73:8e:0f:fb:b6:be:69:d3:44:82:59:66:f6:
7a:09:f5:15:0c:4e:81:d1:7d:fb:d3:d9:90:28:38:10:2d:e1:
7a:c5:f4:61:de:0e:87:0c:ee:c8:45:aa:2f:e7:d3:6a:55:2e:
d7:df:96:73:49:87:0a:a2:21:67:ff:50:89:59:e4:84:3c:37:
42:2f:12:48:db:da:a4:0b:c1:5a:fa:4b:3d:81:c6:68:74:65:
b4:7e:f6:38:2e:ce:a2:7a:9a:fa:9e:15:85:96:f4:3e:a9:b1:
11:f2:88:18:55:2b:fa:aa:27:4e:43:11:d6:3e:c2:ce:c1:96:
eb:45:1a:c4:d2:fb:14:f1:28:9e:62:f1:62:ce:42:bb:35:e9:
4d:8b:6d:4c:5c:7e:d1:77:13:50:eb:80:ae:ec:cd:4e:fd:65:
55:b9:bb:e4:01:46:d5:4e:5c:a6:01:bb:3a:9e:3c:ae:ee:da:
19:31:82:2b:c6:4c:09:15:f9:2d:65:e4:02:7d:1e:a2:a6:1f:
34:0b:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:47:08 2025 by rpki-client