Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: R8NSsXzlrAs5YvFVzkuPkjhs6HwVfSNpYMqDT/HG84s=
Subject key identifier: AA:99:DA:97:D4:94:D8:A9:39:87:11:6E:37:D7:B7:AF:51:72:1A:E6
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 0196C15DE0162496BFC15104785F2797F0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 22:01:16 +0000
Manifest this update: Sun 11 May 2025 22:01:16 +0000
Manifest next update: Mon 12 May 2025 22:01:16 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: rP9FS1rR7T7v/ZUIrfo96z2kbhb7yrxsM8lnrq083L4=)
2: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (hash: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:e0:16:24:96:bf:c1:51:04:78:5f:27:97:f0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: May 11 22:01:16 2025 GMT
Not After : May 12 22:01:16 2025 GMT
Subject: CN=aa99da97d494d8a93987116e37d7b7af51721ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:75:8f:36:65:2c:70:94:67:4d:25:db:15:
18:85:31:5e:e6:28:66:90:71:76:97:1d:e2:0d:7e:
ea:75:72:1a:7f:33:f9:9b:b7:90:82:9b:ef:0b:8f:
e4:6e:eb:37:21:7f:e5:72:58:1d:fd:4d:19:87:52:
37:97:ed:94:b0:f2:b1:cf:f5:2c:92:14:9b:43:3d:
45:ee:58:66:95:ac:5b:42:27:8c:3a:4c:f7:3d:1e:
5d:75:ce:06:df:f7:0d:13:f9:77:a5:80:3d:53:a0:
1d:9c:01:84:27:ea:29:df:ff:66:85:1f:70:42:64:
08:13:f2:06:3f:df:41:36:45:1c:9b:5f:bb:f4:09:
03:24:88:b1:c1:ce:ad:e6:f3:c1:f1:55:66:00:b9:
62:14:92:cb:01:ff:23:3f:98:81:5a:e1:fc:7b:01:
0b:8b:e6:4a:cd:1b:11:6c:74:a1:62:13:71:66:0d:
76:d9:89:e2:ed:54:c1:ac:cb:89:cd:27:4d:1c:1c:
8b:63:59:d9:d4:b2:50:82:c6:7f:f0:dc:76:9b:4b:
cf:16:e7:51:0c:89:ac:cb:89:ff:b7:f0:94:17:f3:
79:c2:94:95:51:4a:3b:66:b1:4e:16:e0:d1:f2:d7:
48:d5:d5:dd:ce:7e:85:64:9e:9c:73:75:36:79:89:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:99:DA:97:D4:94:D8:A9:39:87:11:6E:37:D7:B7:AF:51:72:1A:E6
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a7:cc:80:4c:ac:1d:d3:92:b8:3f:d5:55:02:4b:02:e4:21:
7d:44:5d:48:dd:ab:77:39:d3:c4:ab:f4:bc:81:b3:6a:35:5d:
8f:94:6a:88:75:24:7b:d6:0d:f5:35:a5:6f:41:2e:db:ee:72:
ab:87:6c:ff:bc:95:e7:ef:7c:f3:dc:7e:35:b1:47:55:d1:0d:
78:88:17:c4:97:44:88:ae:13:33:f3:aa:37:51:5c:f4:bf:10:
1f:ad:88:8e:06:e2:41:ce:a4:88:3b:bf:8c:5f:5b:d2:9f:30:
54:1a:2d:08:e3:98:1c:e9:c7:b8:23:97:51:96:c3:fc:21:4d:
6a:46:50:ac:6c:a8:e5:8e:95:8b:ba:3a:29:d3:4c:0d:9c:01:
7b:1b:e4:b8:aa:18:b9:5c:2f:e0:04:7f:65:14:a8:16:b4:ff:
3f:55:0b:60:d4:21:20:ba:bc:8b:34:f6:e9:1b:e9:2f:32:60:
64:f3:30:08:e6:9f:7d:4c:58:16:24:13:37:28:87:3f:3f:03:
33:ab:17:d6:7f:4f:75:03:83:df:d4:26:44:c1:b4:c8:0b:df:
81:10:a2:e7:54:d6:cd:0e:ae:36:d3:5a:fd:45:26:79:52:0e:
1e:93:7f:1f:84:ec:e1:ca:63:68:c5:af:05:d8:be:fc:87:da:
99:39:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:35:37 2025 by rpki-client