Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: MqGwkRDgURmtlQDFS+SBLTFUyGGXzszuVAcgVvaNRwY=
Subject key identifier: 14:37:04:FF:B6:6A:2D:87:DA:72:1C:A8:C9:2E:AA:AE:C6:65:02:FE
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 0196AAD58ADDB9F07D72D92E9BB1C42A5232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 0C9E
Signing time: Wed 07 May 2025 13:00:43 +0000
Manifest this update: Wed 07 May 2025 13:00:43 +0000
Manifest next update: Thu 08 May 2025 13:00:43 +0000
Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: 0uJXUIRFC6RKU9kosW1lg1bIbDlr+uR697uU+LUvSPs=)
2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:8a:dd:b9:f0:7d:72:d9:2e:9b:b1:c4:2a:52:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: May 7 13:00:43 2025 GMT
Not After : May 8 13:00:43 2025 GMT
Subject: CN=143704ffb66a2d87da721ca8c92eaaaec66502fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:e8:5c:51:fd:45:ca:6f:21:cb:78:95:27:
63:b0:30:f6:60:c2:b3:a9:27:a9:84:de:ab:9a:a0:
d9:5e:10:f9:23:4f:eb:c7:74:30:8c:86:42:2a:93:
45:b5:87:77:92:e4:c7:ec:b1:18:9b:27:c1:33:81:
56:ce:31:21:c3:7c:6e:a2:d0:77:a7:18:8b:d4:a8:
40:25:75:22:e3:c4:2a:83:64:80:5f:52:ed:7a:e6:
37:18:7d:8f:5b:9c:f0:5c:9e:58:2e:4e:a8:70:b2:
b3:c7:e8:15:f6:f8:b5:e6:99:33:4a:0a:76:43:10:
dc:f7:93:46:d6:f7:bc:58:61:d2:72:2e:3e:07:b8:
c2:5c:ec:3e:20:c4:ee:c3:49:cb:28:fd:ff:1f:52:
f3:f6:2c:5c:32:2f:85:1a:29:91:f4:c7:66:09:3c:
16:4e:39:b9:f0:25:6d:3a:a3:4d:65:fa:21:0a:49:
2d:5b:39:46:93:68:fa:02:ca:0a:f7:62:ca:c9:2b:
b0:b9:95:00:13:6f:4a:3f:45:c6:a5:67:e8:50:ce:
48:bb:08:30:61:35:b8:70:af:45:e7:81:a6:26:78:
51:ab:58:bf:b4:1b:e8:cb:75:13:b9:aa:60:db:de:
f9:ce:03:7c:fe:3d:c3:2d:4d:90:68:08:04:54:ba:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:37:04:FF:B6:6A:2D:87:DA:72:1C:A8:C9:2E:AA:AE:C6:65:02:FE
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bf:3e:fb:95:35:5c:94:c2:84:9e:bf:f6:3b:1b:56:4f:bf:
64:cb:dc:cc:e8:c3:6d:d4:f3:82:5b:68:67:ed:d3:4d:0f:94:
fe:66:67:e9:f2:33:0c:8f:3d:d7:fa:d4:2b:3e:e6:9b:5c:86:
82:f5:85:c1:4f:26:0c:09:34:18:ca:50:71:7f:87:bf:52:b2:
98:32:cd:14:16:46:7d:25:94:f9:3c:a2:9d:73:5a:5b:ee:b3:
96:b7:74:9d:0a:99:c2:6a:dc:d3:4e:38:e2:e6:7a:3d:77:af:
29:46:b9:c2:c4:42:e7:dc:c7:bd:ed:1c:88:2b:01:13:70:9c:
22:71:e1:6c:6f:9e:b9:87:57:d0:a9:b1:72:8d:aa:4e:5a:a0:
b5:f6:6a:09:07:25:3c:79:6d:a1:7e:04:67:c8:e4:42:ba:e4:
c9:49:5f:a1:12:35:57:85:f6:f0:1c:6a:e9:da:f3:b1:df:81:
2d:64:73:d9:d1:5a:60:ac:4e:37:b5:28:14:0f:63:39:be:64:
01:c7:8d:c4:2e:29:c1:17:b1:53:d2:4d:d3:c3:f2:39:2b:96:
39:df:bf:73:07:0d:52:e3:d6:83:02:8a:48:16:6e:82:c3:28:
4e:72:f8:28:f8:8c:19:40:34:53:9e:21:43:ce:e9:ff:17:2f:
5b:5c:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:10:53 2025 by rpki-client