Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: NudlylJC5eC2lLe4bqx8qmzyR42/Ss1cKku8nquZTqA=
Subject key identifier: 26:0E:61:55:CE:84:18:2F:38:B3:C3:22:6A:19:78:57:3D:14:8A:A0
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 0196B8C7A32983306FB3229B0A9EDB412BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 017C
Signing time: Sat 10 May 2025 06:00:13 +0000
Manifest this update: Sat 10 May 2025 06:00:13 +0000
Manifest next update: Sun 11 May 2025 06:00:13 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: RZ0Cc869upmec7ROEWducUDRef6PSrfk7GduVtATtwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:a3:29:83:30:6f:b3:22:9b:0a:9e:db:41:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: May 10 06:00:13 2025 GMT
Not After : May 11 06:00:13 2025 GMT
Subject: CN=260e6155ce84182f38b3c3226a1978573d148aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:91:11:9f:b6:52:eb:c4:a5:8e:0e:11:04:
c9:0b:44:bd:e5:fe:9c:0a:fb:7c:68:6a:dd:5b:86:
92:4a:6a:6c:a6:9e:c7:81:52:5b:c5:ea:cd:5f:4f:
3d:1c:ed:75:1e:cd:02:a0:3d:34:b2:5c:af:62:ef:
63:fe:94:17:86:24:fe:26:84:68:fb:89:26:30:fb:
2e:cc:36:f5:79:ef:b9:3c:37:3b:94:f1:cf:e0:ec:
38:27:90:4c:90:9e:cc:ef:c8:72:7e:3b:b4:93:2a:
f2:cf:2e:0f:4d:01:c4:a5:d7:87:b3:39:45:31:fe:
f3:2a:d7:9c:dd:bc:c6:ed:18:f9:9e:a5:ca:c5:5a:
b1:c4:dc:07:11:01:3c:51:34:43:f0:c7:a8:38:3a:
db:48:ef:dc:f6:1e:22:d7:03:e6:a4:da:38:73:5b:
16:b9:c3:13:6a:8c:a6:a1:bb:04:8a:2a:08:79:a8:
21:7d:1e:2f:4f:b5:b2:38:bc:a3:2d:8d:3d:d8:73:
07:f9:ff:29:02:32:c0:00:a7:91:2c:cd:59:fa:cc:
26:84:57:a9:53:73:e8:48:e4:c1:fb:d6:00:39:28:
c5:1b:6f:f7:81:f2:eb:c1:5e:ea:b3:8a:28:68:f2:
d4:60:02:9c:74:f1:25:d7:ad:c6:9b:25:98:fe:ef:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0E:61:55:CE:84:18:2F:38:B3:C3:22:6A:19:78:57:3D:14:8A:A0
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a5:90:fb:65:a9:97:b2:33:b1:c2:1f:26:e1:56:c3:11:ae:
0e:c0:2f:17:ec:4d:ff:1a:d2:b5:35:05:2e:0b:2b:fb:23:fe:
be:b3:f3:67:2b:5d:7c:f8:45:86:94:51:d3:9a:3a:59:bc:ce:
92:16:c9:84:ef:df:45:3b:40:ce:80:de:7e:75:31:37:1b:9c:
35:35:03:f6:ef:e6:0f:31:54:4d:3a:d2:8d:ef:c2:03:88:ad:
58:3b:05:08:d9:0b:7c:c7:48:e1:f6:56:b5:23:34:f3:d7:ee:
da:82:a2:31:99:50:83:74:b9:d3:a1:7e:0f:11:1d:32:0e:7f:
bb:7f:59:b5:de:76:79:6e:04:05:3c:15:3c:3d:f3:6d:18:b2:
02:dd:ce:e2:a4:d0:94:ec:8b:e1:4b:28:8d:6b:a4:8d:0e:56:
a5:8c:5f:53:77:1d:a3:5e:bd:11:58:bb:c5:d8:02:13:29:bf:
69:56:f2:98:1e:fb:2d:c4:38:dd:d0:b3:00:00:95:c5:31:66:
05:fd:80:a7:fe:93:cb:74:59:a5:bd:76:a2:bb:f3:ea:8b:44:
5b:d8:b2:4e:ee:80:47:aa:14:1f:af:8e:45:e4:fc:69:8c:f5:
42:0c:92:30:89:ab:8b:fa:68:b0:83:3d:a4:a5:29:d6:7c:f0:
ef:71:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:39:27 2025 by rpki-client