Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: mKtTuV4y5eVy/car4m0sAM77nqfwQ26T5YJBi+Y+DmI=
Subject key identifier: 96:0F:22:15:83:AF:C2:DA:D3:F0:35:6C:15:FA:7A:52:EC:AB:6B:28
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0196B6D967DF177BC930E9C89B10011C1681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 14C5
Signing time: Fri 09 May 2025 21:00:23 +0000
Manifest this update: Fri 09 May 2025 21:00:23 +0000
Manifest next update: Sat 10 May 2025 21:00:23 +0000
Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: vkTtwcyLLcapfFTop7hNfDn9ZTBzlX/L79VOKMun0QI=)
2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=)
3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:67:df:17:7b:c9:30:e9:c8:9b:10:01:1c:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: May 9 21:00:23 2025 GMT
Not After : May 10 21:00:23 2025 GMT
Subject: CN=960f221583afc2dad3f0356c15fa7a52ecab6b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:b1:38:32:3b:e0:7f:86:57:46:20:51:9f:
d7:96:06:71:ab:ef:cb:ec:44:3a:2a:5f:0f:59:fb:
25:0d:3b:98:cc:c5:1f:96:ee:a7:9c:ab:77:32:b0:
47:15:c5:1e:31:24:7c:e4:88:69:c0:16:96:72:aa:
3e:80:89:85:c9:62:62:14:46:00:7c:67:7c:28:cb:
2f:47:6c:d7:18:54:fc:b0:ff:69:64:fd:63:f7:19:
dd:a4:f5:0f:1d:56:5e:d1:6f:02:f0:71:27:8f:6e:
cf:36:64:a0:20:31:16:cc:4d:81:d7:ff:d5:48:30:
30:0a:7e:bc:df:29:a8:93:0c:0d:03:4e:32:df:60:
ba:37:56:aa:24:f2:4a:a5:f1:c1:3f:ab:82:13:f6:
40:d4:5e:b7:86:df:7f:ff:a3:a1:dd:1b:23:a3:f6:
a7:e6:73:bd:65:d0:f5:d1:3c:6b:76:ee:fc:b3:fb:
c8:0e:83:8c:41:d5:03:73:ab:fa:a8:18:53:74:9f:
f0:31:f1:b7:7c:fc:1c:be:ff:d7:e9:8d:db:aa:ba:
60:ca:db:95:51:cc:64:f3:55:18:ac:37:fb:dc:de:
0e:b4:e2:a5:48:d0:c9:ba:98:8f:50:5b:4e:01:e5:
3a:38:8c:b7:c9:92:1c:ca:52:75:53:3d:b7:a3:40:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0F:22:15:83:AF:C2:DA:D3:F0:35:6C:15:FA:7A:52:EC:AB:6B:28
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:53:d6:ed:7b:0a:a6:45:23:97:8d:91:a1:33:05:08:ae:f4:
76:2a:e2:a7:b5:8b:ae:bf:de:d8:24:c6:71:f0:5a:94:d4:bb:
e1:0e:5e:15:e3:c2:bb:34:1f:a2:44:e1:dd:19:ce:c7:1e:11:
db:55:f2:8a:71:f0:68:1f:8e:a6:d3:0f:b9:68:09:88:44:0e:
d3:cd:5b:53:d1:55:e2:f9:b6:8e:2e:f3:6e:21:42:3d:68:0f:
c4:a0:f6:79:4c:d4:14:2c:7c:cc:f5:a6:8b:2b:90:5c:bf:88:
d1:65:6d:8a:e9:3b:16:3b:7b:5b:d3:91:7e:fa:d1:51:d6:b8:
8d:cb:fe:1d:5a:ad:f6:78:a1:8a:cd:ff:01:56:05:20:5f:02:
61:e7:ef:19:ed:09:b2:aa:3d:bc:90:b3:c6:3d:39:40:40:0e:
dc:a3:2e:45:29:e1:66:69:90:e2:19:c3:a0:90:11:9a:f1:23:
21:e7:1b:76:b7:1b:9d:1e:ea:d3:bb:5b:e8:db:6e:00:80:91:
ec:68:08:8f:85:46:9f:dc:12:01:7e:14:73:66:53:20:b3:bd:
7b:e5:92:9e:a1:8f:6e:2c:6e:c6:16:af:08:4a:3c:cd:11:a9:
ed:09:62:78:f1:51:2b:5b:a9:52:a5:3f:e1:73:8e:90:d8:43:
57:89:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:22:39 2025 by rpki-client