Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier: s/fVabetqa4uz6jxizbmO8ql2dxer/Ph39BwiUp+l/k=
Subject key identifier: BC:5B:EB:46:9C:F5:36:7A:3B:D7:C5:E5:72:95:34:AE:B6:92:F5:A2
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 0196B8FF4F59E4961E82C8953459F3992D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number: 1031
Signing time: Sat 10 May 2025 07:01:01 +0000
Manifest this update: Sat 10 May 2025 07:01:01 +0000
Manifest next update: Sun 11 May 2025 07:01:01 +0000
Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: qveojheyIi1melBkRwlx2NFF0qRvaA3Gui9HfGk32BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:4f:59:e4:96:1e:82:c8:95:34:59:f3:99:2d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: May 10 07:01:01 2025 GMT
Not After : May 11 07:01:01 2025 GMT
Subject: CN=bc5beb469cf5367a3bd7c5e5729534aeb692f5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:1d:b1:4f:a3:8a:a8:e7:69:7f:d3:4e:c2:
cb:c6:57:88:a6:ef:a2:da:78:f9:e5:23:2a:23:05:
ea:65:46:f3:48:84:d2:7a:8f:39:88:13:91:b4:55:
36:0a:2d:a0:5b:7d:99:7b:1d:db:69:3c:4d:4d:ed:
80:33:97:7c:99:62:2f:7a:6c:44:41:29:a5:69:b4:
10:da:bd:97:e4:25:0f:04:fb:16:92:05:ec:2b:5f:
11:0b:d6:4c:79:9f:d2:5b:8e:f3:43:38:55:c1:20:
8e:bd:d5:7b:fc:a7:ed:22:55:f5:9d:46:f2:02:75:
fe:f8:ae:f9:0f:29:dd:20:70:41:e5:d7:11:63:15:
30:be:37:01:63:51:b9:cd:21:7c:7b:9d:ad:e4:2b:
ce:a5:f8:0a:77:7d:ec:aa:0a:fa:8d:16:c8:29:f0:
85:17:08:50:5a:20:76:2d:09:b0:74:82:5a:c2:07:
cf:38:84:f7:08:30:6a:f7:8d:99:69:69:4b:c1:e8:
01:8b:af:43:c2:e1:28:61:c4:09:e0:74:f2:da:0c:
49:3b:f4:91:de:ff:2c:10:82:59:fc:3a:0a:99:21:
ed:c6:4d:bb:d4:9d:07:dd:0e:8d:0e:ce:9a:59:24:
30:3e:97:b0:9a:89:3b:95:5a:90:8b:7b:4a:63:f7:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:EB:46:9C:F5:36:7A:3B:D7:C5:E5:72:95:34:AE:B6:92:F5:A2
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c8:4a:3f:ba:c0:85:f9:48:38:b6:f3:5d:9e:aa:84:db:51:
63:55:f0:0a:5d:5a:92:6c:3c:f1:c0:64:9f:ea:a7:6e:19:13:
39:5c:9e:ac:1e:27:fb:7d:fb:54:5b:9e:34:31:f8:e0:23:0b:
ee:bf:f0:a6:d1:87:cb:b4:d7:3f:34:ad:69:93:ef:e2:d2:af:
41:a3:22:5d:31:f0:f5:90:55:5b:64:f6:42:a8:9b:8e:13:0e:
cb:6f:75:a7:5e:3c:a2:ec:b9:4b:c1:eb:89:0c:48:3f:a8:33:
24:2e:34:0d:b0:b5:63:fd:21:81:b6:a8:5b:da:e9:f5:b3:fc:
be:81:21:b5:82:85:16:04:25:1c:e9:f8:77:cd:90:a3:09:61:
9b:44:46:4f:4e:4a:69:8e:a3:a4:61:94:19:d9:bf:78:65:bd:
96:52:81:42:1a:d1:fd:2e:b4:84:09:63:c6:9f:5f:98:a1:cc:
71:23:d4:f8:11:7f:44:2c:22:33:bc:26:a6:7e:b3:fb:91:39:
73:e9:12:ac:87:0d:fe:12:57:88:ad:a3:ff:c9:53:b8:38:11:
ed:85:09:bc:27:d3:f0:d5:ea:7c:a6:e8:f7:00:00:86:db:6e:
c5:e9:f2:68:1d:8c:6d:ca:8e:9c:5e:a9:80:a7:e8:41:0e:2d:
11:1c:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:49 2025 by rpki-client