Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: 9OxcBJZB8w1Y/EWjmOYgAgD1RIIPoGBqto0G1RtB4pM=
Subject key identifier: BF:68:98:ED:3D:A9:DF:62:A2:B3:E2:63:B9:05:E9:DD:B8:E2:95:51
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 0196D1077118C7CD282C3FBA3B022D68E7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 0D99
Signing time: Wed 14 May 2025 23:00:47 +0000
Manifest this update: Wed 14 May 2025 23:00:47 +0000
Manifest next update: Thu 15 May 2025 23:00:47 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: 8bBke4Q1bUIkt0+ycTEQPYzmFxmKWt3AQ06p3hj7+9w=)
2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:07:71:18:c7:cd:28:2c:3f:ba:3b:02:2d:68:e7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: May 14 23:00:47 2025 GMT
Not After : May 15 23:00:47 2025 GMT
Subject: CN=bf6898ed3da9df62a2b3e263b905e9ddb8e29551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:c4:3b:aa:85:be:43:15:90:1c:b4:9e:e0:
ef:2a:b6:7e:4c:f2:87:2d:76:8c:e9:53:00:64:dc:
9c:65:a5:78:29:50:03:e5:9f:b3:f2:9b:89:d4:0d:
bc:8c:2d:79:52:1d:18:16:78:95:ab:ff:62:a3:d4:
5c:09:91:a7:47:07:90:c2:49:59:9a:99:01:72:f9:
8d:2a:89:b6:54:87:e2:8d:01:94:65:51:e7:34:3b:
07:76:75:56:0c:ab:03:57:6e:b7:2b:25:13:5c:f5:
8e:00:88:79:cd:c8:d9:da:52:f0:da:7d:71:81:ba:
12:5b:3b:1e:ce:ab:21:59:1d:65:3f:ea:c7:ef:70:
03:74:1e:2e:e7:52:03:a6:f0:15:18:4f:0c:c7:75:
f9:05:66:e2:53:14:77:13:6b:b3:66:28:15:27:dd:
15:4a:8f:ca:2d:1f:e1:4d:91:c8:b3:f6:91:9e:1e:
e9:0f:73:ec:06:ae:02:24:c2:ff:da:7f:8c:ec:93:
fb:36:b9:5e:b9:1a:28:17:e2:e5:62:3f:78:a6:50:
24:f3:dc:02:2f:f0:d8:0d:ed:e7:4b:b7:f0:74:ff:
00:1a:97:1e:b5:b4:a6:e2:58:07:c6:43:6b:0a:12:
f5:5b:48:ef:02:ef:71:4d:62:2d:5f:e3:06:5d:f6:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:68:98:ED:3D:A9:DF:62:A2:B3:E2:63:B9:05:E9:DD:B8:E2:95:51
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ba:c8:11:38:c4:b8:a9:ef:fc:12:50:0c:a1:44:b7:35:7e:
14:ab:7b:b1:0d:56:43:9b:43:42:06:3c:90:f3:77:2a:3a:43:
bf:3c:4e:4d:6e:e5:dc:09:5d:65:17:32:5d:e6:f7:52:d8:ec:
60:6f:74:4b:63:5e:a9:7a:81:17:76:fe:f2:0a:09:f5:61:73:
5b:17:93:3d:01:c7:5f:7b:9f:e6:9b:93:b8:0c:2c:13:88:8d:
e7:cc:14:c5:12:da:58:a9:26:7d:d4:83:9a:e6:15:c6:2a:aa:
c9:d1:ff:99:35:35:5b:ca:f0:6a:cd:90:0e:50:b8:68:5b:20:
d6:d2:52:8a:f0:57:44:5a:59:d0:d8:98:fa:e8:cf:e7:61:cb:
ac:cb:fe:06:d6:1d:db:b0:81:a3:f3:3e:7a:99:a0:fd:02:1d:
50:67:49:d7:21:f3:b6:2c:b8:03:3c:a8:7a:1f:8b:40:35:8d:
ed:ce:cf:40:71:8b:6f:77:48:ce:97:b4:fb:64:01:49:5a:15:
e8:cd:24:4f:0b:16:96:a1:7f:3b:e1:b7:0c:1f:d7:2e:33:68:
02:77:40:e2:3b:f8:8b:83:85:a4:54:a3:2c:8a:c3:6d:1e:49:
6f:42:c2:f8:a0:36:3c:07:79:29:3e:5a:ca:7d:2c:59:5c:60:
8a:61:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:58:06 2025 by rpki-client