Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: n2qNrv14556i+48JykDTWtIV+YNFpXIx0E/KTNwwKBM=
Subject key identifier: 9D:96:E2:16:4B:43:A3:CD:C7:A8:74:0B:5B:18:18:A0:82:26:9E:1C
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 0196BE930E77BC7072E8C4B80034B9F1EBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 02E3
Signing time: Sun 11 May 2025 09:00:30 +0000
Manifest this update: Sun 11 May 2025 09:00:30 +0000
Manifest next update: Mon 12 May 2025 09:00:30 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: 8A4z2MzF/vhoWsmi4Ck7ARgEDX7pozoU+/V/5BFyEf4=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:0e:77:bc:70:72:e8:c4:b8:00:34:b9:f1:eb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: May 11 09:00:30 2025 GMT
Not After : May 12 09:00:30 2025 GMT
Subject: CN=9d96e2164b43a3cdc7a8740b5b1818a082269e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:1a:c7:15:97:47:a4:1a:ad:bf:01:87:1a:
d3:89:a3:1f:f8:ab:be:98:7b:52:13:df:f8:e0:a0:
de:12:51:cf:77:9f:e4:94:94:86:b2:8f:e7:18:d2:
dc:58:65:4d:6f:54:0f:a1:3b:38:dd:86:5c:49:55:
ca:1a:83:68:89:55:6a:17:39:0d:10:71:fb:a0:0e:
20:fd:5c:26:31:19:2e:a0:ee:6a:8c:c2:c6:d5:b2:
eb:fe:15:55:c3:2e:78:a5:e1:f2:aa:86:43:6a:56:
c6:bb:6b:74:5b:2c:76:f6:b1:15:7c:25:15:28:e4:
0f:17:f8:88:7a:90:b6:6c:04:54:f4:c5:62:99:9a:
f9:bf:83:d6:a6:15:2c:04:81:a0:05:e6:8d:ab:1a:
f7:72:0c:a3:0e:18:40:85:ec:1b:e2:da:f8:ec:3b:
12:49:39:36:4a:a5:18:9a:a5:40:a2:fb:1c:26:e5:
ff:2a:ca:7b:33:c7:fc:54:77:6b:ad:83:b6:08:56:
2f:29:71:31:5a:32:45:d5:7e:aa:03:4a:b5:9e:86:
38:4e:98:9d:ae:19:75:05:ee:00:80:34:bd:6f:63:
91:9f:22:60:69:c4:87:5a:1b:b5:88:01:a2:f1:52:
81:55:60:f9:da:e1:06:dc:4f:ca:86:cc:10:0f:18:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:E2:16:4B:43:A3:CD:C7:A8:74:0B:5B:18:18:A0:82:26:9E:1C
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f1:7d:c3:97:d5:29:16:08:ae:c9:e9:7b:41:72:e5:43:1d:
f1:a4:05:af:68:19:79:2a:77:9a:1a:47:5a:14:df:21:08:94:
c6:f5:59:f5:b4:a1:10:46:54:17:a7:d8:b3:d8:13:8d:74:8a:
32:a6:8d:d7:2e:41:fb:e0:4b:11:dc:52:c2:ea:ac:83:a6:a4:
83:c5:23:52:f7:bc:e2:99:fa:0e:2a:31:19:81:01:ca:6e:27:
ac:37:ea:c2:94:fa:e9:14:f6:c6:86:93:8b:bc:db:df:b5:35:
a5:09:1d:af:67:8b:9a:6f:e9:9d:d7:d0:e5:17:e5:00:17:af:
ef:39:df:94:bd:98:1b:1c:7e:c3:8e:c4:42:a1:97:16:09:a9:
88:e5:e1:a1:07:47:75:74:55:57:85:a0:af:23:77:ce:93:8e:
67:5b:fb:75:20:8e:b8:80:a1:08:35:d9:56:b7:ee:ad:13:de:
7d:36:09:b7:ef:ca:bf:91:cb:ef:77:0a:1f:49:0e:a3:6d:25:
a6:16:3b:c4:6d:3d:c2:62:1f:73:97:57:55:53:62:4b:c1:81:
66:57:21:f3:eb:25:05:a7:35:25:e6:a2:07:b2:a4:b6:3d:b3:
0c:00:80:ca:4a:e5:ce:ae:32:72:c2:9c:8f:fa:96:46:84:76:
73:01:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:50:49 2025 by rpki-client