Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: yIvkFmPb3X0k8hkhdwxCIoI6qa1MteA9ykPWVuqFR/M=
Subject key identifier: CE:9D:1A:B7:C4:C3:26:D0:EA:52:6E:1D:8A:3D:01:63:FE:2D:F6:C5
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 0196A0BF8160AF92D4593A82772AA405221F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 08ED
Signing time: Mon 05 May 2025 14:00:27 +0000
Manifest this update: Mon 05 May 2025 14:00:27 +0000
Manifest next update: Tue 06 May 2025 14:00:27 +0000
Files and hashes: 1: Ej_nms6zQmPoJeaI79U3Nd1orY8.roa (hash: +LgVGC9y1iGCqg/hmpi1yux7QukhrPPP6tmv7bAqvWw=)
2: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: ffqtv2IKU+VVnqQY4mhZSqt4hwY3jmzSxOHpn+VFD+0=)
3: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:81:60:af:92:d4:59:3a:82:77:2a:a4:05:22:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: May 5 14:00:27 2025 GMT
Not After : May 6 14:00:27 2025 GMT
Subject: CN=ce9d1ab7c4c326d0ea526e1d8a3d0163fe2df6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:0c:e9:8d:98:26:f7:a7:a6:f9:fe:90:4f:
b8:9a:7c:53:2e:07:cd:04:c7:96:07:34:85:5e:df:
d9:6e:c2:bc:5d:81:27:47:59:f5:b8:17:8f:0a:d8:
d4:e9:51:c8:02:db:e3:31:86:39:3f:53:27:44:9d:
9f:76:27:64:9f:20:f2:8e:8a:cf:73:de:2c:32:62:
00:0d:9b:5e:b2:5f:1d:10:ac:54:56:ee:98:a5:65:
ed:75:88:6b:cb:6d:40:11:28:af:17:fd:e4:f8:91:
19:15:df:9f:df:24:f5:22:f2:89:11:9a:a1:04:ff:
c1:86:ad:97:05:6d:b1:14:07:35:0e:83:d6:da:8b:
3d:85:4f:99:f9:1a:95:05:39:a5:ef:4e:e6:a0:a2:
a6:aa:8f:18:77:54:7b:15:ea:91:ae:4c:eb:8d:62:
9c:e5:95:84:f9:1e:0b:a3:7a:8a:e1:ad:50:09:02:
09:d6:49:41:d0:65:ed:e9:9a:ce:18:c7:c8:a8:8d:
47:d8:4c:9d:73:c3:38:3f:ff:75:d7:64:01:59:63:
ce:43:9f:64:67:5a:28:15:dc:17:95:59:cb:0b:a4:
3f:34:50:24:d8:84:13:2d:9e:ee:e9:87:64:16:e3:
c2:2f:3b:a0:85:b1:74:11:bb:b7:d9:ce:a0:40:8e:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9D:1A:B7:C4:C3:26:D0:EA:52:6E:1D:8A:3D:01:63:FE:2D:F6:C5
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0e:92:80:2f:2e:dd:78:a7:e7:f6:df:44:49:3b:73:6d:ea:
c9:e5:cb:8f:28:02:1f:31:8f:9d:37:d8:41:c1:16:c6:07:ed:
40:c6:a7:ba:64:73:96:ce:39:35:b9:9e:58:23:6b:71:11:35:
a0:92:cf:26:33:e7:d3:bc:f1:86:9d:95:8e:60:dc:ba:08:31:
f5:7c:75:cb:ec:c7:ea:20:bb:ae:9b:0b:e8:a1:8a:1b:1e:01:
d3:a4:3e:26:c6:80:4e:75:b5:d1:2e:17:c0:7a:ce:4d:83:35:
64:13:52:59:7a:31:fb:bc:1d:e3:4e:2c:20:21:15:58:dd:e9:
ce:1b:68:78:8b:3a:9f:a2:7c:52:db:e0:bf:0b:22:4b:af:e3:
e3:22:7c:9b:2c:93:ef:c1:87:b9:44:71:03:5e:f5:6e:e0:43:
07:68:84:bf:47:74:3b:5d:2f:a8:67:df:88:f1:d7:25:79:cc:
8f:37:30:c1:a0:aa:4d:e2:8a:90:67:2d:61:81:b4:8d:33:11:
84:64:0c:1b:95:80:64:ca:0e:d5:19:43:81:a2:75:1f:e9:fd:
d8:54:30:1a:5a:82:56:14:e3:92:9e:80:9a:43:e2:1d:c6:99:
00:90:8b:1a:f0:06:48:1e:eb:f6:66:c8:59:d2:bb:97:90:34:
ba:72:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:23:24 2025 by rpki-client