Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: nuX9N9jggpjuU+3VG2EbazukL882VlzX/+/HoztyM+4=
Subject key identifier: E2:35:C3:50:D6:68:91:30:44:6F:D0:7F:84:63:40:39:54:3E:66:11
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 0196B9A48AB4E2115145E1DF64E87623E806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 032E
Signing time: Sat 10 May 2025 10:01:30 +0000
Manifest this update: Sat 10 May 2025 10:01:30 +0000
Manifest next update: Sun 11 May 2025 10:01:30 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: d0DbviaGUCH242ACxq+1cGSZAZlmqDbfaDbGl++Ck/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:8a:b4:e2:11:51:45:e1:df:64:e8:76:23:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: May 10 10:01:30 2025 GMT
Not After : May 11 10:01:30 2025 GMT
Subject: CN=e235c350d6689130446fd07f84634039543e6611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:2d:84:6d:c2:12:48:23:4e:74:b6:40:b1:
d6:8d:68:44:f5:54:0d:1b:c0:c2:6b:54:9b:86:66:
69:11:ac:ec:95:86:8b:05:1c:47:eb:27:c6:9e:5b:
b3:88:ec:3b:0c:86:41:d8:b6:f8:e4:bd:a1:b2:9c:
06:d3:d7:19:eb:dd:27:b2:6f:9d:b2:52:95:77:2d:
ef:0f:76:3d:51:e2:06:12:94:3f:bc:60:b3:60:2e:
13:a6:5e:bb:85:19:2b:ea:e1:7a:38:24:ee:94:70:
2b:e1:7a:48:23:a6:1b:48:df:52:e9:fa:7d:04:b7:
7f:90:22:cf:b2:93:8c:ff:ab:eb:ac:4e:17:93:5d:
cf:b9:18:75:c2:bc:5b:75:97:6d:d6:82:80:d8:47:
db:e1:32:9d:ed:cb:be:e2:cf:82:0e:74:b0:a4:0a:
55:f5:7f:25:93:54:26:1d:c8:49:1e:a2:9a:3d:09:
4c:0d:cd:cc:1c:c2:8b:77:86:c6:a1:64:7f:a2:45:
bd:7d:b4:76:d8:e7:24:6a:2f:15:54:1d:25:77:8f:
57:3d:e3:fe:59:40:3e:5f:0e:34:3c:f6:7e:29:60:
e1:d5:7a:38:46:20:d2:99:89:48:f9:fd:61:a6:b8:
8c:59:f7:fb:0a:2d:5b:88:b9:19:d6:cc:d0:ba:ec:
fe:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:35:C3:50:D6:68:91:30:44:6F:D0:7F:84:63:40:39:54:3E:66:11
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7a:f3:35:51:ec:b2:07:ac:34:07:ca:71:62:6d:c2:b0:52:
a7:8a:97:ef:fc:27:16:6a:15:45:41:68:86:26:c5:3b:73:f3:
be:d6:3a:e6:a3:fd:8d:5c:f2:74:85:60:87:3a:77:f6:09:b8:
3e:49:c9:64:21:89:42:4a:b0:3e:46:e2:b1:75:c9:64:68:02:
c4:ac:87:a2:72:b3:01:cf:9b:8f:4b:93:d9:c7:9a:0c:bd:56:
49:e1:7f:e6:ca:4d:c8:42:9e:00:e1:33:bb:de:53:6f:9d:98:
3f:9a:4b:12:2b:ec:5f:e2:42:68:dd:30:e6:4e:c9:3c:1f:41:
04:aa:c6:c3:fb:3a:78:52:aa:f8:02:6e:ca:75:02:cb:2b:22:
e2:76:2b:fc:e5:2f:6a:e2:6a:67:1f:a8:eb:2e:b1:00:75:74:
24:4c:81:4e:9c:3a:00:84:06:de:d3:cb:e4:67:11:35:e2:8a:
5f:5e:ef:47:c4:11:c9:a1:ef:cf:de:be:77:99:37:40:f9:cd:
c8:f0:29:51:a0:f7:d9:67:0b:c7:b0:9e:47:6f:3b:11:86:ab:
61:ed:e7:35:16:24:21:1f:9d:38:f3:53:80:16:f9:ef:4f:40:
ab:82:c2:00:51:83:44:7b:8e:cc:96:6b:92:6a:3c:d8:53:36:
90:e1:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:09:19 2025 by rpki-client