Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
File: HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft (raw, json)
Hash identifier: o1eJtLCCntzLeK1piBUm72y/pXuz5aCHM2JKRNUKz/Y=
Subject key identifier: 44:66:E2:18:29:B4:8A:9E:AF:58:8D:76:71:6F:99:93:0E:F5:4F:02
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 0196B6A31573F7255FF67FC4BD637866F174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
Manifest number: 1532
Signing time: Fri 09 May 2025 20:01:03 +0000
Manifest this update: Fri 09 May 2025 20:01:03 +0000
Manifest next update: Sat 10 May 2025 20:01:03 +0000
Files and hashes: 1: HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl (hash: CO1wUVZ8/0EsuqyDUSMEU8ovLWruuFyGMGjLc3JDupY=)
2: UhsTPDlkEVTfjN0gtgklGlfn_mQ.roa (hash: gvwxeqU03k4MQD3WdF59OWVu6wgm7kgHM+ORIWuetR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a3:15:73:f7:25:5f:f6:7f:c4:bd:63:78:66:f1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: May 9 20:01:03 2025 GMT
Not After : May 10 20:01:03 2025 GMT
Subject: CN=4466e21829b48a9eaf588d76716f99930ef54f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:8b:61:d6:11:db:74:46:18:ae:ae:79:b9:
82:de:cd:e2:be:f8:44:9a:88:ed:56:a6:26:b4:9f:
4e:3a:d8:60:52:bf:ec:ab:3e:3a:4f:a2:50:31:cc:
c3:80:bc:95:87:20:71:74:e7:75:e0:61:d6:8f:d9:
73:5b:94:8f:02:7d:17:94:bc:89:4f:28:3f:d4:9f:
3b:87:2a:1e:40:66:bc:e3:08:25:a4:57:ce:41:c6:
a3:a2:72:ae:7a:83:ea:b7:6a:1b:99:24:4e:9a:02:
79:c1:3f:6d:ec:cb:ec:5b:d8:60:88:59:95:87:1a:
eb:38:1f:71:d2:60:a9:e5:da:e0:d0:d3:21:45:3b:
83:4a:fa:e9:aa:2b:ac:2a:7f:f3:a6:7d:60:50:a6:
51:48:ed:3f:8c:b5:7a:32:8f:16:24:7e:19:af:4d:
59:61:a1:7c:d4:01:d8:2a:75:73:dd:6c:05:82:b1:
44:fa:5d:82:df:60:4d:29:68:1b:c7:a4:52:38:63:
2a:2e:cd:44:17:8e:0a:dd:c3:44:e4:a6:83:83:05:
ff:f9:7d:96:3a:38:df:35:ad:8a:43:18:35:1c:65:
be:92:bb:dd:14:46:a9:2e:bf:e2:c5:a4:9a:2f:59:
17:bc:38:ca:b0:3e:8c:26:ed:6c:43:30:64:84:a7:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:66:E2:18:29:B4:8A:9E:AF:58:8D:76:71:6F:99:93:0E:F5:4F:02
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8f:d6:26:54:92:29:74:b2:ae:a8:37:30:ed:8c:94:3b:65:
bf:1e:20:01:e3:78:ed:1a:49:26:88:99:b3:eb:8c:00:d8:df:
52:c4:0d:06:a8:dc:6a:18:b3:3a:8c:93:15:99:cb:0d:de:a5:
9c:21:2b:84:fb:1f:7b:1b:ce:fe:d2:39:d0:81:5e:42:7d:fa:
bc:b3:9a:32:d4:45:bd:8b:4a:a6:73:3c:b1:37:ca:80:d3:0a:
4f:c8:94:d4:99:18:48:f4:e5:08:85:90:b9:54:62:28:dc:2a:
0f:c6:47:8c:a1:47:0b:00:8e:b1:b1:07:42:5d:7b:37:24:4f:
b9:c5:2a:83:01:39:f8:fe:76:96:c6:bc:4b:93:c1:1f:44:67:
9a:eb:5d:00:da:bd:ad:1c:98:f3:58:e1:84:16:34:1d:e4:c7:
65:ea:a5:60:23:4b:e6:bf:b5:70:fb:b9:12:49:8a:08:36:aa:
bb:44:93:c3:e6:22:41:f9:be:66:2d:42:57:03:c8:b7:8f:9a:
1d:bc:cc:d5:67:f8:db:8c:44:70:d2:1b:90:6e:7b:da:a5:8c:
ee:85:f9:32:51:6f:f9:9d:98:af:c4:1e:1e:fc:8f:e4:cf:5a:
71:fd:10:6a:3b:b8:41:1d:c6:b9:37:9e:44:29:24:17:42:2c:
5a:46:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:26:39 2025 by rpki-client