Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: LmD+QPODK557IT2NgVl+wTs/IJ9IG3u2Ln1P6RFaAkM=
Subject key identifier: 14:B8:31:7F:2C:DC:7E:8B:5C:E6:4B:A3:D5:D2:AB:E8:43:A3:FE:3D
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 0196BB5ADE3228B78C15EB84D042B1705A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 0D95
Signing time: Sat 10 May 2025 18:00:16 +0000
Manifest this update: Sat 10 May 2025 18:00:16 +0000
Manifest next update: Sun 11 May 2025 18:00:16 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: thrdII+36DYvTQCkBtYWF9EU6avWOOs39ehCqoDLgP4=)
2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:de:32:28:b7:8c:15:eb:84:d0:42:b1:70:5a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: May 10 18:00:16 2025 GMT
Not After : May 11 18:00:16 2025 GMT
Subject: CN=14b8317f2cdc7e8b5ce64ba3d5d2abe843a3fe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:ea:2f:d9:d7:09:22:3e:9a:9f:bc:85:ad:
b8:fa:11:6c:ec:6d:24:4f:cb:54:8e:96:78:2e:eb:
6b:45:31:2b:ed:55:c1:05:6f:2c:a0:5f:f8:73:52:
bd:40:60:c2:de:fb:72:26:54:37:b2:33:52:2f:1d:
b8:95:ed:81:ef:59:79:54:97:67:87:55:3d:b7:43:
d2:e1:b2:0d:44:fc:37:fa:18:9b:c5:06:9a:bc:6f:
57:6e:9f:d0:6f:f8:ca:15:63:2c:8d:67:2f:72:96:
91:87:93:96:61:d0:ba:e6:1e:f5:4a:5d:e5:b3:49:
55:8b:01:08:43:07:d7:b3:84:40:49:2c:79:91:79:
76:50:e8:81:14:92:a3:10:4b:ff:68:98:8a:ad:7e:
9d:8f:6f:14:77:47:fa:3d:81:28:87:30:64:df:b6:
ed:7e:dd:6f:5c:d6:79:ed:25:3c:35:aa:f1:97:b4:
ea:e3:93:c3:3d:18:49:39:51:4f:5b:51:c0:2c:d4:
26:2e:df:6b:e2:6e:e7:56:ab:cb:fe:67:36:0e:27:
3e:ec:89:bd:40:f7:79:fd:e2:af:c0:4e:d4:3d:d5:
ff:c4:18:4d:1f:fc:80:f9:29:f7:ca:42:e9:d4:78:
50:59:b3:d7:e6:89:72:cf:94:09:f1:6d:b4:b2:77:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B8:31:7F:2C:DC:7E:8B:5C:E6:4B:A3:D5:D2:AB:E8:43:A3:FE:3D
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4e:74:69:13:a9:f9:76:a2:ab:d3:7e:4d:c8:3b:44:62:08:
72:03:4a:a4:6e:8f:88:4f:b9:5f:6a:bc:b4:b4:dc:9f:03:3a:
58:ef:4a:3d:5d:c7:70:42:24:e6:41:0e:b6:f1:de:ff:5b:d5:
10:fc:54:0a:ed:a4:95:98:13:3b:d2:4c:b8:fa:1f:49:5b:14:
2b:28:1f:20:35:58:4f:69:2f:c2:64:e0:3e:94:4b:a8:aa:3c:
9a:ec:3e:51:9f:d9:b8:32:dd:5c:00:3b:97:c0:09:48:10:48:
98:85:b5:75:eb:11:7c:a9:12:28:2e:87:00:c5:b6:af:0f:e2:
ff:f6:66:c0:df:fc:4d:b1:64:25:db:ea:20:9e:23:52:6e:a2:
c4:d3:ea:38:cb:45:31:43:63:a0:1e:9f:b0:33:83:66:08:66:
3d:32:93:a3:04:b8:ea:8b:72:13:3a:19:f3:c6:f3:f0:83:52:
ef:63:3e:2d:1a:4e:87:a2:83:6f:92:67:a0:88:90:a4:ec:08:
4d:68:29:51:4a:94:d8:13:7b:f1:6b:b3:8b:e5:7b:ba:f4:e7:
ae:6f:5e:a3:30:3b:81:0a:cc:fc:27:a3:7b:e2:1b:0a:40:a1:
fe:9b:33:16:ab:99:d0:72:a6:3f:70:84:09:d0:20:2f:5a:98:
cd:36:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:19:05 2025 by rpki-client