Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: tjROLeuhOiQ+KPNLFHK5BVyMykbqeNG3UzrU/w1ERIA=
Subject key identifier: 82:CD:A0:A0:5E:C6:1F:28:52:DB:BA:DA:2F:BC:CC:66:E1:0C:0A:EA
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 0196CB72C55119B6C6C0567CE207840B86D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 04FB
Signing time: Tue 13 May 2025 21:00:18 +0000
Manifest this update: Tue 13 May 2025 21:00:18 +0000
Manifest next update: Wed 14 May 2025 21:00:18 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: AM32c8jLOJu3jCPLwDpt9ebl+u28tlGJ9fXfugGVQ3Y=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:c5:51:19:b6:c6:c0:56:7c:e2:07:84:0b:86:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: May 13 21:00:18 2025 GMT
Not After : May 14 21:00:18 2025 GMT
Subject: CN=82cda0a05ec61f2852dbbada2fbccc66e10c0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:9a:bb:76:5c:45:fb:c6:c3:a8:04:5e:36:
69:5b:bd:70:bd:8b:0b:f1:8f:44:8d:f9:ff:db:fd:
32:b6:b8:8d:4e:b6:22:40:3c:e8:dc:05:33:23:9c:
b9:e0:92:1a:71:10:c5:97:f6:d4:14:3b:b3:70:46:
36:ee:0c:ef:37:0e:ae:3d:e9:1e:42:be:c4:b7:ca:
2f:69:a5:2a:90:34:34:47:0a:ad:67:fa:bb:0d:8f:
a4:55:f4:47:0b:d5:a1:64:39:fe:ea:17:36:f1:69:
0d:f3:33:b5:c0:ca:0f:25:ff:d9:6d:99:3f:98:8b:
2b:55:e3:b9:ef:bb:56:c4:64:d1:34:5d:07:41:0a:
6b:c2:5b:52:ee:41:79:e7:4e:d1:39:91:77:ab:5a:
c1:d2:e1:6b:6c:75:ff:40:94:ec:4e:16:8e:12:43:
77:1e:78:d8:d3:6a:55:39:78:e6:b2:98:dd:d0:a3:
5d:6e:f3:0f:5e:cb:cb:4e:47:ed:70:ca:c4:b5:ec:
ad:49:a7:12:39:53:2b:a3:45:5d:92:59:7a:56:3b:
63:6d:34:83:b6:57:54:ed:a9:8d:fd:81:a5:38:c8:
70:4b:18:2d:04:4d:d4:82:ea:74:47:94:ab:0e:24:
e1:21:b4:bd:73:bc:47:d4:52:25:86:54:94:c5:7e:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:A0:A0:5E:C6:1F:28:52:DB:BA:DA:2F:BC:CC:66:E1:0C:0A:EA
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ec:b8:b8:47:ca:e4:65:34:c8:44:4b:41:54:1b:af:60:e2:
45:15:70:ee:dc:f2:32:dd:d3:9a:0a:91:5a:f1:46:1d:1e:ca:
9f:c6:e8:fb:e5:f1:ae:e6:a5:55:82:39:58:da:71:30:28:4a:
ff:cf:04:dc:be:ac:42:7b:b8:3c:d1:82:1c:97:09:65:f5:44:
5f:e5:30:2e:08:e6:9e:3e:b8:e9:31:2b:57:dd:de:e0:5d:81:
6c:6a:b2:17:c6:97:0a:b8:62:5c:3d:cd:9f:3d:05:e5:4f:14:
58:f5:95:fa:0b:16:c3:d1:6b:72:22:b9:ee:18:4c:95:ec:65:
b6:96:7e:87:bf:c2:ee:81:fd:c1:0e:e8:99:4e:3c:8c:9f:b8:
de:19:94:2e:72:e5:ac:8f:ae:76:6a:95:96:91:40:54:f4:e5:
d9:c8:b3:80:73:a7:b4:ef:4c:c3:a3:06:4c:6d:03:c3:01:70:
c8:11:48:e3:2e:ef:bb:fe:b9:ec:74:47:99:70:30:f4:58:2c:
65:9e:a6:17:ac:8a:f3:4d:bd:3e:b4:92:a9:44:ba:35:f3:29:
f2:eb:9c:42:49:94:53:93:dc:5a:f7:a5:22:e2:0d:dd:ac:d0:
94:89:d1:4b:9a:9f:66:8d:48:30:03:bb:22:ae:62:96:c6:1e:
73:4e:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:00:41 2025 by rpki-client