Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
File: HzkK-DPX1CaQQsJJvPSWSFcglbY.mft (raw, json)
Hash identifier: dG0EgIkcRQnkjWBwlTrDfSvH+MnETHbIQqU1OXYYiMM=
Subject key identifier: 6F:17:4E:FC:96:EC:33:18:09:CC:90:F3:32:00:73:E8:3F:9C:E6:12
Authority key identifier: 1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
Certificate issuer: /CN=1f390af833d7d4269042c249bcf49648572095b6
Certificate serial: 0196C34BEB64FBCF1FF6AF45952D195A5E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
Manifest number: 0FD6
Signing time: Mon 12 May 2025 07:00:54 +0000
Manifest this update: Mon 12 May 2025 07:00:54 +0000
Manifest next update: Tue 13 May 2025 07:00:54 +0000
Files and hashes: 1: HzkK-DPX1CaQQsJJvPSWSFcglbY.crl (hash: ue4E8HFDUb5Yrnh3sMA9DOsXsEF4cGtoAmC2WkJoxuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:eb:64:fb:cf:1f:f6:af:45:95:2d:19:5a:5e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f390af833d7d4269042c249bcf49648572095b6
Validity
Not Before: May 12 07:00:54 2025 GMT
Not After : May 13 07:00:54 2025 GMT
Subject: CN=6f174efc96ec331809cc90f3320073e83f9ce612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:61:f9:2d:9a:e1:28:6b:f5:55:2d:15:11:
64:05:6a:b9:46:df:30:98:55:a6:76:f2:de:29:5d:
5f:f2:bd:b6:30:8d:31:aa:1e:83:6f:ff:8a:09:41:
e0:79:b4:53:6e:c2:29:05:3d:a4:25:b1:f5:e8:c4:
2f:95:44:70:05:43:4b:59:b5:de:5f:d7:86:d7:f4:
79:48:ae:45:da:b1:05:bf:03:48:d5:e8:00:9c:8b:
62:4b:87:ab:5c:fb:0f:9c:07:69:98:08:76:04:7f:
bf:0e:79:5a:4c:ee:6b:ce:c2:bf:7c:00:0a:87:92:
cd:a9:84:98:88:7f:75:e3:fb:d6:94:b0:89:d8:20:
29:f4:aa:a9:08:dd:8e:ec:5c:30:a0:ec:2e:e1:ee:
b7:86:4a:4a:ff:69:ba:0e:ab:c7:af:b5:62:8f:fd:
7d:f4:5e:a5:9f:49:45:5c:a5:36:d3:1c:db:97:87:
0f:ab:e4:67:f3:71:c5:cf:eb:10:39:93:94:e5:46:
74:75:1d:4b:c9:32:53:e4:73:3e:21:d1:b9:0c:f0:
fb:f8:d4:87:8c:f7:99:d7:59:ad:e0:99:61:14:73:
18:d4:15:42:25:04:3a:1a:84:0a:29:b1:1b:97:91:
d5:37:88:ac:5b:82:32:84:82:a2:01:d6:d1:f4:f3:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:17:4E:FC:96:EC:33:18:09:CC:90:F3:32:00:73:E8:3F:9C:E6:12
X509v3 Authority Key Identifier:
keyid:1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:92:2a:ac:9f:09:d7:77:cd:ab:b2:ce:74:1f:68:45:72:d9:
37:8c:6e:7b:bf:4c:d9:b0:88:6c:38:49:1e:d7:ed:26:e5:dc:
d7:a2:b9:04:df:45:1c:b4:d8:a2:90:ee:e8:86:72:48:2e:ff:
98:08:4c:7b:40:2b:d1:0d:2a:d4:67:fa:67:64:1b:ff:47:6e:
aa:0e:d8:d3:eb:1c:a2:4c:3b:5b:ae:9a:0e:a4:0d:c8:e4:73:
d5:61:79:aa:ad:64:5c:56:e5:82:d0:b7:02:10:91:2c:50:3f:
56:65:11:d7:b6:9a:ac:f5:d6:30:5c:1b:1a:90:3b:30:85:7a:
46:37:54:25:19:2c:5e:0b:69:2b:a9:04:0d:94:ef:14:d9:b6:
e8:ec:92:2f:ac:c6:bc:49:2b:6a:fa:63:fd:ae:c4:35:77:20:
64:4a:de:74:dc:53:d9:43:32:9b:59:ff:4c:69:8e:e1:ef:e4:
38:65:20:af:ef:91:69:75:52:90:28:3f:9a:ad:a3:3b:e5:9e:
64:c2:bf:11:4e:42:ac:33:04:ae:0e:15:78:d9:39:ef:89:30:
21:43:c1:ea:00:f5:2a:a8:a7:02:29:28:da:5d:fe:4c:ac:b9:
46:5a:42:a5:aa:ff:07:c5:73:28:55:57:58:03:88:cb:48:e5:
95:8b:44:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:52:08 2025 by rpki-client