Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: 32soChOLJPIG4WwaddxcjD4uUkcXIQsRT85xRVGoGZU=
Subject key identifier: E1:C2:D7:EF:79:98:EE:26:28:11:56:4E:39:67:D1:C0:5D:70:60:94
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 0196A80B6D9A907266A127B01847D181E9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 01FB
Signing time: Wed 07 May 2025 00:00:43 +0000
Manifest this update: Wed 07 May 2025 00:00:43 +0000
Manifest next update: Thu 08 May 2025 00:00:43 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: Jon/iW/1hhGN+jwWYPSzezuuDvxhe5llaRLf5G0BIsA=)
2: liqpeGCwYwmu9HIJXhtRdiCnJ1w.roa (hash: PH03F8UhRKFA3g0ZorCZDIyppRrDIopkxrEtCKPjXS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:0b:6d:9a:90:72:66:a1:27:b0:18:47:d1:81:e9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: May 7 00:00:43 2025 GMT
Not After : May 8 00:00:43 2025 GMT
Subject: CN=e1c2d7ef7998ee262811564e3967d1c05d706094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:ef:a1:dd:29:67:ae:24:7e:69:77:6f:ba:
b7:75:f2:a3:92:b4:1e:98:e5:31:46:79:7b:81:59:
b1:92:84:58:8f:f7:c8:a1:e1:ff:92:48:de:1b:27:
be:bf:65:48:ff:e9:4f:5a:bd:46:a5:b8:37:35:37:
d7:e9:67:80:36:23:62:de:6f:00:a7:c4:74:32:3b:
28:9d:ca:68:a3:ec:90:56:10:57:17:f6:2a:e0:bc:
cd:8c:6a:93:63:96:ee:97:4e:b6:47:ed:71:7f:60:
5e:21:eb:8b:13:77:fd:9a:f7:16:ed:94:d9:dd:06:
10:6f:48:25:a5:88:56:8c:dc:da:ac:cd:68:b2:80:
7b:87:6c:23:fd:bc:c8:67:94:7f:a1:6a:16:2e:73:
4d:fe:bf:c2:0b:60:5f:2e:e0:65:d2:97:e3:3f:bc:
39:a6:28:c6:19:60:db:96:f7:06:3b:d8:74:ac:5d:
c8:90:ce:ab:83:e1:02:51:df:6f:7f:30:f7:b3:09:
3a:d5:41:8d:df:7a:63:26:6b:96:f6:24:b0:7f:02:
08:1e:ca:44:ec:46:b5:b0:fd:60:c3:d1:d0:d1:6e:
a1:98:b9:ea:29:50:f0:50:51:d5:63:05:13:c7:b0:
75:85:d9:c9:c9:c4:46:d9:5f:9b:c1:86:7c:7b:47:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C2:D7:EF:79:98:EE:26:28:11:56:4E:39:67:D1:C0:5D:70:60:94
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8c:87:62:f2:76:01:5e:6e:49:d0:b1:c0:17:34:3d:b1:39:
c4:35:df:82:57:02:b1:8e:47:d1:c3:54:c8:74:30:bb:d8:c0:
eb:9c:0e:f7:e3:28:cb:92:9d:99:42:a1:60:fc:d9:b9:e6:6b:
90:d8:36:8d:d1:c0:64:f5:c5:73:ea:48:be:2d:e1:77:e3:e1:
7b:12:d0:07:d9:7d:21:c5:77:50:d2:74:fe:fd:44:00:15:4e:
44:f2:d3:0c:99:55:19:78:1b:2b:7a:e8:3b:2b:23:2f:1b:40:
1c:0f:54:12:e4:b7:d7:c2:9b:a6:6b:47:b5:08:3e:6c:77:c2:
2f:87:43:ca:50:c6:74:57:91:cf:a1:15:2a:e8:ae:1c:1a:30:
cb:34:a7:5a:d8:d5:a8:12:17:97:b8:7e:da:1c:ae:82:20:b4:
e9:1f:c3:02:e5:9f:04:bf:0a:89:d1:fe:de:1a:38:c6:01:b2:
f1:9d:1f:92:95:79:b6:80:d1:43:31:95:c8:81:ad:f4:35:e0:
7c:da:34:34:8b:30:1d:ae:82:3b:e8:4b:c1:f5:d7:5c:7d:72:
7b:24:e7:02:4b:72:65:c4:be:ed:dd:99:b8:0e:cd:bd:b5:dc:
dc:14:4d:8c:32:fd:2e:7e:22:5f:82:a5:d1:8c:aa:a1:b3:ea:
35:8d:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:04:54 2025 by rpki-client