Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
File: 88huoplek0tlBBkRy562WHLCKJ8.mft (raw, json)
Hash identifier: swStCoCZqnUNE8adQo0k0f+yv8gXKkgLuUgw+0BZj/E=
Subject key identifier: FE:56:43:69:64:D1:94:2D:B1:BF:13:80:E9:33:D8:78:92:3F:53:B3
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial: 0196BD49B2198320B2DF3B4312120E7E6163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
Manifest number: 1428
Signing time: Sun 11 May 2025 03:00:45 +0000
Manifest this update: Sun 11 May 2025 03:00:45 +0000
Manifest next update: Mon 12 May 2025 03:00:45 +0000
Files and hashes: 1: 88huoplek0tlBBkRy562WHLCKJ8.crl (hash: cJOfdxDHi0Mo4C68/Aplo2YL+jmhZkPF4jyNKTT4CPo=)
2: hvBR5Lh2V5nBCkDL4kLbjgOv4x4.roa (hash: roHQdZzbDc98BWIijFr4uNTSgf0x5DY16Sjtlk2cSOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:b2:19:83:20:b2:df:3b:43:12:12:0e:7e:61:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Validity
Not Before: May 11 03:00:45 2025 GMT
Not After : May 12 03:00:45 2025 GMT
Subject: CN=fe56436964d1942db1bf1380e933d878923f53b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:ec:a5:63:17:1f:82:d9:dc:e2:34:80:a4:
8d:cb:1d:e2:70:79:2d:4e:f8:28:67:ae:03:32:24:
03:fa:10:ee:87:b2:af:26:d1:87:e9:3c:a7:59:7d:
7b:f5:75:6e:5c:92:d2:44:74:66:67:6f:11:2f:5a:
61:81:ea:e5:03:b0:d9:13:ad:bf:a3:0f:74:ed:ad:
57:74:5d:2b:43:06:2e:06:8e:b4:01:5b:9e:1d:1d:
ae:5a:96:ac:fb:b0:5d:21:e5:f2:b2:51:37:5c:66:
14:95:1a:d9:84:ab:57:df:b3:a0:f8:b2:5e:fe:aa:
74:69:cb:ab:94:67:43:a4:c8:82:1c:69:96:12:85:
43:9c:f8:40:15:24:9c:9b:e9:f5:7c:40:6f:c0:25:
59:92:1f:f9:95:27:d7:7f:aa:a8:f6:bc:44:5b:fe:
56:ab:af:f1:8d:d9:e5:31:d7:5c:f1:3e:46:ca:e6:
c0:cd:b6:3b:c7:19:bf:fa:f5:6d:50:a6:6e:57:fe:
94:97:39:d2:5c:f0:f9:f5:17:53:88:c0:48:09:9c:
38:d4:bb:18:3f:bd:ac:5f:a5:c1:ce:90:02:fc:d8:
57:e9:a5:61:d1:19:6d:5f:3e:98:1d:8b:a7:66:ad:
e4:47:bf:35:77:80:cb:9a:ef:89:fe:eb:b0:c0:c9:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:43:69:64:D1:94:2D:B1:BF:13:80:E9:33:D8:78:92:3F:53:B3
X509v3 Authority Key Identifier:
keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:15:7d:26:57:1b:c7:58:33:f7:85:ea:43:d6:7e:55:a6:02:
ef:e5:f4:39:97:5f:d2:dd:f3:e1:64:72:3e:46:d6:e5:9c:cd:
6d:2e:54:ca:c2:08:a6:9e:04:11:89:48:ea:05:af:24:02:68:
b7:65:58:67:d5:84:26:dd:b2:64:8a:ae:ef:fa:1c:8c:b9:49:
43:1d:f5:3a:0c:b7:0d:e8:85:03:be:a7:3c:d3:c6:50:88:e3:
28:69:d9:92:05:d4:11:05:7b:83:a5:4e:9a:86:3b:44:7e:f1:
a5:21:53:06:2d:61:ef:8f:19:87:b5:e0:b8:36:2d:c9:c4:84:
72:11:18:ae:9c:44:20:24:0e:3b:8d:c2:dd:a4:a0:00:16:62:
4b:d2:43:41:98:e0:ce:d9:ff:64:e2:4e:2b:81:32:75:b1:08:
ca:92:03:c7:a9:bb:72:be:c1:d2:e5:94:36:35:cd:d9:34:3e:
84:b2:8f:10:bf:30:ad:f1:04:f2:3c:75:a3:fa:82:5a:a4:5f:
dc:25:1a:10:0d:2a:c0:33:3a:4d:fc:32:9a:c9:81:5a:0c:44:
fa:29:16:dd:10:78:df:76:1b:90:6f:51:29:9d:85:8f:db:fe:
22:5a:4a:41:ef:0c:9c:a3:28:8c:7e:99:2f:74:27:0b:e3:a7:
7b:4a:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:02:36 2025 by rpki-client