Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
File: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft (raw, json)
Hash identifier: LXJw4UoHWXUN2aTCNc5Zyz8pdmCx3wJ8EqWKCiPIxcg=
Subject key identifier: 71:41:34:F4:71:DF:95:7C:82:A6:04:FB:FE:D7:19:1B:8A:B0:7B:62
Authority key identifier: 1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
Certificate issuer: /CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Certificate serial: 0196C0B8B18991B3DA59C9840B26E36000A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 19:00:51 +0000
Manifest this update: Sun 11 May 2025 19:00:51 +0000
Manifest next update: Mon 12 May 2025 19:00:51 +0000
Files and hashes: 1: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl (hash: c7p5XoH88ucVEuOXtDtqkAziKf3MdVQyFp4F1mvESss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:b1:89:91:b3:da:59:c9:84:0b:26:e3:60:00:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Validity
Not Before: May 11 19:00:51 2025 GMT
Not After : May 12 19:00:51 2025 GMT
Subject: CN=714134f471df957c82a604fbfed7191b8ab07b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:ac:05:9a:f2:5e:90:a1:40:88:f9:e7:d3:
5c:bd:e5:67:99:4f:a1:09:37:66:8a:12:25:f2:a4:
98:80:d8:be:08:9c:db:17:14:89:d9:69:f5:1a:7c:
f0:d9:2b:2f:18:1c:90:a7:95:9c:94:6a:a0:5b:86:
77:8b:06:21:2d:81:85:96:71:a9:5f:d0:07:e2:70:
39:6d:e2:60:7a:34:fb:fb:1b:77:18:ed:fa:50:04:
61:f6:76:5f:7d:89:56:84:85:f1:a0:a2:44:7d:e8:
d8:95:19:ed:a4:2b:f8:67:c1:60:5b:33:a3:c4:11:
fc:0a:75:c3:88:e5:9a:c6:e6:2c:34:7e:76:b1:fa:
e3:17:e6:40:d9:b4:db:2b:1c:60:c0:0c:f0:ce:2d:
a8:09:9a:aa:91:55:cf:94:d2:90:84:37:ca:8a:ba:
e1:21:02:31:63:b5:52:6a:61:c5:49:fb:ac:db:d6:
92:b0:32:dc:57:f0:96:8b:a2:fa:cc:e1:4b:08:ee:
25:9f:32:ef:b7:9f:89:ae:d2:a3:c8:7d:e4:30:a8:
99:bf:50:c2:3a:84:05:ff:77:c1:e3:ca:00:fc:27:
04:be:bc:82:8e:2a:fd:cf:07:f8:00:43:b7:76:2c:
1a:7b:69:2d:95:f5:74:a8:e9:ee:d9:7f:3e:f2:73:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:41:34:F4:71:DF:95:7C:82:A6:04:FB:FE:D7:19:1B:8A:B0:7B:62
X509v3 Authority Key Identifier:
keyid:1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:59:6e:cb:98:72:28:70:7c:1e:6f:0e:32:a0:35:e7:81:92:
8c:c9:df:14:30:88:86:86:4a:02:aa:81:43:d9:98:44:b9:f7:
21:f6:86:a7:e4:55:02:56:c9:61:60:8e:10:ff:bb:4e:7c:8a:
98:0b:7c:d9:1f:3f:d0:74:ed:5d:8d:68:93:9c:cb:f8:70:51:
2b:78:a3:c9:81:9f:08:2f:90:39:fd:d1:eb:a2:16:d0:69:71:
ac:23:fe:cf:2e:b9:2c:60:83:88:f5:8b:de:f5:67:29:34:e0:
88:22:16:fd:3c:0c:16:d2:76:ad:8c:05:5c:7e:b4:e9:1e:ef:
e9:3f:ef:d7:3f:ad:d2:aa:f0:33:e8:a9:bf:2b:99:e7:55:23:
25:78:89:f0:f3:f7:f5:63:ee:6d:da:70:86:98:61:1c:19:92:
9c:40:f2:d9:28:e2:01:bd:2d:a2:4a:d8:38:48:c0:83:7f:02:
8f:c9:25:b0:70:e6:79:e5:5d:a4:5f:72:5a:3e:8f:c0:c9:96:
1e:0e:13:cf:12:8a:90:45:47:15:2c:49:2a:7b:fc:2d:c7:26:
44:48:c6:0c:28:74:f5:4f:b8:ac:6d:0a:c6:26:3c:63:c2:66:
aa:92:ff:25:37:a0:be:6e:4f:fc:aa:ac:66:f6:23:1b:49:cf:
6c:2b:9e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:30:31 2025 by rpki-client