Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
File: HVdIhaDItCBcPfLR_Nc0h33hBdk.mft (raw, json)
Hash identifier: qYu3R8wIjXQCAxWnzfuf9PNaWtiZBEy4rkyWOoAc2sg=
Subject key identifier: B0:3A:A8:7B:93:4D:8E:1F:D9:A7:F2:67:0F:0A:8B:63:48:52:A4:78
Authority key identifier: 1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
Certificate issuer: /CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Certificate serial: 0196A50A020294A9B65DBFD22DED844349FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
Manifest number: F8
Signing time: Tue 06 May 2025 10:00:18 +0000
Manifest this update: Tue 06 May 2025 10:00:18 +0000
Manifest next update: Wed 07 May 2025 10:00:18 +0000
Files and hashes: 1: HVdIhaDItCBcPfLR_Nc0h33hBdk.crl (hash: HZlNcYwoxa+RalyZtwxFevC9Cs5+7skHGUKXTtXKHxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:02:02:94:a9:b6:5d:bf:d2:2d:ed:84:43:49:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Validity
Not Before: May 6 10:00:18 2025 GMT
Not After : May 7 10:00:18 2025 GMT
Subject: CN=b03aa87b934d8e1fd9a7f2670f0a8b634852a478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:d7:07:39:0d:f6:5c:54:28:3a:82:bb:65:
ec:58:08:85:be:80:95:f0:43:f8:85:a9:c6:a0:17:
8d:2c:49:73:4a:c2:fb:b4:3d:2b:11:28:34:1b:db:
21:31:7a:da:85:36:43:f3:64:8a:b7:7c:35:b9:c3:
d2:ea:f5:98:a9:43:91:bf:0b:5c:65:8d:4f:72:e9:
ae:7d:f2:c7:60:0c:cc:97:9a:63:03:ca:61:7f:71:
dd:62:61:3a:2a:0a:90:6b:ee:91:bd:9a:f1:c7:f2:
d8:e3:48:a5:8d:ee:8a:85:e5:b1:a8:34:a9:cb:e5:
02:4e:0e:5f:42:d2:b0:3b:bf:df:4e:b7:dd:27:19:
c5:36:78:0c:1e:ee:73:8a:20:d2:22:c7:fc:c6:3e:
8b:2b:d7:0f:6e:4a:6a:c3:4f:d5:92:aa:17:13:56:
7b:1a:0b:db:20:c9:b4:78:31:96:b8:2d:99:d3:1a:
46:34:de:57:5e:1b:90:4b:5b:aa:0f:45:ae:ec:36:
60:01:52:b2:02:17:f6:97:09:4b:6d:a0:66:bb:eb:
a7:e2:3a:ac:c7:f7:4d:1c:76:d9:2b:6e:67:6b:33:
e6:e6:da:59:98:cb:b0:22:e2:20:e5:26:ff:9e:6c:
46:01:2e:9d:d0:e7:7e:45:71:75:96:3e:b5:3f:55:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3A:A8:7B:93:4D:8E:1F:D9:A7:F2:67:0F:0A:8B:63:48:52:A4:78
X509v3 Authority Key Identifier:
keyid:1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a2:25:fc:f9:0f:61:4b:45:65:b0:0b:9a:b0:69:84:36:33:
2d:db:c2:12:57:b2:3c:02:ad:b3:36:90:38:3a:57:a6:01:96:
13:be:10:e0:2e:ce:a2:7f:bb:93:df:03:7d:0e:0b:1a:64:c7:
6b:e2:3f:c6:8f:0c:98:46:ac:6b:6c:06:cc:7a:bc:0b:97:9b:
1e:f2:18:3b:52:41:0b:d1:bd:0a:1f:90:f1:e7:c9:5e:96:ed:
07:84:f0:cf:34:7f:a0:8c:54:f5:34:c7:8b:01:c2:98:9b:74:
4f:9e:cc:cb:68:b7:24:18:24:c3:aa:c5:ce:5f:b2:7a:de:b6:
3d:46:96:f7:c7:ba:54:04:e1:ef:28:6b:9d:27:82:04:de:7a:
69:3d:a0:fa:1f:c7:d1:4d:e4:f9:9b:54:70:9a:a1:73:64:fe:
9b:ec:18:d7:23:04:b8:ef:9d:e0:8b:56:33:2a:06:26:3b:bc:
74:89:46:6f:b1:59:1a:53:9d:b4:91:88:fb:5d:f1:f4:2b:85:
83:4f:f8:7f:bc:33:d5:ef:53:c3:a9:79:9d:6b:2a:88:bd:6d:
30:72:c3:84:c7:09:17:b1:d9:60:61:9d:7f:ad:2f:70:5c:fe:
a5:f0:6e:a9:73:59:bb:83:1c:da:62:c6:d9:7e:bc:76:eb:bd:
c1:e0:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:10:22 2025 by rpki-client