Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
File: HDotyHGc8y1ZegUekO2VAmg15Pg.mft (raw, json)
Hash identifier: zcgEgC2+6sPWEwHPyY7loUNQDmvGu9vm5QypttcGlCo=
Subject key identifier: 43:CA:5D:87:5F:B1:0E:98:BC:47:AD:72:FA:0E:1A:F4:EC:B4:83:A3
Authority key identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
Certificate issuer: /CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Certificate serial: 0196B40F6EBCD29855AB6A34B50008AD4DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
Manifest number: 0646
Signing time: Fri 09 May 2025 08:00:32 +0000
Manifest this update: Fri 09 May 2025 08:00:32 +0000
Manifest next update: Sat 10 May 2025 08:00:32 +0000
Files and hashes: 1: HDotyHGc8y1ZegUekO2VAmg15Pg.crl (hash: ocQA4hWuoTecUgztR3VUvdVP5HNmB3duP3u6ESo4tSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:6e:bc:d2:98:55:ab:6a:34:b5:00:08:ad:4d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Validity
Not Before: May 9 08:00:32 2025 GMT
Not After : May 10 08:00:32 2025 GMT
Subject: CN=43ca5d875fb10e98bc47ad72fa0e1af4ecb483a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:07:39:93:6d:fe:ce:5d:4a:b1:df:c5:8f:
32:71:5a:f6:9c:6b:5b:b7:87:34:e0:6e:20:a1:69:
64:c9:c7:0c:9b:d6:b7:79:4c:20:40:75:67:b1:b9:
61:4a:82:70:22:29:1d:b0:00:e7:54:b5:28:8a:c1:
9f:22:b3:5b:f3:d2:9e:33:20:ed:d7:50:68:f9:66:
0b:3e:2b:38:b6:0d:70:94:25:53:01:b2:7c:d6:fa:
8a:0b:c2:45:81:cd:07:65:47:7c:f0:b3:85:6b:6d:
21:71:c7:30:30:fd:2d:ba:89:9a:23:20:24:9a:a1:
27:04:15:e0:e7:7a:61:0d:c7:3b:cd:ff:3c:01:3a:
f2:ff:5d:e1:0a:63:69:ff:8b:75:21:c9:34:b8:de:
92:ee:40:2c:4e:e0:7d:8b:ba:14:c1:fd:fc:1f:2a:
e9:14:e9:61:11:02:ab:96:2b:5c:0f:f7:ba:33:a3:
b5:43:48:a4:5f:bd:78:ca:aa:1d:58:e9:a2:d5:ce:
a3:2e:87:f3:bd:64:aa:1c:06:98:47:1d:97:ab:bf:
49:7d:14:dc:bd:a2:bf:87:d6:f8:3b:27:e3:8c:cb:
62:98:63:1b:8c:bb:fb:13:e1:04:8b:52:cf:58:ec:
d4:06:d8:89:4b:7a:44:b9:8b:53:ff:fc:34:b8:e5:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:5D:87:5F:B1:0E:98:BC:47:AD:72:FA:0E:1A:F4:EC:B4:83:A3
X509v3 Authority Key Identifier:
keyid:1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2c:05:09:b1:4c:df:98:b7:fb:4c:b9:5d:24:5f:1d:02:72:
3a:6c:90:85:94:8f:30:bd:94:74:f2:0c:04:2f:62:45:e9:d1:
30:50:5e:f9:7d:f2:86:df:da:ea:08:30:f3:de:37:fb:c2:37:
b9:2b:cc:55:f8:ad:81:64:4d:b3:ca:08:c6:0c:83:8e:87:90:
d7:0b:56:d9:15:f8:be:58:14:74:78:b6:a7:28:6e:93:12:03:
62:37:5a:39:b8:5f:7a:0c:cf:b9:a4:5c:b3:03:a4:e8:92:a8:
f8:bf:06:bb:3a:fc:62:6a:eb:06:1a:30:39:7b:39:e3:99:29:
a8:f8:63:fa:f8:84:19:cf:41:4a:37:a9:03:72:b2:ed:16:89:
ea:21:f9:5d:88:73:02:25:64:b2:bd:e2:28:0b:21:73:f2:cf:
d1:94:a0:8d:26:4d:8b:8a:95:58:c3:29:92:51:31:2b:1a:70:
6c:0d:93:51:50:8d:3f:5b:f1:d5:65:02:5c:3a:60:d9:12:f7:
5c:4c:b0:87:70:de:a3:be:2b:9d:cd:7c:52:79:cb:29:25:44:
6f:b6:cc:2d:e2:6f:74:90:2b:04:65:af:2d:76:30:1b:7d:29:
21:a2:55:6f:dd:68:c4:cc:1c:0d:c9:04:89:6b:d5:46:84:32:
60:40:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:21:29 2025 by rpki-client