Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
File: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft (raw, json)
Hash identifier: qGO9XFhmuDzBrG0AlCezOtQcbpDUZKz+Sw8ttGutxbw=
Subject key identifier: 42:87:96:75:C1:23:42:01:12:19:3E:84:81:ED:40:C3:0F:B9:52:7C
Authority key identifier: 1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74
Certificate issuer: /CN=1c1c754b7a5b541892540d24ab98d31537974574
Certificate serial: 0196C3F08C69193D727CA37EC0E9ECABD9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 10:00:43 +0000
Manifest this update: Mon 12 May 2025 10:00:43 +0000
Manifest next update: Tue 13 May 2025 10:00:43 +0000
Files and hashes: 1: HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl (hash: jAQYeF2SgCiVia10C29JNS6JJjp4DZxYPMPF2rrqDgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:8c:69:19:3d:72:7c:a3:7e:c0:e9:ec:ab:d9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c1c754b7a5b541892540d24ab98d31537974574
Validity
Not Before: May 12 10:00:43 2025 GMT
Not After : May 13 10:00:43 2025 GMT
Subject: CN=42879675c123420112193e8481ed40c30fb9527c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:28:3a:93:6f:a7:a0:67:98:b1:19:1a:06:
c4:9d:14:c1:34:46:3d:69:03:b7:25:90:ae:c5:38:
45:b7:1b:13:8b:08:ff:6f:4d:c6:08:4d:c9:a2:c2:
d7:f0:61:37:8e:fa:3b:05:e3:d8:f6:64:64:1e:64:
f4:65:68:1d:10:cb:19:85:0a:b2:97:78:dd:91:7b:
e9:fc:45:51:95:8e:21:33:0f:93:ba:cc:b1:01:a3:
12:7f:a1:b0:e4:b4:2d:b6:d2:04:22:f5:f1:1a:cc:
78:0e:d9:a5:f9:2f:55:9e:60:a9:2a:1c:01:ae:5d:
81:29:3e:dd:e3:fb:3e:96:9a:ef:6b:a0:8e:0a:9b:
00:e9:a3:ae:af:e1:3d:48:4b:33:45:a6:af:cd:f2:
56:05:44:2a:d2:02:40:ee:de:a9:8c:e4:3b:23:dd:
14:2f:db:49:93:05:33:fd:e5:ce:b0:df:88:4c:25:
04:ee:3a:79:0c:62:ec:55:cc:02:93:32:c3:5a:a6:
f3:8c:ac:43:51:55:6c:2d:38:49:b5:18:ac:93:57:
47:3a:61:98:bc:54:11:fa:b9:b5:01:0a:91:90:bb:
ba:70:00:7e:bd:d7:f8:b4:f0:8d:65:66:59:3d:89:
0c:35:3f:db:88:d2:0a:5e:0a:33:a2:32:79:cb:9f:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:96:75:C1:23:42:01:12:19:3E:84:81:ED:40:C3:0F:B9:52:7C
X509v3 Authority Key Identifier:
keyid:1C:1C:75:4B:7A:5B:54:18:92:54:0D:24:AB:98:D3:15:37:97:45:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/36c808-dd87-48f8-97e0-aa0f35824a27/1/HBx1S3pbVBiSVA0kq5jTFTeXRXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:64:8c:cd:c7:a5:a0:86:50:3d:62:ea:de:74:97:1d:5b:17:
bc:20:84:9d:a5:16:41:58:cc:43:0e:a1:cb:4a:d9:17:2b:f1:
94:34:fa:13:cc:65:43:68:02:9f:b5:53:1e:b6:b0:a7:5d:bb:
fb:3b:04:88:9f:7e:4e:c2:ea:96:4d:59:1d:05:0a:21:83:e6:
26:dd:e7:6b:6d:98:23:5b:73:0e:62:eb:c3:93:99:52:07:b1:
70:52:66:21:1e:f1:a9:a4:7e:4a:63:10:2b:81:ac:a2:c4:09:
f4:06:e3:6e:65:e1:21:2b:7f:3b:ee:fc:06:54:05:e8:2b:d4:
15:c2:ab:ad:1c:26:b5:3d:fd:7c:2b:42:d5:7f:59:e2:27:7c:
0e:f9:4e:6b:80:a0:36:6e:77:a8:7f:2a:af:91:8d:78:7e:37:
6c:03:9d:53:52:53:ce:3b:b8:ef:54:7a:28:5c:d1:b6:ca:8a:
81:f3:cf:8e:8e:b3:0e:3d:f0:b4:4e:6a:46:5f:fa:83:32:28:
31:0f:73:46:10:a5:08:2d:c5:e9:a6:3c:0b:08:50:09:ec:75:
a7:34:db:1d:46:f0:b9:f1:f5:d7:79:b0:8c:ec:41:31:9a:aa:
87:19:d0:e2:32:c7:35:03:c0:74:a5:d8:cf:39:4b:6b:5d:53:
77:24:6a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:28:28 2025 by rpki-client