Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier: VxZkSYAjIsHOTAvvDnrD8NXUDgfK45+W2Yt56X8WP2Q=
Subject key identifier: 89:29:07:68:27:1A:7C:30:A6:5A:DD:3D:A1:8A:7B:49:8F:F3:58:98
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial: 0196C916F8830E8BCA361E064AB881798BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number: 1536
Signing time: Tue 13 May 2025 10:00:47 +0000
Manifest this update: Tue 13 May 2025 10:00:47 +0000
Manifest next update: Wed 14 May 2025 10:00:47 +0000
Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: MQl+Y+lSGfZJKYOscnPTVdBpaX5kml1B3vbdw8P0M0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:f8:83:0e:8b:ca:36:1e:06:4a:b8:81:79:8b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Validity
Not Before: May 13 10:00:47 2025 GMT
Not After : May 14 10:00:47 2025 GMT
Subject: CN=89290768271a7c30a65add3da18a7b498ff35898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:37:23:1c:7f:57:1b:f0:1a:d6:1d:47:f3:
8d:44:3a:a6:6a:fa:99:92:de:a3:8d:b9:bb:93:32:
e7:16:17:ac:c5:44:3f:46:1a:2c:bf:c4:96:82:90:
1f:db:4e:4a:d9:6a:b4:ed:41:e1:59:3e:cf:5a:f3:
a4:9b:4e:1a:90:73:15:4b:09:15:7a:08:d0:7a:a5:
54:f6:59:67:1d:6e:7b:d5:8b:3d:13:4c:54:49:3d:
79:8f:db:e0:e6:91:6a:40:41:46:b2:03:85:64:aa:
5a:b1:28:63:b3:95:d3:a9:ec:b0:21:fc:8e:41:02:
65:c5:c8:93:e0:38:78:ae:cb:55:2a:2a:b4:a1:e5:
9d:eb:58:40:f1:e3:40:59:50:ad:25:4d:2a:ed:bd:
9d:b7:a6:72:04:75:f9:80:16:ca:c9:fe:5e:64:8f:
c9:74:78:4b:b7:8d:f9:9a:3b:12:de:fb:f0:1d:8c:
be:0d:6d:07:c9:c7:41:a6:40:d5:cd:13:7b:06:ce:
2f:90:46:ab:e6:a9:b2:4b:ae:a5:1f:55:7b:94:70:
e0:66:36:c7:a6:9c:f9:eb:56:20:09:51:0d:97:1a:
08:ce:a4:cd:3e:ae:71:34:d4:55:61:cd:95:10:e4:
82:86:d0:43:52:49:ce:7d:3b:21:a8:c1:cb:fb:91:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:29:07:68:27:1A:7C:30:A6:5A:DD:3D:A1:8A:7B:49:8F:F3:58:98
X509v3 Authority Key Identifier:
keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:46:fe:ee:8c:87:68:54:b1:47:29:50:62:4e:c3:d3:49:
b1:2b:8f:b9:b9:bf:0b:37:25:a2:57:f9:55:4b:a3:a8:ea:60:
5f:1e:46:41:bc:a8:b1:43:ef:37:6f:3f:2d:d9:09:c5:0d:71:
7a:c6:43:e1:b3:90:08:03:0a:22:b4:32:69:4f:e0:29:04:ad:
6e:42:db:2e:e8:8c:b9:8e:67:a2:5a:bf:60:f0:c7:5b:e5:4e:
cf:57:d4:f1:36:0c:18:d2:ae:39:b5:b2:14:54:af:a6:fe:32:
4e:50:82:2a:87:c2:67:47:50:70:be:57:ff:72:a7:d5:ea:ca:
79:b0:4a:ae:b3:af:cb:d7:11:6e:e9:3b:60:af:4e:ef:4a:97:
3d:fb:59:fb:7e:ca:1c:0c:a1:d7:80:27:72:e1:7d:5f:dd:8f:
e9:fc:8c:de:10:68:87:c4:cd:f3:ed:fd:92:83:35:60:ce:c0:
59:4a:1f:a1:65:e4:65:e8:cd:bf:d8:a8:e8:ec:63:7b:93:87:
02:a3:36:94:4e:f6:b6:c8:7d:49:12:26:f8:3f:3a:29:5d:08:
21:dc:85:6b:95:1f:7f:91:b3:14:ae:e8:9c:74:7a:74:cb:2a:
48:45:21:35:54:df:15:25:a7:8a:c4:15:f3:c1:dc:ab:e5:5c:
3b:48:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:27:15 2025 by rpki-client