Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier: PR2Et/Vo3fIJu42WiukrX2uv+8QsXis+ZhdmChBG9Ik=
Subject key identifier: 61:F8:DD:F1:A1:78:9B:77:8B:5A:F6:0A:10:F6:CC:4C:BC:AC:16:C0
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 01969E9ACE0C9C923E77B4C54F4E5E63EFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number: 78
Signing time: Mon 05 May 2025 04:01:07 +0000
Manifest this update: Mon 05 May 2025 04:01:07 +0000
Manifest next update: Tue 06 May 2025 04:01:07 +0000
Files and hashes: 1: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: sQshZQZ2j+FOS+6sWBY8LmjTz0myjnMWdPBqeTuUFiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:ce:0c:9c:92:3e:77:b4:c5:4f:4e:5e:63:ef:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: May 5 04:01:07 2025 GMT
Not After : May 6 04:01:07 2025 GMT
Subject: CN=61f8ddf1a1789b778b5af60a10f6cc4cbcac16c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3b:47:f0:48:ba:fb:9c:40:2b:d2:dd:22:d9:
cb:8a:2a:12:be:c8:55:ef:66:52:1d:8d:34:81:c0:
8c:13:01:8b:ae:d0:20:47:b1:84:0a:d9:e1:59:b7:
5d:2d:2c:90:1a:b7:3c:ac:54:3f:b4:a2:6e:9f:8e:
6b:b2:56:66:95:9d:e4:d6:17:06:81:a5:98:7b:81:
3c:0e:08:64:de:91:d4:9d:3d:af:44:60:33:af:d7:
1f:7a:ca:ee:15:fe:43:e0:48:a6:ae:c7:5a:a7:89:
59:37:06:65:42:0b:ff:fd:87:74:f7:3e:5f:cc:f3:
5c:3c:5b:62:a1:61:9e:f6:68:ec:ad:2c:e4:6f:88:
4f:98:58:6d:20:82:d2:4f:e3:59:36:fd:bb:35:a2:
a8:26:9d:97:3a:4e:b5:7d:96:f3:e4:33:49:50:d8:
44:90:b1:9e:b4:e0:63:20:6e:ae:61:0f:f5:15:96:
b3:d8:a2:42:42:fe:9a:6e:84:b6:9e:a7:ed:bb:b4:
94:a7:a4:72:4c:b7:9d:55:ae:3f:5b:88:d3:b5:c0:
ab:13:17:68:39:8b:21:04:9e:47:ce:61:64:c4:f6:
d8:42:12:bf:b6:06:79:1c:ad:dd:dd:f8:41:bf:9b:
9e:47:e8:66:72:06:65:3e:e3:a8:fa:bd:ce:dc:5c:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:DD:F1:A1:78:9B:77:8B:5A:F6:0A:10:F6:CC:4C:BC:AC:16:C0
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b1:fc:2c:f6:13:64:93:28:1c:a5:ef:92:64:ac:c6:d2:99:
b3:0f:1c:bc:6f:e8:22:c4:c3:0e:2b:83:70:81:c8:f6:2a:e7:
8f:4d:21:a3:8d:ca:70:6e:2c:5d:4d:b0:75:48:2e:9e:2c:59:
15:8a:1f:ea:a5:33:d4:8f:74:ab:ee:18:7b:14:2a:66:86:9d:
ae:67:c4:a1:09:bd:84:b2:f1:6e:57:c1:1e:c9:2b:1c:6b:ba:
32:37:9b:17:ed:8a:e3:94:e7:8f:df:9f:ae:93:32:c4:30:26:
aa:67:4e:f7:5d:d0:8c:88:a3:98:39:b3:22:bd:52:d7:da:a2:
c3:aa:c2:aa:ac:d3:9a:7b:a3:1b:4b:55:9f:45:28:54:69:dd:
5f:c0:d1:4e:98:70:1c:2d:28:b3:fe:76:d1:b2:0a:0a:3b:d6:
9d:23:f0:aa:47:f8:0e:71:2c:c6:1b:25:10:c2:91:54:56:bd:
95:85:81:9d:6c:b5:df:a1:68:a6:5a:54:96:05:73:00:5a:b8:
81:39:8c:45:f3:5f:f5:f9:b9:15:d9:43:aa:e3:fa:1c:2a:82:
a5:ab:40:89:2d:21:d3:89:1c:85:16:da:5c:ab:c2:bd:d8:67:
73:be:02:2f:95:5f:e4:23:51:20:79:96:07:ab:40:1d:89:ad:
9f:4d:f1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:05:25 2025 by rpki-client