Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: x/WgVWlH0hP/36wB8dWZKumUw48T+H2OuASR9sfmbGI=
Subject key identifier: E1:3C:7A:BF:A3:F4:09:83:9A:3B:23:29:58:AE:4A:A3:D5:E6:CD:81
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 0196BA7F664C462749BE0FE8B26C0DD36789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 14C4
Signing time: Sat 10 May 2025 14:00:33 +0000
Manifest this update: Sat 10 May 2025 14:00:33 +0000
Manifest next update: Sun 11 May 2025 14:00:33 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: f4tpsqvr72m8seKGQc+3EL8+0xaX9m93I7Hm89IKGVk=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:66:4c:46:27:49:be:0f:e8:b2:6c:0d:d3:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: May 10 14:00:33 2025 GMT
Not After : May 11 14:00:33 2025 GMT
Subject: CN=e13c7abfa3f409839a3b232958ae4aa3d5e6cd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:24:81:b0:86:58:df:93:6c:79:05:86:17:
52:29:d0:ff:f7:94:c1:ae:df:8f:d3:25:74:4a:30:
c8:2d:0c:0c:58:6f:f5:5d:ba:70:cd:78:f8:a3:c2:
12:b7:1a:49:ab:48:55:59:6f:2e:ae:c6:f0:2c:d2:
f2:b6:d1:6e:12:39:2f:28:53:bd:3d:c1:42:63:6f:
b7:a1:86:e1:57:ba:a7:15:9f:3f:d2:65:8f:6b:ff:
63:de:87:14:a4:5d:a7:a2:68:cb:96:1e:5f:12:46:
64:32:15:98:23:11:3e:29:c9:b4:c2:8d:60:24:b2:
85:f2:ca:e7:37:2b:db:73:71:a5:ef:fa:06:37:04:
2f:f0:2a:63:53:d1:75:d6:fd:90:ff:4b:63:5d:db:
d1:f7:be:f3:7c:f4:3f:bc:a3:ec:63:89:d7:55:68:
2c:50:dd:60:88:20:cb:e1:c4:d1:80:7f:cd:71:ac:
dc:22:2f:ab:85:29:b4:75:51:60:e1:f5:8c:ed:7b:
f1:fb:f3:3f:43:de:58:05:21:1f:1b:f7:50:f1:78:
f7:9c:a7:b4:46:fb:2b:75:2a:1e:21:89:de:ba:1d:
fb:c9:4b:c6:7e:4c:ee:76:41:1d:73:4e:b5:a9:13:
81:76:e5:50:67:72:12:58:11:1c:d1:4b:f5:4e:10:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:7A:BF:A3:F4:09:83:9A:3B:23:29:58:AE:4A:A3:D5:E6:CD:81
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bb:26:9a:e0:72:5b:95:fd:4e:42:2e:91:4c:44:bf:59:96:
60:e3:4c:95:71:bd:af:cb:26:9b:31:b2:84:db:e8:17:73:43:
32:bd:1a:01:e8:7c:19:98:30:1e:18:e9:0b:df:87:1c:39:f1:
9a:e0:35:74:02:10:b7:9f:ce:bd:fb:a3:67:53:e1:bc:25:94:
04:db:d7:41:c2:52:ae:8f:be:47:f5:a2:bb:50:2d:61:94:63:
6e:0f:96:d6:39:2c:16:aa:43:7a:f5:6c:65:c5:6b:06:b5:2f:
86:6c:af:0d:07:d7:1e:a1:92:fe:a7:2a:b7:ee:1f:01:c7:dd:
7b:fa:9c:80:3c:d1:cb:a3:bb:5f:0d:cf:9b:21:25:69:e7:4e:
d0:4c:c4:7a:e1:cd:3a:dc:61:81:31:81:99:42:1e:4b:87:ca:
b0:1b:aa:6c:21:1b:82:85:61:aa:8f:57:92:85:36:30:9d:3f:
0c:7f:b3:7c:38:f5:c7:c0:df:00:5f:98:4e:67:c8:e2:27:7a:
d9:29:74:30:25:c3:b2:4f:2a:cb:6e:e3:79:51:32:70:75:6e:
14:e8:f6:07:9e:e2:31:4c:f3:49:ca:18:23:9a:42:e7:95:8e:
2a:56:68:57:0c:0c:fa:df:b7:79:62:0a:54:7c:b6:f2:f2:40:
44:d1:b0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:24:25 2025 by rpki-client