Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier: SYl7q+ftV8uCCXJwH88GO1omuUK/5uxnP+Ju0kFkskY=
Subject key identifier: AF:EF:57:F3:4F:81:97:AB:5E:8C:3B:C9:2B:B2:A5:A0:82:59:02:73
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 0196D889B9D7EE545AF2F34E549FC007BDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number: 1541
Signing time: Fri 16 May 2025 10:00:26 +0000
Manifest this update: Fri 16 May 2025 10:00:26 +0000
Manifest next update: Sat 17 May 2025 10:00:26 +0000
Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: D+s9pRZPB0caA/5oC362mS+iJxqoIOUtmFxa8BWE40g=)
2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:89:b9:d7:ee:54:5a:f2:f3:4e:54:9f:c0:07:bd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: May 16 10:00:26 2025 GMT
Not After : May 17 10:00:26 2025 GMT
Subject: CN=afef57f34f8197ab5e8c3bc92bb2a5a082590273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:92:aa:ae:55:02:4b:c5:5b:e4:0d:f1:53:
e2:9a:a5:88:b7:34:47:c0:d4:c6:68:a5:32:44:38:
4c:14:58:da:f5:62:2a:f2:ae:9d:9d:f3:2c:6a:dc:
62:a2:61:70:d7:4b:a2:6a:00:69:b9:f2:1a:00:bb:
67:66:98:04:b8:d5:39:6b:37:17:94:a0:30:a4:a9:
f2:09:0a:86:a6:92:f0:17:65:ad:ef:4e:bf:50:df:
20:80:d7:18:da:c1:a4:82:a8:d1:42:d9:d2:04:18:
e4:80:9a:8f:72:54:b8:25:5a:b9:fa:71:8a:25:0d:
13:47:98:c0:a7:90:7f:fb:c7:10:e2:04:ed:66:82:
d6:62:ac:2b:23:73:71:63:90:fc:e8:65:6f:d3:ae:
f1:e0:b3:54:87:ba:50:5d:b1:87:33:d0:5a:b5:e1:
68:88:57:68:4f:73:a4:e6:82:16:18:10:7a:1e:c4:
76:7f:70:71:db:be:9b:c5:c3:ca:7a:74:92:cd:21:
39:62:78:6f:a8:10:3c:a8:69:01:b0:02:63:f5:f0:
cd:c3:c8:56:5b:91:83:6b:59:b6:fd:63:13:e4:64:
32:26:20:7d:db:1b:c6:71:31:14:19:4a:79:6e:f4:
ac:3a:ce:de:fa:2f:a9:19:42:8e:6b:0a:55:49:3d:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EF:57:F3:4F:81:97:AB:5E:8C:3B:C9:2B:B2:A5:A0:82:59:02:73
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:05:38:ed:f0:d0:b8:00:89:98:43:49:6b:b3:13:39:19:ac:
fb:1a:2b:8d:c1:b6:95:19:c2:16:f0:0f:55:41:b7:26:e2:7b:
0b:38:96:70:70:ea:35:3e:02:48:30:ad:b6:cd:67:0a:22:d6:
a3:d4:c8:43:23:61:59:48:d2:b4:55:83:d0:25:c9:37:9e:e2:
77:d9:ce:34:79:4c:61:4a:27:e9:22:7d:a3:66:2b:c3:aa:bb:
be:04:a2:97:fc:d6:fd:08:dc:ff:20:65:d6:84:4e:09:fd:43:
6a:8d:8a:f5:30:10:1d:da:d8:dc:21:68:ab:37:71:bb:3d:7c:
d4:b7:61:9e:46:57:ea:5a:7e:19:3a:10:4c:c8:ac:98:69:73:
8c:3d:b1:fe:5d:72:6f:0b:25:45:9c:60:f9:53:ca:0b:82:2c:
c9:b8:30:20:c1:1e:8d:4c:82:1b:ab:01:8f:4a:11:41:95:3e:
56:46:58:bf:a1:f5:f2:de:e6:f2:05:fa:f7:80:b7:b6:e2:9b:
ce:a5:96:1e:bb:5a:db:11:d9:32:9e:8c:a6:1d:17:3e:04:5d:
bf:c4:28:22:06:86:53:24:91:8a:6f:c0:54:e6:18:19:7b:25:
c7:c2:3f:bd:3a:13:ad:9c:b2:bf:0b:69:8a:e6:54:a9:5e:9c:
6e:bf:3c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:51:37 2025 by rpki-client