Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
File: H0qus-K3pD3wHzHVGiDvIlXOr-M.mft (raw, json)
Hash identifier: qgmbF9H73COy/uNYRHAqdeYAJZQ+Pg8ybRO7+5OrCM0=
Subject key identifier: 00:81:6C:AC:4A:76:B1:4F:35:A7:42:4C:54:FD:AD:7F:EB:18:7B:13
Authority key identifier: 1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
Certificate issuer: /CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Certificate serial: 01965914ACA3C4EBB181F9CDFE83C88B1415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
Manifest number: 03A1
Signing time: Mon 21 Apr 2025 16:00:49 +0000
Manifest this update: Mon 21 Apr 2025 16:00:49 +0000
Manifest next update: Tue 22 Apr 2025 16:00:49 +0000
Files and hashes: 1: H0qus-K3pD3wHzHVGiDvIlXOr-M.crl (hash: f11sbd2KENunjdn70Cte4EE0sBO/xk/65e0mZzMXe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:ac:a3:c4:eb:b1:81:f9:cd:fe:83:c8:8b:14:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Validity
Not Before: Apr 21 16:00:49 2025 GMT
Not After : Apr 22 16:00:49 2025 GMT
Subject: CN=00816cac4a76b14f35a7424c54fdad7feb187b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:32:36:38:29:ca:a9:f5:11:4b:8a:e1:1d:
3e:f3:ea:e2:eb:f3:7b:63:d5:df:f2:11:68:b2:1d:
79:d1:9b:3c:16:d7:42:6f:d8:f8:8a:09:50:eb:ba:
2a:50:ac:6a:f5:c8:88:c8:b2:78:8f:42:8e:c7:e3:
17:49:de:b3:90:f6:11:35:24:18:fe:dd:e9:52:74:
e6:5a:09:23:c7:6d:1f:13:d4:87:d4:84:60:c7:5c:
42:b6:3a:b3:d2:4f:6e:db:e2:12:2c:e8:8b:5e:67:
28:f9:b7:37:9f:82:2c:5d:29:b5:56:c9:73:a2:48:
c2:b2:03:49:71:ad:f2:e9:dd:3b:80:e0:e3:4f:75:
ac:76:99:a1:82:17:8c:e8:cc:c9:9c:a4:79:6b:78:
8c:57:01:11:e6:1c:f9:c1:42:3c:ae:29:b6:05:2a:
77:21:d1:50:bf:ad:f6:1e:c2:aa:34:b5:eb:97:f8:
2a:f5:b7:d7:75:38:9e:49:58:06:9a:9f:af:dd:f0:
09:98:ce:57:4a:a9:85:d1:bd:3d:6a:cc:17:18:08:
31:45:e8:09:b9:96:c3:8d:0b:ed:7c:b3:c0:da:fc:
30:d5:6d:07:93:85:52:1d:13:4e:38:85:f3:8d:38:
41:a9:de:fe:38:3b:fa:d3:c1:85:2b:68:ff:cf:88:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:6C:AC:4A:76:B1:4F:35:A7:42:4C:54:FD:AD:7F:EB:18:7B:13
X509v3 Authority Key Identifier:
keyid:1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8a:2b:04:08:77:6a:72:75:cd:f8:21:91:ea:06:34:48:3f:
55:52:08:cc:58:fe:84:7f:cc:e0:3f:2c:f2:94:f3:f2:9d:89:
0b:c6:5b:72:ed:4a:3e:d1:02:47:67:2e:b2:3a:43:b6:02:ac:
bf:bc:78:f4:ae:82:1c:d2:13:64:a8:3c:f2:c2:90:1c:d2:cb:
d9:9f:7c:c9:fe:e3:24:b4:3e:9e:65:cd:30:5f:91:6b:f9:8d:
d9:ee:50:bf:d3:3c:6e:b7:c4:32:7c:8f:ed:6c:a8:5a:3b:64:
1d:ec:f3:a1:1e:95:3d:e5:7e:ca:1d:cf:14:4b:93:a8:b0:05:
e3:be:94:f7:dc:f9:15:e4:2c:f7:34:93:ea:55:1b:78:e5:b8:
07:9a:7e:3d:3e:da:84:13:b0:50:c2:1d:1a:0a:c2:52:51:de:
b0:09:8a:b4:33:df:c1:ed:5b:77:f2:ee:0f:8d:08:8f:98:88:
45:28:24:cd:e1:ed:61:16:35:af:ee:00:47:a7:41:1a:a7:8e:
3b:46:d7:97:c7:db:be:2c:dd:ec:5e:8b:37:31:0f:8f:7b:cb:
50:4f:07:30:24:b5:26:02:dd:1c:87:98:97:68:ba:a4:53:c5:
0e:14:6d:ae:eb:34:69:02:c2:cb:6a:ab:4e:cf:38:e8:68:9e:
82:14:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:47:26 2025 by rpki-client