Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier: xJ/9PfOhRbWnppYgx0F3aWKByWCLJ480V/UWT0mR48g=
Subject key identifier: 6A:EB:8C:16:C0:45:CD:55:4B:B7:9F:A1:E3:0D:97:C7:0E:8B:84:8D
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer: /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial: 01965B035B66443322A096C46277F68D2F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number: 0838
Signing time: Tue 22 Apr 2025 01:01:08 +0000
Manifest this update: Tue 22 Apr 2025 01:01:08 +0000
Manifest next update: Wed 23 Apr 2025 01:01:08 +0000
Files and hashes: 1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: uAjvHSI/ri0QLw3ui52T9Z3E1exvPG5hFuA4Y5UAQ5Q=)
2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:5b:66:44:33:22:a0:96:c4:62:77:f6:8d:2f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Validity
Not Before: Apr 22 01:01:08 2025 GMT
Not After : Apr 23 01:01:08 2025 GMT
Subject: CN=6aeb8c16c045cd554bb79fa1e30d97c70e8b848d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:1b:a8:b6:c9:b7:76:c3:2f:d3:5d:01:aa:
8b:06:22:8b:95:64:2f:67:6b:88:13:87:f2:72:9f:
b9:85:e7:1d:04:4d:34:be:77:36:26:d2:04:2f:78:
80:0f:34:9c:46:00:82:c1:ab:30:16:b7:6e:95:42:
21:76:9e:5e:79:e5:5b:35:49:83:f6:37:f6:9a:fa:
ce:03:8f:46:9b:d0:7d:92:33:0c:e6:95:e1:6b:41:
d1:24:f8:fc:8f:18:7a:ab:74:d9:6f:1f:74:8e:de:
35:08:1f:5a:b5:47:17:1d:0a:74:9a:6e:66:87:48:
9c:a8:2a:2a:97:4f:c1:19:da:85:72:03:62:2a:cf:
2c:95:c4:2a:6f:62:68:77:be:fc:60:8f:69:99:74:
e8:2d:f2:ce:24:a8:4a:74:b4:23:a9:fe:4e:a8:fe:
3c:a6:09:05:45:22:08:9f:b3:58:91:99:ca:62:14:
bb:be:d2:64:0b:ad:43:98:53:5f:d7:a6:72:d6:3f:
ae:65:26:29:b0:2f:c3:5e:56:03:17:3a:20:0c:33:
23:09:3a:b2:a3:1f:d1:b2:2e:e0:6f:b2:8d:1d:a3:
9e:7d:f2:50:1a:c7:c4:bc:43:90:e3:fc:ac:11:90:
23:af:cd:4e:15:a9:74:06:a9:e2:6f:14:ca:9f:b7:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EB:8C:16:C0:45:CD:55:4B:B7:9F:A1:E3:0D:97:C7:0E:8B:84:8D
X509v3 Authority Key Identifier:
keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:39:bb:05:28:ec:49:a1:60:41:4b:c3:a8:1b:f8:c5:87:6f:
1e:6c:31:0e:86:34:90:c4:2a:7e:9b:0a:12:a0:7c:6a:e9:ef:
33:4c:1d:69:51:65:13:44:13:cc:cd:d9:f8:1c:58:89:e0:ba:
6a:70:aa:7a:ba:de:9d:ac:71:bf:e4:3e:21:9c:2e:d2:96:23:
14:3c:72:e5:52:2d:13:1e:f9:aa:77:0a:79:2a:ee:fd:a1:21:
9d:77:ce:b5:ae:5a:fa:44:d2:52:33:d1:d4:27:80:b3:5a:ba:
b4:0f:6b:5e:6e:b4:0d:d0:08:82:bd:03:a0:58:27:f2:70:fa:
61:00:bf:5d:2c:71:2d:a3:89:6d:cc:eb:65:d8:a6:2e:ac:0e:
08:07:f6:eb:b1:57:44:b5:1c:e4:37:5b:8a:1e:ed:b0:f5:22:
9c:f7:41:b8:8b:56:43:c6:1b:e5:22:30:4a:01:fa:81:c8:6d:
5d:a0:57:2e:26:a5:12:1d:80:a1:48:1d:d4:09:30:57:32:33:
cf:1b:9e:63:c3:9d:19:2a:cc:a3:f8:b0:2f:55:0d:10:15:c1:
86:fa:8d:3e:1d:fa:ff:a9:71:d5:27:b8:24:69:38:48:5d:a5:
ec:ac:c5:db:80:4f:ac:a6:12:17:2c:9e:38:7e:b3:36:5c:b8:
da:0c:8e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:00 2025 by rpki-client