Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: +erx8fckaE3taSTCEgODjYTwfjbfJy+k9IuD0Vgs1vM=
Subject key identifier: AC:2B:58:AD:6B:9C:11:49:C2:86:83:AC:EB:C2:6E:9D:24:FE:23:08
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 019653EE4E3CBF2852BEC6E7FD3DB45B4317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 0C80
Signing time: Sun 20 Apr 2025 16:00:48 +0000
Manifest this update: Sun 20 Apr 2025 16:00:48 +0000
Manifest next update: Mon 21 Apr 2025 16:00:48 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: TER9hCPtvDCiPxgRTucHZlYc2KXhlvQdyQL2ZGNeX8Y=)
2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:4e:3c:bf:28:52:be:c6:e7:fd:3d:b4:5b:43:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Apr 20 16:00:48 2025 GMT
Not After : Apr 21 16:00:48 2025 GMT
Subject: CN=ac2b58ad6b9c1149c28683acebc26e9d24fe2308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:52:04:3a:fe:f4:73:0e:20:f6:ac:58:11:
cc:8c:00:1d:f9:96:c5:c5:23:92:33:8e:fc:4c:c0:
9d:a1:36:86:fc:f5:2a:52:56:49:06:c7:81:ee:6e:
c9:bf:08:5b:38:f6:36:21:17:b6:6e:6f:ea:e7:f5:
56:ce:7f:45:9f:75:ef:3d:56:67:60:33:6e:57:70:
f6:2e:5f:73:5e:aa:50:62:6e:a6:04:00:49:61:4c:
c0:17:9a:3c:a8:23:a2:3b:81:78:de:23:85:49:6a:
b7:54:0a:1a:11:e6:ce:23:1e:db:f7:15:00:57:01:
3d:f1:d0:d9:58:35:7f:01:44:95:22:fe:d7:3e:29:
98:7f:b9:8b:76:58:48:e8:e9:c6:a5:21:64:f9:f1:
af:bb:4b:e3:b8:b2:5b:3a:77:57:79:79:ef:fb:51:
2d:c7:66:9a:c8:a0:9e:2f:b5:32:ae:49:30:b7:f1:
71:cc:05:6a:97:60:ba:6c:b9:18:7e:f8:48:cc:4a:
b2:21:9b:d2:6f:82:1f:fa:af:c6:23:50:dd:83:b3:
47:a3:70:b0:08:bc:76:8e:27:9a:fd:10:46:8e:0d:
3e:50:57:36:43:63:74:4d:b2:8b:6c:98:24:64:63:
d5:61:d2:4d:e1:85:9c:60:28:56:31:b6:49:ff:b9:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2B:58:AD:6B:9C:11:49:C2:86:83:AC:EB:C2:6E:9D:24:FE:23:08
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:db:49:41:f6:92:a3:3d:31:05:ea:31:e1:02:15:4a:12:5c:
0e:41:61:4e:3c:a8:8d:36:23:c2:cb:be:c7:3b:19:38:25:73:
3a:23:3f:0f:e9:e1:2a:e1:be:18:d9:d1:3b:b8:37:a7:12:5f:
9b:cd:dd:c0:be:a5:b4:de:4b:a1:e3:43:10:21:fc:f2:57:99:
bb:04:3b:01:82:21:86:98:8a:7d:91:8d:88:95:b5:54:90:09:
00:47:d1:62:d2:47:75:a1:68:f4:a1:db:0b:54:ae:23:72:47:
7c:42:83:50:d8:61:dd:b1:f8:fd:0a:2d:1d:ba:ea:d6:af:23:
64:28:4e:26:5d:c6:51:37:c1:9f:c5:b5:38:61:60:c4:68:e3:
a4:23:86:ad:4c:98:69:db:ad:c2:33:81:5d:b3:34:e3:03:29:
20:e1:d7:71:7f:85:b4:38:38:e4:7c:93:95:70:7b:3e:79:19:
bd:68:79:93:4a:b0:36:5d:12:e6:f8:24:6c:15:4e:aa:ce:20:
33:45:ed:b3:07:97:e3:fc:27:e2:cf:49:ac:89:ca:36:a6:fa:
74:c7:38:34:c8:01:25:3c:dd:80:45:6f:17:d3:87:b6:27:b5:
cc:90:a2:11:84:b5:a4:af:18:58:46:56:46:90:28:68:8e:77:
94:9c:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:33 2025 by rpki-client