Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: djz2LvPDFcGJEaRehPRbY2Wo7c153/f46sbpRNNNnMY=
Subject key identifier: 01:31:9A:E1:D1:DD:69:99:CB:B8:FE:16:0F:F1:4A:66:00:6F:78:0E
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 01965538473E72CEB34E18A8B7A0E06BFA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 05DC
Signing time: Sun 20 Apr 2025 22:01:13 +0000
Manifest this update: Sun 20 Apr 2025 22:01:13 +0000
Manifest next update: Mon 21 Apr 2025 22:01:13 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: yhMqcmTOrvrVrlf4QRKB0NYMi7fOc6rqE/FEYRmZpaA=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:47:3e:72:ce:b3:4e:18:a8:b7:a0:e0:6b:fa:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Apr 20 22:01:13 2025 GMT
Not After : Apr 21 22:01:13 2025 GMT
Subject: CN=01319ae1d1dd6999cbb8fe160ff14a66006f780e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:b5:c8:b0:cd:ea:27:64:ac:8a:d4:14:33:
30:5d:9b:84:c9:e3:bd:8b:98:44:3f:3f:d2:d2:21:
43:93:48:7c:46:23:65:76:22:a0:ec:ac:a8:40:ee:
92:07:ac:13:08:98:59:54:ad:42:bb:32:6f:58:f0:
d0:72:0b:4e:04:7c:4e:6f:75:83:f1:58:37:7f:ff:
f5:c8:9c:e0:a7:05:f0:2d:02:37:a4:b3:78:4b:0c:
df:bc:5e:55:b2:cc:4f:df:07:0c:c9:df:c8:f0:07:
5c:69:f8:03:85:03:c7:29:4a:f6:35:9f:0a:53:97:
06:b1:d6:4a:c6:34:2b:9a:1a:ae:42:6a:68:2e:eb:
82:03:6c:2b:f3:b6:47:5f:af:b6:80:7d:30:df:52:
18:c6:ab:ad:98:07:04:d8:f4:6f:17:88:aa:e3:0e:
33:fa:a1:fb:e3:ed:1a:f5:97:30:41:61:ff:40:57:
81:fb:13:98:3e:35:ff:17:ed:ec:64:a1:10:ef:16:
2d:60:89:37:53:18:93:c7:e3:6f:cd:f9:88:66:54:
c1:e7:31:2b:a4:e8:34:dd:0a:2f:d9:3a:6b:f8:ee:
0c:ab:67:31:34:fc:69:fc:b6:df:5a:cb:46:15:4d:
e2:19:9f:27:5d:21:82:62:b1:4d:2a:9c:cc:2f:1f:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:9A:E1:D1:DD:69:99:CB:B8:FE:16:0F:F1:4A:66:00:6F:78:0E
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:de:0b:1d:77:23:24:cd:af:4b:be:67:13:fa:97:7e:8a:0b:
eb:64:07:1f:d9:01:a5:c0:38:e3:6d:15:6d:a2:7d:5a:01:4b:
e9:3f:20:42:a1:a6:42:d3:52:1d:8e:47:ed:e4:74:81:bf:79:
5b:ad:b6:5e:d1:a6:67:e6:9a:13:47:4a:2a:93:8d:80:9e:1b:
54:d2:5c:32:0d:c2:b2:b8:8a:88:32:21:3b:99:fc:d0:03:46:
97:17:51:f3:94:59:96:12:11:ab:b8:51:14:f6:bd:92:0d:e3:
53:99:c5:61:d2:e4:ef:d4:95:63:2d:94:df:a9:ba:77:b8:99:
7f:a3:2a:64:53:33:6a:c6:3d:4c:da:8a:dd:2d:7c:3d:4e:e5:
f2:44:8c:6a:06:3c:67:da:67:3a:ce:e8:77:0e:6a:51:7b:5c:
33:ab:ff:05:b7:ce:27:ce:cc:46:c9:79:1e:21:5b:80:e6:1b:
65:65:47:3a:93:05:c2:52:8d:cf:75:dc:07:ee:59:7c:10:ee:
89:58:4e:a7:a8:bb:db:d0:0f:e1:e0:58:d6:cb:f5:58:73:16:
32:a1:08:5e:66:90:a8:b7:87:d4:3c:08:55:63:05:f1:94:59:
38:92:03:b3:a2:ab:e3:a4:01:14:1a:5c:1b:57:3e:1a:f9:7f:
df:14:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:40:44 2025 by rpki-client