Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: TL/Qgl9c/k/rtqTe90pL1Qbmod3qo3PoxEhl7OU7nZw=
Subject key identifier: AE:BF:0F:A2:62:74:0D:52:9B:E4:C5:7E:EE:8D:F2:06:B4:3B:1E:A6
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 0196591421084E52EFAF3D65A8D9D220C46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 063C
Signing time: Mon 21 Apr 2025 16:00:13 +0000
Manifest this update: Mon 21 Apr 2025 16:00:13 +0000
Manifest next update: Tue 22 Apr 2025 16:00:13 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: 0osQ3kWg8TvlHZ8ma9acpzf1SAv4ibUAOE6INka5f5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:21:08:4e:52:ef:af:3d:65:a8:d9:d2:20:c4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Apr 21 16:00:13 2025 GMT
Not After : Apr 22 16:00:13 2025 GMT
Subject: CN=aebf0fa262740d529be4c57eee8df206b43b1ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:de:03:d6:79:19:73:a5:1b:e1:7e:bb:77:
0d:a2:05:8c:92:91:3a:ae:97:4d:d0:09:39:db:44:
83:31:32:c6:32:a3:61:0c:a8:5a:ef:d8:07:f6:12:
d1:9b:c1:d0:18:1d:28:5f:a8:88:54:c5:e4:41:0d:
78:07:02:11:ee:51:cc:75:a0:d1:42:96:cd:73:ef:
07:75:e0:1a:85:cc:9a:3f:4a:ce:86:2e:bc:54:ee:
ce:86:7b:ac:2f:45:39:48:c0:e9:d6:6d:d4:6d:4d:
61:39:14:a1:69:26:e4:c2:aa:4e:61:c4:dc:b5:8f:
b9:a9:98:2c:e4:c3:17:6a:73:6e:54:26:f5:86:9e:
89:91:d4:f8:be:80:23:53:12:30:bd:72:03:2b:46:
7f:0e:dd:a9:2e:ca:2f:55:26:40:47:85:92:92:c7:
19:7e:a8:3e:c2:b8:e1:2d:61:57:4f:62:30:4e:55:
78:6a:b0:ce:ba:6e:4b:b9:82:94:28:10:ce:c1:33:
08:85:33:29:50:3c:f5:dd:1b:b7:05:f6:38:71:81:
68:6d:de:fc:e1:27:96:77:35:1b:6f:74:12:5c:61:
e3:f0:59:21:cc:9c:8d:8b:35:65:c0:d3:b6:79:9e:
1d:25:db:72:8d:7c:50:ab:85:b8:6b:bb:f4:bc:07:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BF:0F:A2:62:74:0D:52:9B:E4:C5:7E:EE:8D:F2:06:B4:3B:1E:A6
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:94:cd:7a:ce:be:2e:77:ce:98:e4:93:17:21:01:db:71:3d:
64:ea:64:98:c1:87:21:c7:12:92:a0:b3:35:bd:91:fe:76:ff:
db:97:9a:12:4d:25:49:f3:e8:7e:49:af:9b:2d:71:14:11:65:
3d:06:78:51:2e:a7:49:8d:09:12:9e:cc:15:58:bc:97:48:0f:
2e:1e:79:71:84:b7:84:77:64:ad:86:ac:f8:74:2c:22:fa:53:
89:a1:93:6d:f4:e1:e3:64:b2:4a:40:37:ed:97:12:a4:c5:86:
10:c1:66:60:80:d5:38:41:40:71:b7:d9:c7:38:9b:f2:9d:aa:
d7:20:63:3a:ea:de:68:f5:a8:bf:b8:cc:bc:17:0b:58:03:5e:
07:5d:90:50:fc:e6:9b:d4:d9:3b:63:e8:d2:7c:5a:13:30:4b:
a6:78:56:f4:f2:8d:69:7f:29:50:84:78:bf:03:2a:72:c6:ce:
e6:58:a6:4a:d8:b3:49:65:97:9e:57:3c:e1:a4:bb:78:87:6f:
39:bc:e7:6a:6f:b2:99:4b:b5:84:a4:f0:0a:b1:39:c4:9f:5a:
8f:9f:51:b7:8a:34:d2:f0:51:f2:3d:ff:5c:af:ea:ec:0e:ab:
24:1c:e0:13:c4:07:5e:c9:50:31:11:ce:45:1a:34:6c:93:a9:
c8:ba:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:26 2025 by rpki-client