Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
File: HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json)
Hash identifier: sxPzgxU1pi2JmHoSfzf9PWCWaPQJ2+A0nIDGhurureY=
Subject key identifier: CA:21:E1:A0:75:2F:D0:36:18:EF:C6:FE:EB:2E:88:0B:34:8E:C4:9D
Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Certificate issuer: /CN=1f1523928d8e8e54be467976331a0121d42a0067
Certificate serial: 01965B02E1954F63FD17021F98E67E13DCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 01:00:37 +0000
Manifest this update: Tue 22 Apr 2025 01:00:37 +0000
Manifest next update: Wed 23 Apr 2025 01:00:37 +0000
Files and hashes: 1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: j8DORpMoouxHWQ7VphsGwOAnp90/T8bKbp9Oh9lAlHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:e1:95:4f:63:fd:17:02:1f:98:e6:7e:13:dc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067
Validity
Not Before: Apr 22 01:00:37 2025 GMT
Not After : Apr 23 01:00:37 2025 GMT
Subject: CN=ca21e1a0752fd03618efc6feeb2e880b348ec49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:81:52:38:b6:02:1f:ee:f4:5c:bc:88:cf:
6c:7b:a1:e9:22:71:1e:97:9d:d5:4a:5f:f9:a4:9a:
c6:d5:e2:0a:6b:99:da:6a:32:3f:0a:14:16:46:18:
4c:59:65:7d:4b:a7:84:d8:ab:08:89:bc:28:f4:a8:
5e:d6:c7:9d:b4:9c:e0:56:4c:3f:6d:42:b9:76:e5:
a5:89:de:e9:cf:61:a7:6c:0e:c9:2e:b4:e6:25:f0:
1c:aa:ce:03:71:f4:05:24:1a:2f:58:aa:a4:cd:ca:
e4:c0:a9:9b:40:b1:d8:d7:c6:a3:17:ca:42:88:c8:
d2:12:af:32:0b:b0:b6:bd:b4:d1:39:ed:4e:14:28:
43:4d:34:e3:59:48:1d:cb:5d:80:7d:28:d3:c9:10:
5f:f5:81:b8:58:3f:3b:91:cc:17:4e:53:95:66:cc:
a0:ea:d3:de:85:b4:a9:58:99:8c:a1:a3:f9:99:4b:
2f:21:16:27:90:c6:f3:bb:71:a9:2f:5f:51:80:8e:
e1:48:9d:cb:fb:df:a6:bc:c6:86:c1:a2:ad:c9:b6:
12:1d:1c:e3:e8:47:c6:47:1b:38:66:a6:60:e2:b9:
54:90:9b:f0:16:e5:7f:2c:fe:52:50:a9:64:e8:c7:
a8:27:75:f6:13:67:c5:33:0b:a6:4e:15:08:cc:6f:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:21:E1:A0:75:2F:D0:36:18:EF:C6:FE:EB:2E:88:0B:34:8E:C4:9D
X509v3 Authority Key Identifier:
keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:50:09:38:f1:39:87:27:a7:64:cd:c9:bd:1e:7b:e4:2a:c4:
68:6c:62:4d:66:69:b1:0c:40:49:98:3c:35:c2:c5:08:79:22:
54:65:37:dc:19:db:1a:d9:0d:3c:e9:5e:c3:f8:ef:6f:98:4a:
c2:50:3a:1a:bb:1b:ab:76:b4:02:b3:e1:cb:78:16:8d:55:99:
80:5a:de:23:86:8b:76:6c:46:6b:0b:67:18:3b:9e:c4:5c:6c:
11:99:d0:60:48:3a:21:ac:cc:b8:4d:e3:71:52:16:d3:9a:25:
59:9a:19:b9:e1:a2:6f:dd:3b:38:b7:55:ae:2c:4f:5d:22:4c:
b8:ed:01:7d:5d:7b:06:84:82:c1:05:9d:71:a2:40:2d:45:5b:
07:ee:3c:65:b6:a7:b3:a3:ed:7d:e8:c8:35:9a:19:40:c1:52:
86:36:be:19:14:39:bb:71:3f:37:74:94:54:59:92:95:c4:20:
61:74:b4:c1:97:29:b9:a8:cd:e3:ed:14:52:98:f9:cd:57:48:
5e:e3:87:cb:23:5f:f8:3c:89:c6:7d:8b:98:7e:bf:1d:dc:93:
44:b1:c6:7e:18:38:17:7b:05:65:87:03:3b:b6:76:00:a6:7c:
bf:56:3e:bd:2e:39:20:04:9c:8d:75:21:06:30:14:6f:8f:bd:
d6:dd:98:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:06:50 2025 by rpki-client