Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: hWjLFcD6MUU29Mw1LvTZ1nCHyzRNe4HarhW4lwXRDfU=
Subject key identifier: D6:C2:62:47:0D:23:DF:99:03:73:18:8A:E3:54:E1:34:17:71:AC:3A
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 01963576822991E44231554151C1E0965DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 14EE
Signing time: Mon 14 Apr 2025 18:01:21 +0000
Manifest this update: Mon 14 Apr 2025 18:01:21 +0000
Manifest next update: Tue 15 Apr 2025 18:01:21 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: YM2NMb8SbP3fnZ+W1T7WwOu1yHrONp1AJQv7tWb2T44=)
2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:76:82:29:91:e4:42:31:55:41:51:c1:e0:96:5d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Apr 14 18:01:21 2025 GMT
Not After : Apr 15 18:01:21 2025 GMT
Subject: CN=d6c262470d23df990373188ae354e1341771ac3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:73:30:9c:07:87:33:92:bc:f4:ca:39:d2:
bd:cd:58:19:2f:61:29:04:4b:02:a6:11:8b:14:14:
33:80:7e:0a:c1:da:05:bc:5c:5f:aa:a3:f6:3d:2c:
ed:44:bc:1a:b5:e4:04:9e:5b:4e:72:b7:8d:a4:f6:
1f:2a:1d:e1:bf:ed:ae:1e:96:43:fa:e9:1a:1f:fd:
88:cd:b6:20:8c:89:af:2f:8d:70:6f:16:db:80:f0:
3c:56:0d:9d:19:a9:f6:e1:52:c5:45:01:81:cf:c9:
0e:a7:d4:fb:2f:05:da:47:c5:42:84:64:53:80:26:
5a:ad:f4:a7:17:f3:2a:b8:29:67:3f:ce:60:a8:8b:
2c:63:23:ec:34:6e:cd:57:54:3f:c8:a9:49:5e:a3:
ad:49:7a:b6:8b:b6:ed:31:d8:cd:1b:b2:6c:84:af:
52:65:d1:34:57:7b:08:d1:89:2e:e2:c5:2d:27:ce:
dc:17:7d:09:8f:31:a3:24:28:2f:27:41:54:45:67:
49:7d:a3:7c:7b:c9:99:33:fd:93:81:bf:12:96:bc:
b4:7d:c2:3d:1a:59:0e:4c:3e:b7:d1:56:ea:be:1c:
d8:29:48:7a:97:e7:2d:2b:14:49:c9:68:cc:99:f5:
95:b5:1c:bc:f8:97:fd:51:1e:a1:82:08:55:4a:06:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:62:47:0D:23:DF:99:03:73:18:8A:E3:54:E1:34:17:71:AC:3A
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b1:3a:db:10:92:99:d4:b8:16:da:82:37:04:04:4c:df:83:
69:28:ad:69:9c:21:8a:3c:cc:74:43:e9:bc:67:d4:24:6d:ea:
f9:64:e4:e0:85:3a:df:43:d9:63:39:d0:4c:0c:8d:bc:ae:e9:
5e:59:32:44:24:b5:48:d0:71:83:a5:5d:8d:94:d7:ba:18:ba:
8a:f3:65:c1:52:e9:2b:35:92:95:5c:e5:bf:d7:d6:aa:50:b5:
0b:a6:cc:f2:7b:20:79:36:d6:84:4b:bd:63:92:36:24:2d:d4:
fa:f1:89:f4:a9:24:bc:fa:21:4a:f6:0b:83:df:e0:10:3e:98:
a1:16:9f:97:7b:65:fc:dd:9d:a0:32:e7:e2:65:a3:18:a4:30:
73:c5:4a:9b:9f:47:40:b6:2b:c3:4b:5c:a5:4e:67:1c:e5:73:
a5:bf:34:93:ed:73:52:fd:36:89:c7:69:53:d1:b9:12:38:b4:
58:aa:89:57:b4:31:a2:d4:97:08:18:3a:ab:a5:4e:8c:7d:50:
33:aa:da:65:5b:c2:b9:2a:42:66:f5:e1:5b:a9:35:30:9b:5c:
45:4a:9a:00:85:cd:15:29:d6:4e:c1:85:27:44:0b:4f:86:2e:
82:1d:17:7c:96:0e:75:50:fa:b3:b0:c4:3f:82:9a:d8:6c:86:
89:51:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:46:31 2025 by rpki-client