Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: +v29Cz5FqUtUOnbZQPFLvca4oveGBJHsQjKSUgvVhCo=
Subject key identifier: C9:46:D5:A6:19:96:3F:AB:1E:19:1C:E2:85:2A:55:4C:81:1C:2C:0C
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 019655379E7046437969B1A288481DA29785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 1458
Signing time: Sun 20 Apr 2025 22:00:30 +0000
Manifest this update: Sun 20 Apr 2025 22:00:30 +0000
Manifest next update: Mon 21 Apr 2025 22:00:30 +0000
Files and hashes: 1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: YDRSN6vG1JSSKZBoq0tFKFXII2i6W+lw6yGrnsTEkMo=)
2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:9e:70:46:43:79:69:b1:a2:88:48:1d:a2:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Apr 20 22:00:30 2025 GMT
Not After : Apr 21 22:00:30 2025 GMT
Subject: CN=c946d5a619963fab1e191ce2852a554c811c2c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:17:1d:13:4b:f8:d9:a5:89:64:bd:fa:8b:
f1:44:ef:64:87:73:dd:53:ad:19:79:44:1c:d4:06:
83:a9:be:b3:ac:7d:36:68:4a:fd:ba:cd:25:22:cf:
b7:5b:d7:37:d7:20:ef:37:88:e1:cb:e8:48:f6:ba:
23:fd:06:d2:a7:e2:ba:79:0a:1b:23:64:8c:c1:96:
bf:df:47:4e:ee:20:0e:13:cb:66:22:a3:31:30:34:
e1:1e:63:56:e3:0b:14:f2:8f:25:ec:b0:f0:c5:1d:
b9:16:d3:76:ab:61:9a:ae:8b:2b:0c:4f:f8:69:a2:
6d:33:32:44:c8:47:69:c4:31:82:bf:50:ed:a7:6a:
b1:a5:4f:08:ac:36:61:97:62:f9:5a:08:4d:b3:ee:
39:df:08:ea:bb:46:c7:6f:f2:1c:6c:ba:f1:cd:11:
44:b1:ee:e9:36:59:52:f3:84:f4:a9:23:00:8f:92:
11:de:c0:e2:0c:07:c3:e8:51:ee:3e:f7:55:12:09:
74:ff:d8:22:84:d7:c0:de:6e:e0:a9:c7:14:b0:f2:
87:7e:b3:b7:b8:fa:f6:ca:83:c2:d4:10:89:c2:dc:
61:c2:55:b5:d8:3a:c3:f4:a0:55:fd:cd:54:2d:8e:
64:f4:85:28:26:bd:49:43:4e:38:f0:43:a7:b1:74:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:46:D5:A6:19:96:3F:AB:1E:19:1C:E2:85:2A:55:4C:81:1C:2C:0C
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:eb:c3:3e:86:2f:05:75:d3:1b:ed:f7:3f:75:8b:b4:2a:28:
d5:48:0a:3a:18:5c:a3:39:1d:01:27:61:bb:a1:03:cd:ca:ca:
70:c3:62:c7:d6:ed:5d:ae:f4:a3:ad:a4:44:90:53:83:0d:f7:
f6:22:90:79:2d:f0:18:21:b0:62:c7:ac:9b:22:9a:04:82:b8:
b5:9a:cc:e3:a3:cb:b5:a2:f9:a8:52:29:cb:27:62:21:76:60:
31:1b:1d:de:ac:6a:b4:8c:b3:8f:de:90:58:e6:4e:10:3e:c7:
54:88:d6:c2:cb:5d:21:82:56:57:b8:0b:3d:99:97:75:85:46:
c3:1c:90:a6:e4:36:dc:59:d7:53:3a:b2:99:39:db:de:e3:09:
0e:73:d8:ba:24:53:46:89:f2:83:83:06:6e:3e:a8:34:e6:53:
63:b9:78:8f:75:cd:42:6b:d1:ba:65:ae:2a:69:88:b4:55:3d:
80:24:fe:55:a6:4f:8f:6b:68:9a:4e:94:70:5e:eb:ea:3d:92:
f7:1e:85:2d:7d:90:c0:42:d6:b9:27:6d:47:60:0f:d6:d0:21:
8c:bd:99:dc:64:8b:d0:b6:ef:0c:22:b8:a4:ac:59:db:da:62:
ef:13:57:28:2e:b7:eb:e5:02:cc:31:a3:75:e8:df:4c:ad:0c:
91:9f:d7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:55 2025 by rpki-client