Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
File: hJxbptQKtOTjm3tpttLZhEqiSK8.mft (raw, json)
Hash identifier: VJpK+FjYy38VKE0m7JEhr7WCL+E2Iwmmu05S4SQYETE=
Subject key identifier: 9B:36:01:B7:74:8F:0A:85:F2:FF:A6:3C:7D:ED:D5:EF:E6:01:AF:75
Authority key identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
Certificate issuer: /CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Certificate serial: 01965E3B1E1677870E38529D4A82854111A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
Manifest number: 0BE2
Signing time: Tue 22 Apr 2025 16:00:54 +0000
Manifest this update: Tue 22 Apr 2025 16:00:54 +0000
Manifest next update: Wed 23 Apr 2025 16:00:54 +0000
Files and hashes: 1: hJxbptQKtOTjm3tpttLZhEqiSK8.crl (hash: Ojoxigd3u/AG3CGE3sSv0pcRkoMiC6flBsKdrmiXOzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3b:1e:16:77:87:0e:38:52:9d:4a:82:85:41:11:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Validity
Not Before: Apr 22 16:00:54 2025 GMT
Not After : Apr 23 16:00:54 2025 GMT
Subject: CN=9b3601b7748f0a85f2ffa63c7dedd5efe601af75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:48:33:a2:a5:61:84:68:6f:e8:f9:f3:ed:
f8:9c:25:3e:5a:3f:99:33:21:cc:8a:85:8b:58:6b:
fe:0f:e7:62:e4:5d:79:65:b6:e9:58:ad:9f:56:9d:
de:95:25:c3:a2:3c:41:10:a2:32:4f:f3:68:d2:c0:
72:b8:00:12:b3:0d:52:dc:d7:3c:42:b2:6e:bd:e9:
50:5d:a0:c3:e9:69:f6:0f:03:fc:91:aa:f0:d2:ec:
32:ec:49:b9:30:66:25:6f:ba:e3:09:79:6c:e1:0b:
38:29:f7:c0:dd:4c:a6:9a:41:61:36:4b:61:65:04:
e0:5f:ac:51:fa:90:32:66:e5:a1:e3:0c:8d:2f:5c:
a9:bf:ef:99:19:4b:26:1c:45:f7:08:db:86:da:64:
0d:56:11:0e:f2:65:3a:56:38:89:a7:30:eb:de:97:
4c:15:28:90:bd:bb:ba:8b:e9:c3:b6:90:f7:c4:2a:
8d:3c:66:7d:d1:ce:c7:cf:ed:f5:57:64:c6:6b:f9:
72:f3:1f:79:07:30:db:31:db:4f:03:78:7d:fa:48:
ae:c8:32:a0:9b:39:15:0d:43:0c:fa:64:06:95:2b:
3a:b6:a7:04:69:65:e3:77:82:5e:8a:00:4a:e0:50:
ff:18:a3:3f:62:d8:58:8b:02:49:70:97:e3:41:68:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:01:B7:74:8F:0A:85:F2:FF:A6:3C:7D:ED:D5:EF:E6:01:AF:75
X509v3 Authority Key Identifier:
keyid:84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:39:6e:37:17:a1:23:fc:a1:f7:98:be:7f:a7:0e:dd:f3:86:
f6:97:64:75:95:f1:5c:7f:94:fd:dc:b6:69:b8:0a:fa:55:1b:
aa:64:22:71:18:1f:13:8c:15:ef:79:92:8a:9c:80:e0:5c:25:
12:78:93:57:cb:a7:b1:bf:1b:be:88:29:76:8b:0b:26:7c:6a:
98:66:a1:b0:49:56:bf:60:0a:71:2f:41:44:f6:5a:6c:34:52:
3b:7d:1f:94:72:4d:72:2d:de:70:0a:8d:99:d1:b2:a3:f5:e0:
39:d4:5c:c4:1a:14:d0:28:21:54:08:5a:78:58:70:d7:11:d7:
f7:80:f1:58:cc:2f:07:1c:8a:18:20:06:cb:6c:27:eb:50:93:
d5:55:29:96:6d:37:41:0d:e5:f9:a0:5a:dc:83:1c:fa:de:8b:
0a:ea:50:1e:66:85:fe:f9:a8:cb:37:73:92:6d:5f:4a:7f:40:
cc:fc:ad:57:d7:d6:8b:4b:a5:d9:ae:27:97:89:b0:83:c9:7c:
17:e6:0c:09:0a:87:e8:f5:77:2f:18:fa:1b:aa:80:16:20:3c:
22:2f:12:e7:ba:30:4d:e1:bb:de:5c:78:78:7f:99:04:39:f2:
7f:a5:1c:19:d0:f7:05:92:73:d6:12:3a:92:20:9a:e4:5e:48:
27:4b:49:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:00:31 2025 by rpki-client