Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: CBMQfXzy9LuabonlCWkJZ3QQNAXeefXFv/rvWsCcxG4=
Subject key identifier: EF:38:2D:66:39:2E:78:9E:6F:B5:32:47:E4:83:C7:6D:BD:D5:F0:4C
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 0196564A65AE0E08B208DB8DFF4B7FB3874E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 03:00:38 +0000
Manifest this update: Mon 21 Apr 2025 03:00:38 +0000
Manifest next update: Tue 22 Apr 2025 03:00:38 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: 4XoJV1kHLiE2J5HqWhj0IXkFOYUdv1/PQk1ihUgQR5o=)
2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:65:ae:0e:08:b2:08:db:8d:ff:4b:7f:b3:87:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Apr 21 03:00:38 2025 GMT
Not After : Apr 22 03:00:38 2025 GMT
Subject: CN=ef382d66392e789e6fb53247e483c76dbdd5f04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:dd:5b:c6:07:ad:ac:5c:3b:bf:6a:ca:29:
3d:0c:f8:e2:63:9b:57:67:98:12:da:f8:56:52:1d:
98:57:f1:bf:fc:04:ad:dc:5d:38:7f:dc:47:e2:8b:
8d:2a:7b:31:94:cb:5d:52:87:8e:7c:ef:7d:15:af:
da:3d:fc:ec:8e:8a:f6:3c:37:42:5b:3c:aa:51:ba:
e3:e6:c8:90:fa:95:ed:aa:06:02:76:e6:69:94:fd:
83:c4:cc:33:19:1e:c4:c3:ca:b7:a3:72:8a:d4:b1:
a0:ca:08:3d:fe:86:40:d5:0a:87:d7:4d:5d:55:02:
67:87:33:63:7d:eb:27:5d:f9:bd:0e:7f:68:63:c9:
b4:11:09:46:e1:6d:dc:80:52:50:1f:99:06:51:61:
f5:1f:55:e9:13:e6:b0:0e:48:6f:d4:fe:ad:1f:e0:
b4:c4:4f:ba:68:34:a1:71:1c:7e:08:7c:e7:c2:96:
74:c6:47:d7:3a:0d:a4:b0:4a:b3:2f:6f:6a:cd:57:
94:87:22:75:42:9f:5e:9d:68:e0:c7:75:da:44:21:
e5:12:3f:11:4a:b7:ea:7b:d1:be:1f:70:10:d8:f3:
36:d6:7e:6c:5c:be:a9:cb:c7:bd:83:85:33:1a:91:
99:57:fe:45:1e:6f:8f:83:a7:19:ec:0c:2e:cd:47:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:38:2D:66:39:2E:78:9E:6F:B5:32:47:E4:83:C7:6D:BD:D5:F0:4C
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:18:a7:f0:5c:a9:fc:47:52:9b:cd:22:61:dc:b4:b0:d3:62:
52:41:45:53:e9:a7:0b:12:67:22:82:26:ee:b3:34:b2:62:ae:
44:58:cf:cf:a7:2f:ba:85:bd:1f:7c:9d:fc:35:ff:f3:ca:56:
36:c4:d0:76:13:93:82:c1:9a:b6:3d:f4:a6:77:81:06:85:e0:
2f:61:7c:cf:f2:18:16:79:be:08:2d:42:e8:ed:14:67:8a:bd:
ae:d3:84:67:34:4d:e2:c3:8a:96:e2:a5:26:cf:99:3d:e1:8c:
88:d9:31:43:a1:4e:06:88:b7:2a:e3:51:5e:2c:69:67:48:78:
fb:e2:53:5b:24:dc:e4:62:d2:88:f6:0a:53:c9:c4:25:02:bc:
c3:0a:0b:bc:e3:bc:d4:f0:8b:47:0e:80:3d:9b:99:2f:23:cf:
3f:f8:22:64:ba:4a:52:de:20:50:04:56:f9:63:ea:37:3b:33:
c4:87:a0:bc:ca:0a:5d:21:05:82:3d:00:4f:2e:07:91:8e:0f:
62:87:19:78:c3:e8:19:49:d5:cc:13:7e:2e:42:d2:60:25:b6:
06:d1:84:ea:3b:35:e1:71:f5:6a:58:61:cf:25:8c:d3:f5:78:
84:a2:e3:3c:d1:54:62:b7:45:53:bd:ce:13:98:0f:96:5a:c2:
08:be:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:11:33 2025 by rpki-client