Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File: hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier: I7xKMAoP9kiHUKJ2v1IE3IFjzbO4p+w2/5nap5muwks=
Subject key identifier: BC:C2:1B:C2:E0:24:70:F8:12:A4:A3:D7:95:24:71:68:1B:82:9E:96
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer: /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial: 019659B977FC60695E718FE4AAF9EC61CDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number: 0914
Signing time: Mon 21 Apr 2025 19:00:49 +0000
Manifest this update: Mon 21 Apr 2025 19:00:49 +0000
Manifest next update: Tue 22 Apr 2025 19:00:49 +0000
Files and hashes: 1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: aACDI38cT3GlLsTM9zLjrKuv7JrIEnxlG7Uy92N6yaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:77:fc:60:69:5e:71:8f:e4:aa:f9:ec:61:cd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
Validity
Not Before: Apr 21 19:00:49 2025 GMT
Not After : Apr 22 19:00:49 2025 GMT
Subject: CN=bcc21bc2e02470f812a4a3d7952471681b829e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:ea:a0:c1:1d:f5:d9:71:66:19:04:f2:2f:
81:0c:11:95:00:ab:27:62:27:07:e7:1f:0a:36:9d:
3a:1c:66:ad:76:37:5f:45:6f:d5:c1:df:99:f6:10:
d4:6b:56:2c:65:b3:60:4c:f2:b9:d7:9f:21:b2:fc:
22:b2:1a:76:b1:4b:38:29:eb:f2:d9:61:80:cb:ae:
29:99:30:54:0e:0d:96:24:a9:34:d7:8c:e2:7f:0b:
cd:19:f6:3f:67:c5:9a:f9:1b:fb:42:f6:65:0a:51:
30:c6:c8:95:ae:73:fb:9c:83:86:ca:b1:b6:f1:da:
7f:bd:e8:e8:03:73:b5:7f:37:a0:a7:c6:61:ec:6d:
5f:e4:fd:4f:d2:aa:25:f9:1d:df:d7:41:4b:17:03:
eb:f3:5c:8f:ea:e4:6a:d3:27:cd:a4:a0:31:12:47:
b7:92:f8:06:d1:5f:c1:34:78:18:cd:3a:41:24:5a:
1d:75:c6:f1:3f:94:84:82:c2:f8:9c:4d:2a:34:99:
fd:55:e6:21:3d:8f:bd:0e:05:04:2a:3c:a4:42:6d:
de:ed:a0:4f:1a:4c:06:69:a5:f3:23:c6:22:aa:26:
19:92:af:f0:b0:3b:5a:0e:c4:de:38:7b:f4:6f:b2:
e9:84:e5:8b:cd:3d:e9:ea:9b:b7:2e:15:01:ca:c5:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C2:1B:C2:E0:24:70:F8:12:A4:A3:D7:95:24:71:68:1B:82:9E:96
X509v3 Authority Key Identifier:
keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b7:8c:9f:35:e4:98:b0:9e:f0:98:49:ed:7a:67:b3:74:53:
4a:6f:b8:2c:6a:3a:41:fe:a4:f0:ab:0c:0c:ec:c7:13:8e:3d:
ab:3f:a1:2f:6a:6c:be:05:e5:19:4c:64:09:38:35:e6:3f:a8:
8e:b8:4b:65:a5:5a:51:2e:22:f4:c0:ea:5f:10:8a:e5:67:45:
38:b7:39:15:6a:48:65:9c:d1:88:f6:2e:d0:2b:71:94:25:e8:
f8:c9:9e:09:55:e2:58:36:3c:57:90:00:9f:df:94:0a:60:80:
63:25:75:59:a7:5f:af:43:c7:76:14:57:c6:93:a6:0e:40:2e:
0e:38:a7:cb:fd:41:57:15:d2:f9:33:44:3a:9e:71:90:7e:be:
ed:55:80:bb:63:46:54:95:c9:19:f8:08:5b:e3:15:97:25:4a:
37:01:6f:c1:1a:d7:30:4f:2f:a0:88:03:31:c3:e3:14:c5:8e:
36:9a:47:e0:4b:56:d2:44:37:97:92:15:fd:87:6b:8e:a4:18:
53:93:a7:8a:40:d0:8c:e5:87:96:ab:df:e6:f6:d7:2d:f2:0f:
3e:a7:c0:ad:e3:ec:7a:2f:9e:6e:b6:a2:76:07:50:de:13:30:
08:38:6c:df:a4:1b:5c:19:53:8f:2c:b6:db:ef:d1:db:b7:68:
b4:b7:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:56:43 2025 by rpki-client