Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: O5JtPm26R1xEkG2Cu/CtICa009OVmQ0KvgA12tKEQOE=
Subject key identifier: 88:EC:FF:DD:92:2B:D1:31:BD:2A:2E:BC:2D:4C:05:11:78:85:EF:7B
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 01965EDF64B06F0C330F207653C5171745E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 1135
Signing time: Tue 22 Apr 2025 19:00:20 +0000
Manifest this update: Tue 22 Apr 2025 19:00:20 +0000
Manifest next update: Wed 23 Apr 2025 19:00:20 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: +Mjju9QehwbK3HGlEngjY+1OFqLiFCB3mYErhQHufl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:64:b0:6f:0c:33:0f:20:76:53:c5:17:17:45:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: Apr 22 19:00:20 2025 GMT
Not After : Apr 23 19:00:20 2025 GMT
Subject: CN=88ecffdd922bd131bd2a2ebc2d4c05117885ef7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6b:98:bf:94:05:70:64:62:3c:d3:4a:7f:01:
71:33:cb:2a:c4:62:55:cc:b0:57:5c:13:1c:3c:07:
25:c3:73:52:55:21:cc:97:7e:78:4a:cc:f2:ab:33:
2a:81:47:c5:a8:ef:ab:2a:86:c6:af:72:68:85:bd:
eb:89:42:da:4a:a0:13:af:11:de:77:a9:72:2e:08:
61:06:57:ef:04:2b:9b:f4:c2:60:ff:0e:8f:66:fc:
18:a5:f2:2b:be:b7:4c:52:0e:8f:2a:6d:3e:fc:7c:
79:03:f3:99:42:ef:3d:c6:c6:bb:61:66:9d:f7:6a:
91:3d:56:fd:0a:8b:b4:41:31:34:2c:cc:05:67:a3:
c9:57:eb:f8:8c:83:7a:5b:d5:de:73:a9:00:e9:0d:
d6:62:dc:92:3b:82:22:ac:5b:e8:49:a8:7c:42:10:
0a:eb:fe:24:df:ed:26:6b:2d:38:66:c6:dd:a3:f8:
c1:01:37:eb:a0:ba:76:56:dd:1d:e3:08:4b:7c:53:
16:45:a9:5b:bc:0e:b8:43:bf:20:98:a0:b5:83:4c:
ee:24:fd:9d:4a:85:45:60:08:61:0e:d8:eb:d9:3c:
48:a0:85:1d:ec:fc:ec:68:e7:fc:26:8f:b0:de:77:
cf:77:78:64:2b:8d:df:83:24:dc:6c:57:19:6a:2f:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:FF:DD:92:2B:D1:31:BD:2A:2E:BC:2D:4C:05:11:78:85:EF:7B
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:12:97:cd:c7:83:eb:c0:2c:6b:dc:04:17:c1:33:d6:df:b5:
f3:90:f6:69:77:38:d5:e6:cc:d9:3b:49:93:65:7c:b2:82:c9:
f1:35:33:5b:a0:e6:0f:d3:17:a8:32:5a:6c:25:d0:36:ff:c2:
8b:4e:ff:e8:07:76:ad:da:0b:a5:39:69:de:f6:81:ff:f5:9c:
9c:13:c1:b7:1b:ed:b2:dc:b1:3a:66:94:a7:37:24:99:54:99:
eb:00:36:46:eb:a9:99:88:87:3b:3c:0e:76:58:c8:e2:f9:08:
cd:de:ba:09:e3:61:1f:52:36:e8:b3:8f:6c:64:0a:e6:63:d2:
0d:c4:14:12:73:40:93:90:d9:6d:f2:6b:8a:17:6b:b5:88:79:
23:4b:64:7d:08:5d:59:e7:62:5c:ec:ea:ac:26:56:c1:08:b5:
7e:23:2f:8b:e8:a6:9e:a3:31:f3:d0:91:7d:bd:db:e5:61:f7:
6e:41:1c:cc:c2:a3:ed:ff:1e:36:55:e0:2a:48:a3:c4:ec:26:
45:fa:9f:f4:2a:ec:b9:c2:ea:98:26:17:bf:60:d5:15:68:aa:
eb:74:b6:27:1a:6b:07:c8:ec:9b:0f:54:88:b5:10:3e:2d:51:
d9:47:3a:da:e3:61:cd:cd:f6:ff:8d:0a:86:12:e5:e5:6f:a9:
e9:fd:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:30:58 2025 by rpki-client