Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: t7C+zOC4AvQwCM7BSuITpINc5bRNpwolD4G8ptwYhpc=
Subject key identifier: 67:41:89:08:FB:A4:CD:45:0E:B5:7F:C0:DC:16:D3:0C:1A:6D:52:84
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 01964DEBAE78410DEAEFA09BADF203136F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0BDE
Signing time: Sat 19 Apr 2025 12:00:13 +0000
Manifest this update: Sat 19 Apr 2025 12:00:13 +0000
Manifest next update: Sun 20 Apr 2025 12:00:13 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: SwVixbTlZQ9+SshLEtPg+kB/v/0rxEI54/6zGOKOFQY=)
2: obxxCWwwodKEQItq-LvA1UofY7E.roa (hash: EDnG/ruD1T9KRKhZcI5dsIBjNgSOpQ6QRSsT8ooYu6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:ae:78:41:0d:ea:ef:a0:9b:ad:f2:03:13:6f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Apr 19 12:00:13 2025 GMT
Not After : Apr 20 12:00:13 2025 GMT
Subject: CN=67418908fba4cd450eb57fc0dc16d30c1a6d5284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:bd:76:88:28:8e:61:cd:7e:76:e7:d6:c8:
dd:4e:79:47:01:d0:43:24:bf:84:85:2e:cb:55:6b:
21:5b:a8:23:6a:ca:c7:05:5c:8a:08:d9:c1:76:24:
10:54:3b:52:f7:19:2f:7e:5a:68:3b:25:5c:d2:0d:
30:e3:cd:59:c1:f9:60:7d:4b:e2:6c:7a:38:20:b1:
42:04:ee:01:49:9e:ab:90:ff:e5:5f:ce:40:31:0f:
f0:3f:a3:40:5e:c9:54:04:0a:36:3c:b0:28:b6:46:
c7:a9:90:94:b0:80:b3:20:5f:be:0f:65:53:68:f7:
d6:29:a0:80:39:37:f5:a1:28:35:f4:55:83:70:35:
e8:dc:01:a6:f2:c8:73:05:9c:b2:e6:27:90:71:ae:
96:8b:01:b8:ec:65:7b:bc:04:e6:81:29:38:6d:4f:
8a:a4:7b:b0:27:1d:a2:f3:6f:c1:b5:cc:98:3b:b9:
80:44:8e:7f:af:29:2d:14:48:5e:fa:7b:5a:b5:06:
c4:1c:33:5b:c9:da:4c:7a:03:22:59:99:64:0a:0e:
91:21:09:8a:4e:1e:cc:f2:16:47:02:90:ed:30:e5:
70:02:02:99:a6:06:d0:17:d9:42:9e:52:70:fd:aa:
23:a1:e1:03:b9:35:9e:49:8f:70:ab:dc:94:81:4d:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:41:89:08:FB:A4:CD:45:0E:B5:7F:C0:DC:16:D3:0C:1A:6D:52:84
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0e:c8:f1:ee:bd:c0:5c:59:e1:41:38:e3:78:47:42:00:3e:
9b:2b:e5:c8:b6:16:91:db:f0:86:3e:76:20:cd:ef:8b:81:e1:
27:2a:9d:46:17:a1:2b:03:8a:ee:da:50:a6:88:76:90:ec:64:
5b:ae:e5:5b:4b:2c:04:0c:02:48:02:83:7e:b3:5d:30:94:c2:
ac:21:bf:46:a9:56:32:47:86:3a:6e:8e:74:3f:03:2d:b9:14:
cc:85:96:35:50:a0:b7:fb:9d:71:cf:cc:2c:13:b7:21:cb:82:
79:fc:5e:f6:0f:6e:28:90:09:e2:90:43:06:1d:d9:ea:03:58:
15:6b:5b:d4:ee:14:30:b3:f7:2d:d6:76:4f:c4:10:50:4c:d1:
55:94:e1:c9:32:c8:a4:60:bc:40:3c:d5:6e:dc:0e:3a:c0:c0:
5a:89:46:ef:32:28:72:56:60:5e:89:17:bd:25:d7:89:0f:0b:
28:64:ec:2c:d9:f3:f1:fb:0b:9c:21:02:fb:ca:21:bf:f5:1b:
13:db:11:d4:bb:52:d9:de:36:cc:ba:6a:3f:fd:4c:d1:e8:ec:
59:dd:54:9a:6b:49:4b:a1:82:df:2e:dd:96:ab:e8:66:47:95:
bc:8b:d5:dc:8d:ff:51:a7:69:8b:04:9e:15:2b:be:8d:73:d2:
7d:a6:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:32:36 2025 by rpki-client