Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
File: hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft (raw, json)
Hash identifier: T3l1OhbfefEls+pfeeyCWo27dwCpuuCqBYcNereZzvw=
Subject key identifier: 10:90:47:84:4B:A6:9F:51:EE:F6:4C:DC:0D:B1:F3:6E:D5:D1:23:65
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Certificate issuer: /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial: 01965726F63F8CF5B7DEBF127569BEE41C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
Manifest number: 0817
Signing time: Mon 21 Apr 2025 07:01:33 +0000
Manifest this update: Mon 21 Apr 2025 07:01:33 +0000
Manifest next update: Tue 22 Apr 2025 07:01:33 +0000
Files and hashes: 1: hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl (hash: icjyX4tqD1JwfDrQJ43Kc4/7aI3oibYpFLymcTUddKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:f6:3f:8c:f5:b7:de:bf:12:75:69:be:e4:1c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Validity
Not Before: Apr 21 07:01:33 2025 GMT
Not After : Apr 22 07:01:33 2025 GMT
Subject: CN=109047844ba69f51eef64cdc0db1f36ed5d12365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:01:fb:2b:25:d4:cf:cf:73:0a:55:95:dd:
6b:77:06:4d:b5:1e:34:97:3d:2f:54:b7:8c:d6:56:
3d:b1:ed:1d:f1:2c:fc:1c:24:a1:0d:8f:dd:a4:e9:
68:4f:a4:53:57:1e:68:d9:db:a1:64:a1:67:ea:78:
22:f5:96:27:c0:22:79:d6:d9:e1:52:0a:df:87:30:
b3:8a:4b:0c:93:56:93:27:e0:71:37:e2:83:4d:44:
97:dc:c6:5d:4f:4a:3d:c9:77:00:02:71:a6:bc:c3:
59:8f:9e:7e:78:ad:a6:8a:8f:46:3d:9d:77:37:a8:
de:f4:95:04:f3:a1:f6:87:a7:1e:3a:bf:48:2c:ea:
dc:6f:46:4a:87:de:83:6d:9a:4a:c2:40:8d:e0:22:
de:59:e3:87:80:69:f5:dd:5e:52:83:36:4b:d6:65:
0b:d7:4a:31:a7:a9:56:ac:24:2f:58:52:98:c7:ce:
01:d3:69:62:f7:57:70:af:a9:96:31:5f:7c:7b:b4:
6c:ac:ef:ba:53:61:b5:70:a9:0b:6f:07:6c:91:d5:
94:c7:91:f3:c7:58:1f:af:b9:54:43:95:47:74:49:
e3:8f:92:c5:25:65:80:49:93:06:23:93:ba:cf:34:
d4:3a:c9:0f:02:b1:33:7e:84:ac:ed:48:44:44:3a:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:47:84:4B:A6:9F:51:EE:F6:4C:DC:0D:B1:F3:6E:D5:D1:23:65
X509v3 Authority Key Identifier:
keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:83:3d:f9:6d:c9:31:2e:62:01:73:dc:4f:d2:5f:ec:d6:
0c:ad:27:2f:4a:0a:39:a2:a6:5e:c1:be:9e:57:fb:29:81:6b:
fa:4b:e5:8e:3d:88:8e:a6:8e:02:06:ce:84:71:47:cd:9f:a1:
32:60:a4:51:b7:01:5a:2a:28:eb:f0:f5:6b:d7:39:c1:20:e8:
81:cc:de:64:6e:e4:ea:a4:f0:10:62:30:a8:ae:bc:c8:10:4a:
f0:94:a8:79:66:48:d4:af:f6:03:e3:4a:a2:58:2e:cb:5b:a7:
81:ee:ab:b3:4f:43:df:b6:a6:b5:a0:f3:6c:b8:2b:77:12:f7:
fb:7b:20:22:38:7b:5d:e4:43:fe:ed:28:8e:2a:3c:eb:83:09:
64:5a:a3:0c:d8:1d:8b:29:50:d9:33:e9:1b:77:ca:51:7b:68:
b2:cf:bc:92:5c:33:f7:a7:6b:61:ec:c6:7b:1a:76:4e:77:78:
82:ac:05:05:b5:68:7a:f1:60:14:7c:04:6e:67:d0:65:8e:4f:
ce:fc:d9:17:31:da:ff:2a:f0:ec:73:21:eb:a3:2b:53:77:46:
b7:80:5a:97:c5:57:4d:ba:16:6d:f6:2f:05:6d:5f:13:50:d7:
40:3b:6f:25:77:6b:72:ca:24:f1:94:8f:67:85:76:07:f6:96:
94:27:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:49:05 2025 by rpki-client