Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
File: HzjUsMuomcJPTjQHOE1tP6jVGl8.mft (raw, json)
Hash identifier: yhcLH7jjpUPlQf6yxIoa8qDiS0Pl1ZWSsuGRKXMgDFk=
Subject key identifier: 8C:C3:7F:6B:1D:37:02:04:14:92:24:64:E9:3D:FC:EF:ED:6A:8C:4C
Authority key identifier: 1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
Certificate issuer: /CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Certificate serial: 01965B7112411A447509BE342C9B853F0270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
Manifest number: 02CB
Signing time: Tue 22 Apr 2025 03:00:58 +0000
Manifest this update: Tue 22 Apr 2025 03:00:58 +0000
Manifest next update: Wed 23 Apr 2025 03:00:58 +0000
Files and hashes: 1: HzjUsMuomcJPTjQHOE1tP6jVGl8.crl (hash: ZSLtTKeRj6b1f4Fp29d/76cYKV4/pZcEuWywOwBeiQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:12:41:1a:44:75:09:be:34:2c:9b:85:3f:02:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Validity
Not Before: Apr 22 03:00:58 2025 GMT
Not After : Apr 23 03:00:58 2025 GMT
Subject: CN=8cc37f6b1d37020414922464e93dfcefed6a8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:22:78:db:d4:f7:74:c5:d2:55:19:cd:5b:
2d:1f:f0:f6:8a:9f:b7:de:06:7e:61:ad:4b:f7:d5:
ac:3a:14:01:d4:93:6d:8d:6c:4a:76:a1:72:99:7c:
d4:59:eb:d1:d4:37:0e:36:8b:a0:2b:1c:f8:58:49:
20:3a:b2:99:fb:a4:ff:8e:5f:b2:e8:b4:00:31:33:
ad:31:04:d0:84:9f:48:8c:6a:76:9a:d7:13:68:23:
c2:1e:51:7d:97:52:a8:73:56:fc:8f:59:91:f1:a0:
15:7e:d7:49:32:67:7b:8a:0c:d2:f8:43:b1:12:a2:
de:80:b0:4a:73:af:0d:ab:64:1d:21:8b:b7:7c:cd:
5b:81:ac:94:aa:df:1c:97:06:56:61:9c:11:f6:2e:
08:24:03:49:d0:9b:37:49:8e:31:6a:92:b4:1d:70:
58:ed:d1:72:36:b8:97:5f:19:e9:7a:b7:92:77:c9:
4f:03:3f:5d:84:7f:a8:dd:fa:60:bf:70:a0:1d:e2:
d4:95:4f:03:da:1f:91:e3:e2:3b:55:b4:46:fc:ce:
c5:1e:9d:fc:83:4b:f2:ed:c7:0d:4e:41:28:57:a7:
ba:16:fb:d4:84:7e:23:89:32:ba:16:01:75:46:7f:
6a:7d:34:8b:08:12:d9:51:30:07:b0:2f:7b:e3:42:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:7F:6B:1D:37:02:04:14:92:24:64:E9:3D:FC:EF:ED:6A:8C:4C
X509v3 Authority Key Identifier:
keyid:1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:db:19:e3:89:99:06:24:2c:2b:5e:1e:a8:d6:45:60:51:c3:
dc:70:ec:6d:36:6b:33:d5:96:d6:79:f1:18:67:00:fc:a5:82:
4d:bc:44:b8:1f:33:eb:90:94:b8:e4:28:53:c8:eb:bf:76:ed:
72:4e:9c:cf:af:b3:36:d0:d3:a1:be:3d:0a:f5:45:ef:0c:f4:
ad:b3:dc:0b:94:71:77:80:b3:79:90:65:f6:28:8e:93:d4:c2:
bc:44:c4:29:8d:38:6e:99:a0:1c:94:d6:9b:bb:01:21:71:bc:
69:92:fd:a3:bf:48:fe:91:5c:0d:9e:56:a2:bc:91:3d:b9:fa:
81:3d:3c:ea:59:60:b4:81:52:13:ce:22:7e:6b:ed:f1:d0:59:
0b:f1:63:34:22:a5:49:c3:61:ec:24:e8:06:86:45:55:a3:e6:
45:bc:e9:b7:c9:2f:63:46:e8:a2:15:65:04:9c:65:7e:d9:0d:
00:f1:a2:a1:a7:02:fa:60:0b:d8:b7:56:e0:5c:dd:56:c4:4d:
16:97:b1:fd:ae:93:47:5f:0d:e3:58:b0:3d:c0:19:39:3e:6a:
6a:ea:a6:f3:ea:1f:9c:ca:7c:5c:80:2f:dc:f9:d9:fe:65:99:
18:16:25:3d:09:82:fd:69:8a:0b:62:f6:0c:7a:77:fb:b3:35:
12:d7:1c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:50 2025 by rpki-client