Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft
File: _hpSVPN9jCkbEd2r7YiwY0gdr2s.mft (raw, json)
Hash identifier: ikpU2r0QqYbF3DknfzfnlGmmalVdV9/qPEmsQyIyHmg=
Subject key identifier: 27:79:15:1D:57:04:CE:DE:22:91:D8:71:BC:EF:8D:BC:64:33:14:88
Authority key identifier: FE:1A:52:54:F3:7D:8C:29:1B:11:DD:AB:ED:88:B0:63:48:1D:AF:6B
Certificate issuer: /CN=fe1a5254f37d8c291b11ddabed88b063481daf6b
Certificate serial: 01965349F898797F1A08EDD9FD20D63744FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hpSVPN9jCkbEd2r7YiwY0gdr2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 13:01:18 +0000
Manifest this update: Sun 20 Apr 2025 13:01:18 +0000
Manifest next update: Mon 21 Apr 2025 13:01:18 +0000
Files and hashes: 1: _hpSVPN9jCkbEd2r7YiwY0gdr2s.crl (hash: Zgxw0xCHL/YsH31NDUBdiKBijZnatANpa8Q/tXVzUY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_hpSVPN9jCkbEd2r7YiwY0gdr2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:f8:98:79:7f:1a:08:ed:d9:fd:20:d6:37:44:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1a5254f37d8c291b11ddabed88b063481daf6b
Validity
Not Before: Apr 20 13:01:18 2025 GMT
Not After : Apr 21 13:01:18 2025 GMT
Subject: CN=2779151d5704cede2291d871bcef8dbc64331488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:80:66:3e:fb:4e:dc:95:cc:b8:12:5e:eb:
55:db:e1:a9:1e:24:66:f1:a2:5a:2a:cd:2a:57:b0:
d5:36:0c:24:63:4d:f6:38:a6:07:32:5e:09:ad:4a:
de:c0:6a:2e:c1:1a:09:b7:e4:14:08:c8:bf:bb:23:
9c:71:d8:a6:5d:07:27:ee:70:d6:a3:e2:f2:eb:42:
8b:dc:e4:e6:e7:50:0b:43:96:60:47:08:3f:f0:15:
7c:7f:0e:db:d3:76:c8:5e:81:f1:ca:4f:5b:a1:45:
85:16:e0:65:76:98:52:74:a4:d4:19:c0:7b:fb:b4:
0c:2d:43:df:a4:b5:d0:f9:d2:c9:c3:cf:bb:cc:8a:
08:b8:e4:56:cb:77:3d:96:64:bd:d3:85:85:be:47:
ad:f6:fa:fb:d6:a2:6c:ab:58:20:ef:6f:b1:b8:2b:
7e:50:29:af:9c:0a:c7:7e:23:3f:93:61:3d:ad:45:
3f:83:3c:d2:2f:ee:e8:9b:94:ee:28:d3:d8:8a:81:
a5:d8:02:84:2b:7f:6a:c0:b2:fe:c5:18:0a:52:68:
90:52:07:ae:43:5c:11:53:a2:e6:1f:5f:46:1e:4f:
8c:f7:52:ac:b3:4f:2b:a9:46:0c:f1:5c:27:1b:cc:
5f:68:6d:48:3d:0f:2e:b5:42:65:b2:c0:c9:2e:05:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:15:1D:57:04:CE:DE:22:91:D8:71:BC:EF:8D:BC:64:33:14:88
X509v3 Authority Key Identifier:
keyid:FE:1A:52:54:F3:7D:8C:29:1B:11:DD:AB:ED:88:B0:63:48:1D:AF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hpSVPN9jCkbEd2r7YiwY0gdr2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6c:75:b4:4e:54:65:f2:9f:d4:72:f1:b9:5f:6c:83:5d:0d:
e7:76:8b:c3:73:58:2e:0c:70:57:09:8c:24:67:ac:26:61:be:
a0:5f:fc:33:a9:cc:df:12:97:8c:bc:eb:ce:de:a8:48:f1:79:
9a:d4:b1:f7:bc:66:20:4d:94:dc:7b:e2:a8:22:55:70:4d:a0:
05:8f:5f:63:bc:ba:83:8c:dd:f3:96:dc:37:a7:a8:90:2a:84:
01:e6:4f:e1:43:4c:42:b3:b5:da:21:30:2b:16:f8:7f:82:1f:
9c:dc:63:76:db:23:69:ed:ab:38:bd:5f:4b:4c:b4:22:4f:a1:
82:a0:a5:60:c0:b8:62:cb:33:ff:b3:04:ed:90:56:b6:cb:6f:
ab:62:6f:97:6d:10:39:a0:70:fe:57:91:58:a9:5b:44:be:45:
5e:f9:b7:52:c4:ef:26:87:89:99:87:b8:1a:11:55:c1:8d:7a:
75:f2:54:fc:88:b6:c8:0d:81:f1:67:2c:e1:85:a9:85:d1:08:
67:e4:10:09:53:e6:ba:45:3d:f4:9a:a9:d5:60:70:98:c9:a7:
1d:e1:72:3b:b8:8a:73:3a:2f:36:7c:ef:78:3f:64:4c:c3:f8:
e5:54:b1:0f:10:36:8b:80:8a:c5:03:32:33:0a:3c:39:14:92:
7d:d3:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:59 2025 by rpki-client