Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
File: HYFeKwc-sEV2vLJN3k341Ot8nwg.mft (raw, json)
Hash identifier: 4hkL55a50nBw70DsZ/6m+GE+oeozVeTXDDcwFHE14aU=
Subject key identifier: 91:4D:06:6E:09:87:55:AC:66:B9:9A:DD:55:05:5D:46:32:8A:FF:AC
Authority key identifier: 1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
Certificate issuer: /CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Certificate serial: 019655A5E2FEED1E1F5CDF6F40D43C2961AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
Manifest number: 09E5
Signing time: Mon 21 Apr 2025 00:00:56 +0000
Manifest this update: Mon 21 Apr 2025 00:00:56 +0000
Manifest next update: Tue 22 Apr 2025 00:00:56 +0000
Files and hashes: 1: HYFeKwc-sEV2vLJN3k341Ot8nwg.crl (hash: Odo/8bko8YFoyf4dbYO7OeIz0LsQilrZfYK7g5NF8Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:e2:fe:ed:1e:1f:5c:df:6f:40:d4:3c:29:61:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Validity
Not Before: Apr 21 00:00:56 2025 GMT
Not After : Apr 22 00:00:56 2025 GMT
Subject: CN=914d066e098755ac66b99add55055d46328affac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:b8:4c:15:d0:09:c1:ab:c7:35:8f:4d:ea:
6c:de:b1:3b:a3:f6:69:e7:ed:e4:e4:32:bb:81:8a:
b0:c7:4f:77:2b:52:c5:2c:9e:ba:0d:b9:93:c5:c9:
82:b7:4b:c0:29:f0:fe:73:d6:c0:38:b1:1a:56:f2:
9f:d3:41:05:d2:3e:76:b1:66:b8:3f:0e:4e:44:e4:
49:39:c7:2c:6a:3e:b7:96:5f:d3:31:ea:51:7d:ec:
21:bc:59:c7:77:97:97:06:57:47:6d:64:48:85:4a:
20:eb:89:a9:98:44:29:af:96:0a:09:cc:a1:ec:9b:
3e:a0:bc:2f:ec:93:6c:c0:f7:93:c5:ce:a6:06:c4:
ae:f7:24:dd:4b:86:7c:c7:ed:8b:94:4a:c5:c2:09:
ee:7f:53:0c:c9:d6:d1:19:a9:2e:6f:30:3f:19:62:
4c:4f:99:e2:2f:92:d4:d9:9e:90:bb:e1:82:42:5b:
94:3e:a8:d5:13:5d:d1:2e:55:3b:fc:ea:03:c8:87:
34:62:40:ae:6b:c2:0a:5b:de:a3:d5:53:94:3b:7f:
4d:60:81:65:0b:3a:84:04:87:14:a2:ba:58:e8:ab:
90:f8:ee:a9:b9:da:b7:ae:b7:f1:b4:ff:60:9b:24:
f7:58:c8:63:7e:9c:87:fa:12:a9:66:1f:f5:32:d1:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4D:06:6E:09:87:55:AC:66:B9:9A:DD:55:05:5D:46:32:8A:FF:AC
X509v3 Authority Key Identifier:
keyid:1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:09:ff:1e:b1:e8:7e:a4:0e:fd:23:24:40:bb:e0:9d:fe:1d:
ad:63:59:48:a8:45:e3:69:b8:11:dd:99:48:3b:54:b5:7b:7c:
62:ac:8a:1b:4a:94:55:1a:4e:1d:0b:e2:ad:45:01:a0:6e:4d:
fb:65:96:61:dd:e1:8c:eb:7b:86:65:36:6d:0a:64:e5:d7:30:
c0:de:c6:2a:2f:ff:cf:52:65:79:e0:43:83:63:4a:cf:89:02:
70:20:78:bf:21:a4:9b:5b:94:d2:10:3a:88:da:eb:42:f9:54:
26:cc:30:64:b2:ce:ba:eb:3a:aa:7f:e1:2b:61:bc:ef:e3:de:
dc:d6:98:94:ec:7c:7a:ce:2d:86:3e:ae:d7:d8:e4:a9:06:1c:
d8:34:fb:27:75:cc:33:52:94:da:4c:07:84:8c:ed:54:82:e6:
40:e1:14:dc:57:48:a4:64:3a:9c:8c:cd:2f:12:68:13:30:40:
7d:fb:d8:c3:dc:a8:d8:1d:47:33:30:d8:6b:50:6a:12:b2:87:
3d:02:13:64:18:75:0d:2b:46:cd:9c:0a:1f:39:19:50:b9:80:
17:af:db:2d:c8:af:c5:f9:f4:e1:3f:e7:da:4b:60:70:ab:37:
c6:16:dc:24:a1:54:1d:92:3f:bc:3c:2e:64:36:9c:65:c7:25:
c6:e8:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:54:12 2025 by rpki-client