Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: r3b8s0ta1TuoQYmSeF1BI/hEKG/1lO7P6W07ondNbtM=
Subject key identifier: 24:D0:0B:BE:8E:32:07:F8:43:AA:43:20:A4:1E:41:BF:7B:E8:60:0F
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 019649A23C325CD3FA1FE5CEA7E0F3D03A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 0DC8
Signing time: Fri 18 Apr 2025 16:01:31 +0000
Manifest this update: Fri 18 Apr 2025 16:01:31 +0000
Manifest next update: Sat 19 Apr 2025 16:01:31 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: 17omcSnt6yPCgxIEtkhtfYgBv3GXk+z6ZwCYn3s+u2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:3c:32:5c:d3:fa:1f:e5:ce:a7:e0:f3:d0:3a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Apr 18 16:01:31 2025 GMT
Not After : Apr 19 16:01:31 2025 GMT
Subject: CN=24d00bbe8e3207f843aa4320a41e41bf7be8600f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:90:41:5d:c0:61:93:51:8b:5e:3a:75:bf:
da:a3:6c:3f:1c:a2:12:1e:0e:44:30:82:19:23:f5:
67:e5:bf:e4:4a:84:54:bc:eb:e8:36:78:31:01:68:
f1:dc:53:b7:e9:69:c6:6c:8b:37:30:10:f9:bc:ef:
d3:40:74:d4:8b:37:4d:52:34:d1:65:1f:06:49:38:
b8:24:05:f8:04:d3:25:53:f2:f4:08:f5:2b:f8:27:
2e:98:29:ff:b4:67:dc:f5:45:59:23:da:d7:36:2b:
68:99:3f:95:2a:44:3f:ca:17:75:e5:64:f6:a8:91:
48:c4:b0:15:25:94:ea:f9:0a:84:32:52:a0:39:e1:
37:8f:16:3d:b3:44:8f:4d:64:d2:7a:b0:d3:93:58:
60:d0:63:92:30:77:05:5b:6c:83:57:da:bd:f3:e9:
56:3b:2d:9a:4b:b0:28:69:66:87:bb:04:7e:36:9d:
79:75:a0:f5:2c:9b:ef:fa:bb:4f:74:c2:cf:41:0a:
0b:e3:a2:8f:24:ae:59:c4:f8:ec:2b:13:71:a9:e2:
96:2c:06:46:dc:91:fe:2a:1e:a2:00:8b:f5:be:da:
49:d1:94:c0:e1:3f:35:34:5f:4a:e7:57:14:6d:f1:
2b:f3:e2:3c:0c:a0:92:9e:48:6a:11:d9:97:1a:e7:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:0B:BE:8E:32:07:F8:43:AA:43:20:A4:1E:41:BF:7B:E8:60:0F
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2f:05:2c:ab:6c:8f:28:7a:7a:f2:55:26:7a:bd:f9:8c:ac:
38:a9:bf:c7:e8:32:80:a8:1d:b5:75:04:64:b0:cf:02:ea:9e:
6a:31:55:89:b2:6e:33:97:1d:f8:36:f8:20:26:46:02:f3:9a:
53:fe:c6:61:c7:56:cc:5c:65:cc:77:9c:e8:c3:c6:2a:e0:1b:
37:15:8e:d8:41:3d:84:fb:0e:90:eb:f0:2f:73:c9:ea:d8:0a:
6a:bf:1d:e9:16:29:e6:ce:fc:89:3f:e5:8d:52:37:54:47:93:
71:96:ce:40:80:18:90:dd:4d:bd:05:99:eb:38:bb:c7:48:52:
bf:1f:c8:46:1a:aa:c1:e0:74:5d:b3:31:b6:f0:84:ae:6f:bb:
36:a3:7a:05:0d:5e:01:b6:9d:0e:c9:5b:5c:9a:a2:cf:d0:83:
30:93:52:18:f2:7d:b3:1b:7e:cd:de:7d:55:90:16:be:fc:39:
a1:1c:27:ed:9f:f5:67:a0:63:2a:55:74:5e:80:38:4b:e8:a0:
8f:ac:b2:f8:3f:68:c3:af:87:47:79:2e:fb:60:88:35:8b:61:
8d:a7:39:f1:0e:ba:25:5e:8c:f0:46:39:81:91:8b:3c:e2:ab:
f9:64:93:45:cb:c3:e5:6d:b4:cf:09:b8:55:aa:db:36:17:7e:
43:55:9a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:45 2025 by rpki-client