Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
File: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft (raw, json)
Hash identifier: mhtStq/tSncDVwHRHNuiSVckMP1VI8yBjanxedhyVjw=
Subject key identifier: 1E:65:A3:C0:10:C0:B2:8A:86:EB:63:D7:4E:AE:63:A1:35:AB:69:93
Authority key identifier: 1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
Certificate issuer: /CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Certificate serial: 01958C610DDD89A23F172438CCDEB1BAA098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
Manifest number: 07CD
Signing time: Wed 12 Mar 2025 22:02:05 +0000
Manifest this update: Wed 12 Mar 2025 22:02:05 +0000
Manifest next update: Thu 13 Mar 2025 22:02:05 +0000
Files and hashes: 1: HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl (hash: MilVrPYnnQE5DqJB9ktdbs4Cg+4M3ZzHzjXyr0nBY/w=)
2: f0JNWqb0_sxkiR-fghzvzpbVYUw.roa (hash: RhuCzYejuWMbfNGSM6on7Cw2OZveLgiaD9vSRL8ll5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:61:0d:dd:89:a2:3f:17:24:38:cc:de:b1:ba:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2053aad6dc5d61157e673fd1a78eea6569e539
Validity
Not Before: Mar 12 22:02:05 2025 GMT
Not After : Mar 13 22:02:05 2025 GMT
Subject: CN=1e65a3c010c0b28a86eb63d74eae63a135ab6993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:d7:74:cc:b3:d2:1f:c1:be:11:92:b4:2e:
6a:a9:a1:30:ec:58:27:fa:1e:c0:8e:95:5f:59:90:
a0:36:c4:45:90:09:85:cc:a3:60:2f:e6:14:cf:38:
a5:bf:8f:f2:0f:15:27:93:5b:f3:50:18:24:79:64:
e3:cc:b7:6f:49:b7:2c:e8:e0:bf:6f:c0:e1:b0:3e:
0f:9c:c8:7c:03:0d:c6:1d:f1:16:55:8f:03:13:fc:
1c:1f:18:8e:2c:58:21:ac:2c:9f:8c:01:0b:13:49:
a5:2a:2e:cd:31:3c:b3:c7:dc:a9:29:56:38:0e:76:
94:48:17:c3:01:86:01:57:c4:46:2c:69:6d:67:89:
93:97:bc:f9:36:04:3a:47:f6:cd:c4:b3:ca:9c:ef:
b2:ef:65:7f:b7:56:e7:5f:26:ce:5f:00:8b:45:80:
87:85:7f:c8:36:24:e6:a8:3a:3a:30:21:eb:2c:21:
1e:a4:5e:e8:d7:0b:7d:3b:fb:03:a5:8d:85:2d:19:
26:5d:b1:16:2d:32:3a:d4:ae:12:d0:8d:4f:e4:85:
c2:77:13:1d:69:91:ce:26:f7:bc:d0:b0:f7:22:af:
6a:d2:b9:2a:bf:b1:e6:a8:63:83:93:f7:55:da:83:
22:44:e2:d5:14:3b:49:a6:eb:f8:10:92:c3:fc:dc:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:A3:C0:10:C0:B2:8A:86:EB:63:D7:4E:AE:63:A1:35:AB:69:93
X509v3 Authority Key Identifier:
keyid:1C:20:53:AA:D6:DC:5D:61:15:7E:67:3F:D1:A7:8E:EA:65:69:E5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aca5f7-72ff-4823-bc5d-d6b99df39fd8/1/HCBTqtbcXWEVfmc_0aeO6mVp5Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:13:08:e7:1c:7c:c1:e3:eb:e8:a4:4d:a1:26:cd:be:69:43:
84:e0:99:a1:dc:56:99:5f:94:87:1a:5e:46:63:f5:72:b6:48:
d5:bf:4a:cf:14:92:65:b6:1a:76:5a:aa:cb:4a:bd:86:da:4b:
c0:fd:f3:b1:25:27:27:07:46:68:3f:be:31:cd:2f:e6:b8:91:
f3:ec:93:f0:1a:55:f2:80:20:ab:ab:c4:75:46:aa:4b:89:01:
0e:b7:65:19:bf:b5:b2:1e:67:38:b3:44:90:e9:c6:a6:ad:41:
4a:78:d0:e3:22:c2:8f:7b:01:07:24:28:d9:6e:bb:93:cc:40:
26:85:8e:6f:c0:b6:b5:36:66:0b:fb:2e:77:d2:d6:db:c8:02:
67:8e:24:8e:8f:30:92:76:a7:9d:cb:0d:9e:b1:5c:30:c9:e5:
61:1d:bd:fe:b6:18:f8:da:a3:52:b8:97:f9:3d:fc:c6:05:fc:
6d:96:04:a8:75:4f:98:87:e2:85:3c:f2:f5:80:4b:4c:ba:2d:
0c:aa:55:a3:bf:f0:52:e0:64:0f:6d:38:43:9a:79:b7:8f:0d:
c8:9d:50:6c:d2:c7:a8:86:e3:ba:26:5e:84:04:39:ee:56:ab:
3f:83:dd:45:dc:ac:10:06:70:77:bf:2f:d9:13:5e:80:cc:31:
e2:c4:3d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:49 2025 by rpki-client