Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: xlknmvwXMnhfI3zzXsf5wbtd6ZG9Hmni5mxyLUNk5NY=
Subject key identifier: 83:ED:A7:E0:99:8D:E2:F2:2F:3A:9F:A6:4E:E1:09:17:97:1D:27:23
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 01964AB3FFFE91650A6509965FB4623E3047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 083C
Signing time: Fri 18 Apr 2025 21:00:32 +0000
Manifest this update: Fri 18 Apr 2025 21:00:32 +0000
Manifest next update: Sat 19 Apr 2025 21:00:32 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: 613xDQBZiUGM0mF7ZsV+0fwiaaa+Ew9laiqV1HBiNHg=)
2: lyeOPA3Hi3kUGDVfoF3VE8weizo.roa (hash: SK0Hu8MdGQh3m28Nprb3+ZaMXzQS8vnNx8UerT7YIyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b3:ff:fe:91:65:0a:65:09:96:5f:b4:62:3e:30:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Apr 18 21:00:32 2025 GMT
Not After : Apr 19 21:00:32 2025 GMT
Subject: CN=83eda7e0998de2f22f3a9fa64ee10917971d2723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:1e:12:6b:8f:16:b9:5f:21:1b:70:a1:00:
74:b7:ad:cb:3a:02:2c:4b:78:62:52:fd:10:12:7f:
48:1e:52:6e:2c:b9:ce:59:a1:49:9e:11:bb:d3:25:
57:c0:db:50:92:be:05:d4:08:2a:98:82:55:c7:20:
6f:b9:46:f3:56:ba:bb:94:78:e8:c4:e8:da:5c:7b:
7c:6b:57:27:5f:1f:d5:40:02:0c:f0:fa:2d:bd:7e:
30:e2:0a:e9:7b:b0:db:b5:75:85:23:9d:03:e0:95:
14:26:f8:13:f9:b2:46:4a:4f:7c:63:c3:20:89:bf:
c3:70:e6:aa:a2:c1:da:89:82:a5:cd:a1:ab:58:7a:
ae:ca:7b:04:1b:49:d5:24:6e:df:87:30:c5:31:a9:
5c:50:44:f7:cc:f5:a3:78:52:1e:ff:61:86:63:12:
b0:fe:74:1a:da:c3:51:6b:2a:0c:ab:6d:79:d4:c9:
f9:99:e8:f3:37:dd:99:2b:a5:c9:f6:a1:76:10:d1:
3a:8a:a3:6e:1a:23:93:9b:ef:9d:0d:dd:fc:53:c7:
23:a5:52:99:ec:a0:09:13:b2:ea:57:07:79:01:44:
3b:2b:a1:18:f0:1f:cc:3c:88:85:9e:ff:65:08:67:
48:96:5a:0c:29:fa:da:b4:8e:76:e1:dc:fb:9d:57:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:ED:A7:E0:99:8D:E2:F2:2F:3A:9F:A6:4E:E1:09:17:97:1D:27:23
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:af:98:46:9b:0a:aa:82:3a:f4:b8:e8:f8:09:7e:29:91:9b:
dd:7a:b7:5b:d2:0a:11:2d:c1:70:d3:81:d4:a3:e4:b7:9a:6d:
97:83:83:dc:6f:99:16:20:80:cb:72:ff:dd:e7:ba:b9:f5:88:
00:e4:68:57:98:dc:b4:2f:b0:c5:68:26:24:fe:b9:49:9f:50:
d4:39:bd:85:ad:92:40:6e:3f:65:01:e8:6d:4d:b3:d0:dc:da:
37:11:28:1d:1a:08:08:73:dc:d4:85:9e:58:87:d4:2d:bd:d2:
a3:74:c1:c7:11:ec:b8:28:c1:ee:e0:84:a1:6e:b5:ae:c9:21:
fc:61:fd:ec:b0:25:e2:b5:ef:0a:22:f8:c1:c2:94:8b:97:f1:
61:b1:58:b6:62:31:13:ac:aa:9c:e2:12:b7:0f:5d:33:40:e4:
34:8e:62:7c:d9:cb:1e:26:05:fb:f0:71:73:f5:1b:f1:8f:73:
3b:a7:b1:d7:86:c0:15:f1:cf:33:08:a9:6a:50:18:e9:45:f5:
20:87:ec:1d:3c:14:63:8b:8c:73:a7:ab:27:9b:04:13:92:cf:
e3:30:52:64:2f:9b:f2:c0:07:d2:ad:18:cb:bf:05:9f:ff:67:
14:4f:b2:e6:a3:da:64:e5:82:14:20:19:2d:99:42:bc:93:67:
db:9c:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:38:16 2025 by rpki-client