Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: 7QP7DzxPSqx6n9bBJj4jwiAJVX05tDg8mdFe2NkjSTA=
Subject key identifier: 40:13:C3:DE:5B:6D:85:8D:8D:9A:47:E1:61:03:84:15:6F:1C:5F:0A
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019654C9AAE6B53AC01AA4339680B117E86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 0391
Signing time: Sun 20 Apr 2025 20:00:24 +0000
Manifest this update: Sun 20 Apr 2025 20:00:24 +0000
Manifest next update: Mon 21 Apr 2025 20:00:24 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: I8KPZR6mbsyxZrdYd0kbLm+sZYBYUyOOdrFv/3elfEA=)
2: KnSUOMU4LVOd-681gUpAeZxW9tU.roa (hash: T8JMOCVoClcG2l35uDfqB6bKR7EcaF1TmNNZKykQwnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:aa:e6:b5:3a:c0:1a:a4:33:96:80:b1:17:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Apr 20 20:00:24 2025 GMT
Not After : Apr 21 20:00:24 2025 GMT
Subject: CN=4013c3de5b6d858d8d9a47e1610384156f1c5f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:80:14:34:f5:2d:b5:c5:c9:f7:ce:df:24:
5b:c4:8a:4f:39:9c:46:61:40:a2:42:5a:11:8c:c7:
49:48:8b:f7:c4:fd:15:80:0e:05:4e:8d:af:c4:68:
02:cd:fd:99:59:99:ec:ba:d8:91:52:3b:ec:5c:62:
8b:e6:5a:0e:47:fd:38:21:e6:d7:8f:2b:81:5e:11:
bf:a8:98:b0:4b:b5:de:dc:cd:c2:03:2f:f1:93:7e:
95:de:13:aa:61:48:91:79:2d:c6:1d:21:a0:69:58:
53:c8:94:df:50:ad:ba:2a:69:03:07:c6:c1:fb:b6:
7e:88:3d:24:a8:d2:b5:54:ea:66:6d:4f:1d:67:26:
1a:b1:77:28:36:c2:12:77:b8:2e:55:76:cf:46:57:
cb:fa:e6:33:09:45:34:48:25:30:ec:60:c2:c5:bc:
c4:f5:fd:04:8d:c9:b6:b9:32:98:55:a3:d8:c9:a7:
6c:14:fa:53:41:7a:64:0c:98:ae:8c:78:c8:0d:76:
cc:e5:cd:0b:4d:28:33:8d:fe:df:9a:e5:ae:5a:71:
17:17:c7:03:a9:14:0c:f8:71:f5:c4:9b:92:72:23:
1a:ba:85:a2:eb:26:5a:f4:c7:88:84:c8:41:12:d8:
1c:a1:94:f4:15:a6:74:ce:6c:6e:8e:e9:8f:12:fa:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:13:C3:DE:5B:6D:85:8D:8D:9A:47:E1:61:03:84:15:6F:1C:5F:0A
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:6f:36:11:7e:14:1b:fc:7f:62:18:ed:b5:f6:02:72:e6:
44:7e:45:02:a5:52:98:f8:47:5b:eb:c5:20:59:87:1e:d8:50:
ef:ae:b9:d1:1c:7a:33:16:20:73:68:fc:40:b4:cf:5a:76:fc:
2f:69:ed:c9:e5:35:7e:4b:e5:ab:db:b0:56:c9:fa:19:66:f6:
2f:e3:bc:d0:7f:55:d3:aa:cb:05:89:e3:5f:89:52:35:f8:5e:
69:a5:ba:7c:8a:b4:15:95:41:41:0e:2f:12:c4:4e:94:37:e2:
e7:3c:b8:5f:c2:6b:54:8d:1d:cd:26:73:60:1d:d4:8b:9a:a3:
d4:5d:38:48:af:78:e2:a0:c5:24:df:0e:55:08:5d:e2:07:fa:
9e:bf:61:74:95:55:27:65:cc:ff:9e:45:69:10:6a:cf:e9:e0:
60:c4:33:b0:61:96:57:aa:f9:4b:58:4d:34:84:d6:68:ec:7f:
86:6f:65:ce:75:e5:26:7e:6f:38:50:4c:29:32:46:54:04:60:
70:8e:66:45:e5:f4:1d:5f:21:57:85:4a:b2:05:bf:31:f6:5c:
78:4d:81:5b:fd:98:ba:16:0d:dc:6b:9d:9e:91:42:24:49:44:
4a:2d:76:0f:76:34:70:f0:73:5f:94:cb:89:6a:7b:41:61:47:
29:1b:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:59 2025 by rpki-client