Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json)
Hash identifier: qNNzMX0D7mpdOLPwog661uYDilUHcnVaLFbs1Fsjhus=
Subject key identifier: 6B:C9:03:CF:DE:8E:D2:E6:D8:16:80:C6:65:F1:D0:8A:C0:73:AE:81
Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Certificate serial: 019510C7D099DECF3710C377C5B831B665FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:25 +0000
Manifest this update: Sun 16 Feb 2025 22:01:25 +0000
Manifest next update: Mon 17 Feb 2025 22:01:25 +0000
Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: QsSAbCf8DUWsYsE7xNamlpiLe6jWVekzB5jAZdge5e4=)
2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d0:99:de:cf:37:10:c3:77:c5:b8:31:b6:65:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4
Validity
Not Before: Feb 16 22:01:25 2025 GMT
Not After : Feb 17 22:01:25 2025 GMT
Subject: CN=6bc903cfde8ed2e6d81680c665f1d08ac073ae81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:8b:d6:99:0b:e2:88:c4:50:00:79:99:f7:
28:b1:87:c6:6e:cc:4a:7f:70:29:53:06:4f:a5:d8:
3c:3c:4b:cb:fa:30:34:5a:da:1a:ba:f1:f1:1e:f6:
28:b1:e7:d9:4f:c0:8d:99:46:8d:58:a1:da:41:4e:
b6:7b:7e:26:e8:2e:60:6a:3f:9a:b4:fc:b0:63:cf:
f0:71:17:24:61:4a:8d:6b:25:f1:af:99:68:20:cb:
80:1c:c5:1c:c4:12:35:48:a7:d3:9e:8b:19:aa:b8:
19:fd:f4:7d:59:41:44:6e:a8:c0:92:62:f5:d6:c1:
06:6a:88:e0:cd:f0:9c:0b:4f:24:0f:34:0a:aa:4d:
37:24:31:9b:47:7f:23:e2:a9:07:d7:22:3b:d2:50:
8e:13:20:b0:c3:2e:ec:0b:c9:02:13:a1:55:24:2f:
0e:fc:d2:06:23:b0:c1:7a:21:94:17:07:b3:45:86:
cc:d3:e7:c8:dd:98:95:b6:85:10:fb:57:dc:bb:ae:
f5:9b:46:1e:59:b5:20:76:59:79:84:c5:65:62:7c:
62:7a:11:3a:cb:0b:2f:de:89:cd:be:d1:02:04:75:
38:01:43:6a:13:3e:65:52:75:35:af:b9:af:e9:66:
70:7b:85:22:bd:44:7f:b2:de:a8:f4:06:23:3e:24:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C9:03:CF:DE:8E:D2:E6:D8:16:80:C6:65:F1:D0:8A:C0:73:AE:81
X509v3 Authority Key Identifier:
keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:16:73:d2:14:ec:8e:f3:43:c8:c6:ad:af:e1:da:03:09:fe:
7d:f3:3d:bd:c7:7b:67:9c:6f:eb:14:02:29:f4:d9:6e:99:35:
8d:b1:44:e2:be:97:42:48:61:3c:59:d4:8c:23:fd:77:0d:b4:
a6:4d:1f:de:04:1e:a2:35:0d:11:09:31:08:26:5c:4d:2e:63:
d0:b1:58:c3:90:2e:3d:a8:9d:b2:f0:08:f4:5e:a3:8a:0c:11:
3b:93:71:98:3a:89:1a:77:93:45:69:d2:56:d9:30:ea:b2:ea:
69:0c:a1:1d:35:1c:61:23:9e:b9:39:53:af:14:2c:e6:dc:84:
11:9e:1b:b8:ee:fc:69:41:14:41:b0:f8:e7:1f:20:ff:35:c2:
43:a2:b1:5a:1e:ca:ca:d1:7e:e4:f6:07:e8:2e:96:87:4a:34:
66:a8:72:49:ec:9c:1c:4f:57:dc:a0:67:e1:eb:d3:62:11:fb:
1f:8f:ad:79:3d:e1:56:a8:1e:49:c9:6d:4a:93:ed:0d:f6:ee:
74:27:c9:d9:f7:1d:32:75:44:ca:ea:b7:3f:96:87:76:48:11:
b3:ec:85:bc:d0:7c:01:3c:0a:fb:00:f3:0a:f3:72:83:9b:31:
8e:3a:5a:dd:90:a2:b4:fe:7e:5e:4f:36:49:8e:d1:4e:17:da:
6b:fc:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:10 2025 by rpki-client