Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: 3KyUh2Kzft63Dj6jdT0dootQAesntE2TnLDRv1pedtQ=
Subject key identifier: 1A:2F:57:E8:4D:7A:D2:EE:39:48:77:CE:68:54:99:2D:50:EE:63:1A
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 01964CD913344EC883629CE33FD0FDE08FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 07:00:16 +0000
Manifest this update: Sat 19 Apr 2025 07:00:16 +0000
Manifest next update: Sun 20 Apr 2025 07:00:16 +0000
Files and hashes: 1: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: xmoVCagG1jCWnRkaEvfIuyuKe90TiHKuon2ozLuKLWQ=)
2: iM7SCQycar1nudDnDJd9cpfWE14.roa (hash: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:13:34:4e:c8:83:62:9c:e3:3f:d0:fd:e0:8f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Apr 19 07:00:16 2025 GMT
Not After : Apr 20 07:00:16 2025 GMT
Subject: CN=1a2f57e84d7ad2ee394877ce6854992d50ee631a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:ed:12:2b:aa:23:fa:18:5d:c7:6f:cf:a8:
a1:d6:29:03:f3:7e:3d:45:cd:4a:1d:57:b1:a9:4b:
99:c7:92:56:e8:1c:38:05:54:c9:fa:2f:83:14:e1:
89:58:88:2e:6b:a9:ed:3e:93:0c:79:0b:16:c9:17:
23:3e:fe:77:37:45:7b:20:fc:1d:bc:ba:d6:41:21:
52:68:cd:22:9d:08:8d:9f:68:a1:d6:f1:8c:8f:fc:
76:1a:24:96:56:07:d8:c9:19:c3:98:d5:ac:7b:e9:
3b:64:a3:99:99:d9:22:04:ed:43:31:f7:07:67:8d:
c3:21:65:58:92:8d:dd:39:0c:72:18:46:49:1c:ef:
99:2f:38:bb:a4:a8:3f:55:4d:f3:1d:86:29:a5:32:
58:1f:47:93:eb:06:2e:55:1b:63:b9:fb:c7:60:8a:
2c:7a:59:27:c4:e1:55:15:72:8f:ef:be:f2:f9:e9:
65:dc:26:60:69:ea:e0:47:2f:89:86:a7:92:66:92:
72:f1:8b:b1:8b:49:a3:a9:d1:7e:f4:4b:93:d1:e3:
1a:4d:ab:67:66:5c:61:28:b6:05:38:4e:85:2c:11:
ff:58:c9:33:0e:be:b6:cf:4b:6b:21:de:be:06:7d:
18:0b:fb:24:6a:17:c3:e5:a2:ff:b0:59:c6:4e:c7:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2F:57:E8:4D:7A:D2:EE:39:48:77:CE:68:54:99:2D:50:EE:63:1A
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d6:e0:65:dd:4f:82:28:fe:89:15:b0:da:a3:11:cb:72:ec:
08:26:a7:26:09:03:42:1c:96:d3:f3:9e:c1:79:03:29:68:1e:
f9:89:23:d9:96:68:b3:cb:c3:57:22:4a:80:ff:bc:80:b8:7b:
0c:cd:0e:3d:7b:3d:9c:f6:2c:1c:a8:28:27:d2:3e:4c:27:e7:
13:29:5e:41:d3:2d:50:74:98:f9:55:0b:f5:cc:70:f6:2b:41:
71:5f:48:3d:21:48:b6:16:d5:42:fa:0f:45:dd:01:5d:73:0e:
d8:50:14:09:16:da:c9:fd:7e:52:b8:16:04:dd:5a:b2:00:f9:
6d:ef:fe:1c:09:54:73:78:49:67:6a:01:ea:66:93:1a:b7:3d:
a3:d2:19:fa:87:84:ec:9f:e3:ba:31:66:05:0b:0d:eb:72:6f:
44:0b:dc:f2:19:ea:b3:ab:c8:d6:fb:ac:30:0b:58:28:ad:21:
60:35:f5:77:11:79:c9:52:b1:22:60:cf:bd:ec:49:08:e9:c3:
3f:67:6f:2b:d1:99:37:b5:07:c6:24:2b:e6:6e:de:4d:5f:23:
37:39:29:f7:a7:67:0c:2e:ec:7e:86:ff:49:ab:62:a1:33:ab:
3a:da:c6:ea:fe:ce:14:bd:4f:08:70:27:d9:60:7e:2c:ea:dc:
12:ca:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:19 2025 by rpki-client