Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
File: HQ2zVo5FXz2isidKnVJcrAkxx9U.mft (raw, json)
Hash identifier: H5LUd0DUKJmKW+tQ2QzQ2chw8NU6gjU3N5F4L7UG570=
Subject key identifier: 88:B9:46:14:FC:31:BF:74:A7:6C:7D:B5:62:6F:7E:EB:07:96:86:51
Authority key identifier: 1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
Certificate issuer: /CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Certificate serial: 019644E888DA37521603F277A4F8747A94DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
Manifest number: 0330
Signing time: Thu 17 Apr 2025 18:00:12 +0000
Manifest this update: Thu 17 Apr 2025 18:00:12 +0000
Manifest next update: Fri 18 Apr 2025 18:00:12 +0000
Files and hashes: 1: HQ2zVo5FXz2isidKnVJcrAkxx9U.crl (hash: msGdHCc+kCSLVfPaRyTVBY9UaQJ7dA2QBJPf8XtaJ14=)
2: yht62Ehavo3uZINByDHEHOjVZVw.roa (hash: mqAvN4VPlszrLeatuKNPPUoNf7NdmTA8jofCmdZ20jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:88:da:37:52:16:03:f2:77:a4:f8:74:7a:94:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Validity
Not Before: Apr 17 18:00:12 2025 GMT
Not After : Apr 18 18:00:12 2025 GMT
Subject: CN=88b94614fc31bf74a76c7db5626f7eeb07968651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:4a:3d:07:87:c2:b9:99:af:f2:ee:74:58:
32:9a:70:21:b9:a9:ff:5d:a8:ae:4f:6a:41:d0:a2:
bb:cf:7f:b8:67:a7:b9:ac:90:f8:79:94:ff:6a:2a:
b4:61:69:89:eb:c7:f7:66:d4:de:14:31:f3:41:cf:
65:f7:c6:5c:2f:2a:eb:a5:91:22:cf:45:53:a1:d6:
23:b7:ef:d2:c9:c8:c1:f4:65:8a:ec:20:3e:2b:9d:
d1:af:bd:ee:4c:11:ab:36:ee:35:e6:a4:15:42:57:
14:7b:b0:9f:83:80:39:21:c4:bc:90:54:c6:c9:01:
82:32:28:5e:25:68:41:ba:ff:2f:e2:50:f4:67:42:
91:2c:42:39:74:2d:2c:a5:82:35:ff:90:85:40:6e:
ff:d0:26:94:de:83:e4:26:95:58:f1:17:b7:59:ed:
61:35:50:f2:27:6f:c1:26:62:27:85:a4:c8:11:6f:
bb:b2:fa:5b:4e:dd:b6:7e:b4:37:55:82:af:20:79:
1d:c3:c6:89:8b:d9:ef:6a:0c:37:e5:66:79:d6:05:
1f:67:d5:6e:37:75:ec:9d:b3:6d:69:62:1d:77:2c:
94:1b:10:22:9c:37:2a:75:6b:e1:04:95:df:32:30:
81:2c:9e:5b:07:c6:2a:82:d9:15:71:cb:00:d0:91:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B9:46:14:FC:31:BF:74:A7:6C:7D:B5:62:6F:7E:EB:07:96:86:51
X509v3 Authority Key Identifier:
keyid:1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:ce:a3:0f:91:6a:7b:52:2d:0f:8d:47:46:cf:5b:49:85:
1f:f1:7a:90:5d:aa:67:fc:43:d7:d3:1c:a7:03:db:09:56:b5:
f8:52:50:59:8c:fa:9a:6b:f4:f4:d3:18:a0:c0:46:6f:ba:bb:
2e:8e:e2:4a:0d:fd:e1:59:59:1d:04:f8:5b:d3:35:7c:42:40:
56:6b:b3:d3:94:96:a7:c5:ac:18:c4:10:6c:c7:42:16:41:c2:
35:1e:0c:81:e4:05:ca:b3:52:23:fb:68:d7:46:03:20:e1:27:
3a:14:b1:53:df:8e:4c:be:82:c4:c5:7d:4e:67:25:8d:09:a2:
e0:e1:08:ae:ac:82:c8:1b:cd:7a:83:73:30:33:98:a6:f1:a0:
41:2e:af:cd:fd:4f:d9:b4:83:54:89:06:40:8c:98:99:f9:e2:
e6:50:08:6d:8a:45:b1:8d:6d:2d:31:1b:39:66:0d:04:df:0e:
ad:28:ac:5e:ff:47:51:b4:41:9e:7f:91:08:a2:73:ce:9f:f0:
e0:bb:53:14:23:d7:35:a1:2f:c4:1e:60:d0:2d:c9:b9:74:95:
88:3a:95:f1:b5:67:62:98:5e:47:80:e7:8e:8c:b2:9a:bb:54:
3c:3b:87:05:64:fd:62:24:90:a5:eb:4d:ab:c1:a2:2d:db:69:
76:ee:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:44 2025 by rpki-client