Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
File: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft (raw, json)
Hash identifier: 8T0ratHprWqMzSBIC+xi9KkRF4nRwDuwleq1R3RXGt0=
Subject key identifier: 88:02:7B:F0:56:5D:44:39:0C:DE:AD:01:F5:41:DE:36:B4:86:02:01
Authority key identifier: 86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
Certificate issuer: /CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Certificate serial: 0196586F97011676774C0AC34C7F80D99CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
Manifest number: 0DD3
Signing time: Mon 21 Apr 2025 13:00:30 +0000
Manifest this update: Mon 21 Apr 2025 13:00:30 +0000
Manifest next update: Tue 22 Apr 2025 13:00:30 +0000
Files and hashes: 1: hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl (hash: IqFGGjfcwxjEDUoo73tvqpe0l4VgZIMmPjACPkkCvsE=)
2: zzXnyaTo4BATrc17RusBD7eE0wM.roa (hash: 6905vDk9E6YCZ2ECcGKQ29E/7xlB0Pspqzs3gX2rnWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:97:01:16:76:77:4c:0a:c3:4c:7f:80:d9:9c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8600aaf13d4de9c95b63759ad18636abc8e26376
Validity
Not Before: Apr 21 13:00:30 2025 GMT
Not After : Apr 22 13:00:30 2025 GMT
Subject: CN=88027bf0565d44390cdead01f541de36b4860201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:9f:db:00:7c:a1:ce:8e:d0:f2:1f:d0:99:
db:20:dc:76:1e:41:f0:80:47:58:48:7a:f1:fa:6c:
86:4c:c6:2c:20:73:52:ac:9c:a6:53:6c:bc:e9:5d:
20:0b:09:ab:f2:80:5d:ad:98:38:75:6f:21:0b:e6:
b7:2b:74:fc:72:d6:fe:24:c6:9d:6d:b8:ed:c9:59:
91:67:15:37:e4:e6:c5:07:f6:31:21:ee:ba:1a:77:
55:52:ed:2f:57:22:9d:22:cb:94:1c:99:fa:f7:e2:
68:55:7f:30:e3:80:5f:e8:c8:54:a7:77:78:5e:2d:
ec:c4:bc:d0:c9:ad:22:2c:4f:22:25:eb:03:13:c7:
48:45:a1:d3:7c:d3:fc:53:9b:38:59:67:36:fb:35:
5e:f8:04:15:6a:3d:ee:15:a8:d9:2c:ed:fc:c7:91:
fa:a6:6b:b0:32:c6:8c:ef:9a:20:9e:25:a9:46:8d:
c1:38:99:be:d8:eb:ee:e9:de:00:2d:56:85:81:da:
d3:d7:71:0e:a6:46:72:cd:27:47:1f:c6:aa:88:5d:
2f:dc:ab:f0:00:27:53:60:f1:89:e4:b2:7b:cc:03:
e8:f5:74:63:75:e4:bd:7e:bc:e3:56:8b:0e:95:5b:
e1:7f:81:c0:34:02:45:4b:0a:b1:3d:7a:94:de:5a:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:02:7B:F0:56:5D:44:39:0C:DE:AD:01:F5:41:DE:36:B4:86:02:01
X509v3 Authority Key Identifier:
keyid:86:00:AA:F1:3D:4D:E9:C9:5B:63:75:9A:D1:86:36:AB:C8:E2:63:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/hgCq8T1N6clbY3Wa0YY2q8jiY3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c0:40:80:98:05:55:c7:4a:4d:58:36:57:58:15:ce:bf:0d:
17:bc:38:ce:40:36:19:84:37:7e:3d:1e:57:81:f8:f4:52:31:
56:8d:32:81:63:9d:e9:c2:47:d5:70:a8:11:fb:6a:4c:42:00:
62:5f:0b:2c:83:3e:0e:f4:33:50:ed:1a:82:1c:10:1b:34:49:
01:51:6f:50:4c:1a:4e:8d:d8:34:5c:fd:56:ad:10:9b:07:1f:
ee:81:33:00:22:84:54:ae:a7:13:1c:11:2e:3d:8f:15:39:68:
a7:97:f5:38:89:0a:b2:18:2a:de:0c:79:86:a1:63:20:ef:b1:
64:8f:4d:89:19:55:b6:b2:f5:be:01:da:4c:48:d9:66:b6:ec:
ef:26:29:09:e3:34:47:07:d3:98:c1:f2:75:b0:e0:5c:68:84:
2c:ff:bc:1a:8b:d5:9e:73:df:b2:75:6c:9e:4c:b5:84:e0:8d:
bf:86:b7:40:78:03:3b:71:9f:fe:5f:91:35:11:5a:8c:db:27:
1d:24:23:40:42:c1:e2:8d:e2:a7:c0:47:f3:63:be:97:b5:9a:
31:3e:24:5d:13:b8:ba:5c:d6:3c:23:08:dd:c3:93:60:a4:f9:
df:a1:c7:19:da:45:94:b3:47:3d:3d:dc:4c:48:ee:ea:89:4b:
49:e7:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:19 2025 by rpki-client