Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
File: HjaTxfrT8hak_3rIbO6yOwBDg10.mft (raw, json)
Hash identifier: 8MCRYiwr+9X2CemZ1I8DBz1jGshFajQ57rLgaWGiq4s=
Subject key identifier: 85:0A:28:03:C6:D4:A2:ED:85:34:BD:1B:9D:CC:C4:5F:61:28:A3:4D
Authority key identifier: 1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
Certificate issuer: /CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Certificate serial: 019610FBE1559415B8F7292A4AC9AD218A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
Manifest number: 09A6
Signing time: Mon 07 Apr 2025 16:01:04 +0000
Manifest this update: Mon 07 Apr 2025 16:01:04 +0000
Manifest next update: Tue 08 Apr 2025 16:01:04 +0000
Files and hashes: 1: HjaTxfrT8hak_3rIbO6yOwBDg10.crl (hash: gFMn7Hlj3bkjJDzsOU3iR30jkgrJMh9Pjs7DWWO1BL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fb:e1:55:94:15:b8:f7:29:2a:4a:c9:ad:21:8a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Validity
Not Before: Apr 7 16:01:04 2025 GMT
Not After : Apr 8 16:01:04 2025 GMT
Subject: CN=850a2803c6d4a2ed8534bd1b9dccc45f6128a34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:01:9c:93:8a:64:97:35:e0:49:39:bb:3b:
c5:78:93:fa:f6:1a:1d:24:0f:6e:c1:b9:b1:46:8e:
26:b9:3c:1b:c4:6e:ba:c4:e6:de:08:b2:7c:59:f9:
9d:c9:0f:96:c0:ef:48:a9:0c:9d:3f:5a:5d:07:ee:
cb:c6:0d:50:c7:d6:77:91:a3:f3:eb:2d:93:75:41:
14:a1:81:b9:d5:08:84:90:bb:8b:0f:ca:44:90:5a:
4c:74:04:55:db:d0:5a:e3:74:44:20:38:e0:f5:a0:
4f:70:ae:96:91:4a:ad:9b:a7:07:f1:15:ca:ec:a9:
0e:f8:24:c3:bb:66:54:d0:f9:d9:44:ad:c8:a1:69:
fc:3b:96:f2:63:03:08:40:00:a5:47:58:13:9e:c0:
0b:21:a4:0c:9a:bc:68:79:90:1b:a6:ff:cc:4e:ee:
8d:ea:8e:2f:10:3e:d8:b6:b1:4a:a1:cb:c0:09:ed:
1a:00:c6:98:5d:91:73:0b:5c:6e:e1:47:ab:93:cc:
5b:e9:22:e5:3d:b9:69:0a:bd:0e:2b:1e:47:b0:7f:
fb:26:fd:7b:07:dd:f7:e6:e2:64:fd:f7:71:89:cd:
b9:60:18:ec:39:1e:4d:40:c5:77:c0:ec:51:ab:8a:
99:d9:ae:cf:c3:33:91:7a:a4:11:cc:76:18:c5:2e:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:28:03:C6:D4:A2:ED:85:34:BD:1B:9D:CC:C4:5F:61:28:A3:4D
X509v3 Authority Key Identifier:
keyid:1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:12:5f:eb:46:83:b2:0c:99:df:e8:b7:23:2e:b5:17:79:d3:
92:9d:8a:48:23:0e:0c:6e:fe:9b:ce:86:a7:8a:1a:e9:58:5b:
e6:44:33:18:db:1a:5e:33:22:f1:29:ba:c5:2f:3c:61:2f:54:
f7:3e:3a:c7:cc:16:ee:cb:d9:5d:ea:81:8e:16:ac:39:22:86:
38:b5:c4:1f:d0:ef:89:99:0a:e6:f6:a8:f1:9c:75:e4:23:0a:
9e:80:88:25:ec:93:7e:32:5f:f7:99:bd:9c:c4:02:55:e8:16:
cc:e7:43:a2:e8:8b:75:50:da:8f:67:4d:91:b6:5e:50:a5:72:
eb:bb:29:46:02:45:1d:b3:b5:35:94:7b:ac:7c:e5:1f:18:65:
1e:81:8a:67:13:11:62:ee:2a:2d:61:40:ac:fa:36:5b:d6:e9:
c8:34:90:3e:f0:f5:b4:ff:81:b6:94:e5:eb:28:8d:c7:9c:ce:
47:42:8d:27:93:0a:7c:43:c0:51:8f:c9:31:56:f7:81:28:cc:
a6:52:7d:ee:f5:1a:00:01:7c:93:21:30:c1:de:84:cf:29:65:
0c:0e:09:11:0b:ac:ac:d5:6d:31:66:a1:14:af:ed:8a:1f:25:
de:5d:71:a9:e8:f3:a0:7f:35:45:1a:21:e4:26:88:cc:4f:6e:
3f:55:b6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:06 2025 by rpki-client