Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier: eJ/n/JqZj5W3d2RDFO29kNUmI9KlQL+xh1aLcZhnBQ4=
Subject key identifier: 48:1D:AF:8C:B3:9D:8A:E7:FE:E9:36:82:90:7C:3E:A1:A7:27:1E:DF
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial: 019659822F27AC7D2F645DC6E40488AA7917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 18:00:25 +0000
Manifest this update: Mon 21 Apr 2025 18:00:25 +0000
Manifest next update: Tue 22 Apr 2025 18:00:25 +0000
Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: E6jyrYHNQLTJf9qJjriDlW3WBryMVO+rrrQfHtxrfHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:2f:27:ac:7d:2f:64:5d:c6:e4:04:88:aa:79:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Validity
Not Before: Apr 21 18:00:25 2025 GMT
Not After : Apr 22 18:00:25 2025 GMT
Subject: CN=481daf8cb39d8ae7fee93682907c3ea1a7271edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:87:b7:59:bd:90:4b:ca:51:bc:02:09:86:
ce:2e:e3:8d:a0:bd:2e:f4:00:08:73:20:ca:c7:74:
3a:e2:45:7d:4f:8b:df:0f:4e:86:45:44:18:28:b9:
8a:ff:71:b8:8d:e2:50:f4:8d:43:8c:9b:d4:d3:16:
75:a8:65:1c:4d:89:52:1a:64:c3:82:c7:d5:75:b9:
49:81:86:2c:00:0d:48:0b:ea:85:16:1f:64:65:7c:
29:9b:54:49:1a:4b:ae:2f:25:1a:11:e8:f7:a3:0a:
35:e1:53:d9:14:71:08:54:89:aa:b2:cf:e1:4a:22:
a8:fd:a6:ed:4d:f4:38:88:6b:8f:5a:b5:1a:9b:32:
57:be:9a:a6:e4:a0:1e:0e:da:45:4b:c8:1a:0d:e1:
4b:8a:6d:3c:da:79:b2:32:dd:b8:1c:cb:75:e6:6f:
63:28:61:40:f5:81:85:ed:37:22:db:6a:88:a1:b0:
31:0b:7a:bb:c8:59:75:85:e5:04:44:0e:c4:88:ef:
c7:1e:54:06:2e:70:5f:f7:67:e0:85:88:70:fc:db:
cf:93:e3:38:b1:fe:3a:29:fb:ad:e8:9f:fc:16:d5:
61:c3:49:a4:86:47:72:4b:f6:98:b1:cd:8d:74:e0:
93:c4:64:35:75:2e:34:67:30:5f:75:40:55:dd:f8:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1D:AF:8C:B3:9D:8A:E7:FE:E9:36:82:90:7C:3E:A1:A7:27:1E:DF
X509v3 Authority Key Identifier:
keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ef:c2:c8:06:e0:df:25:a5:30:e0:8d:a7:ff:a5:d5:fa:06:
e8:a5:b9:66:59:84:80:56:3a:67:74:69:9f:5b:1b:fc:a1:e6:
ce:b2:4d:11:97:98:f1:89:fe:1f:ce:cf:17:de:ce:16:40:75:
b3:6d:7e:84:e6:f7:4b:b7:a7:75:12:8e:15:4b:a4:e9:79:c4:
82:de:7f:8a:3e:34:98:10:ff:0d:0d:2e:31:b4:9e:75:ba:4f:
5e:b7:91:da:84:ba:2d:da:70:32:30:4c:78:a0:55:9f:0a:6d:
53:aa:11:03:76:fa:c6:70:ac:d3:79:fe:01:de:9f:e7:6a:7e:
37:2f:11:e5:21:38:a4:dd:b9:b6:3d:1d:79:e9:d4:ec:4c:07:
85:ee:5b:b9:c6:b7:a9:8e:5a:3e:49:a0:69:a2:9e:fe:27:0b:
bc:76:d4:49:60:1d:ba:7d:bf:eb:a0:5b:68:68:b3:68:25:83:
92:60:78:21:3b:8c:de:31:73:f2:d4:72:46:eb:71:a9:ec:12:
cd:5b:f2:34:6d:f9:ea:93:73:c9:bc:86:8c:3b:44:05:55:88:
a9:44:42:08:6e:57:1e:ae:d1:09:8e:2d:3b:2d:7c:03:5b:50:
11:c5:c8:5e:54:a6:52:69:f3:e9:8a:a1:66:f4:53:03:7e:d0:
fe:e5:76:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:14:29 2025 by rpki-client