Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: SeVVe1K9IxSlB+wEXilNDa6LUjeRPjAytGN3PXHoupw=
Subject key identifier: EE:12:E0:D3:75:D5:24:92:3D:DD:BE:0C:D6:3A:B3:58:A9:B6:B0:4E
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 01959073DE474185A1D9D6AB7A8295DAF9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 14A4
Signing time: Thu 13 Mar 2025 17:01:07 +0000
Manifest this update: Thu 13 Mar 2025 17:01:07 +0000
Manifest next update: Fri 14 Mar 2025 17:01:07 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: lyU7rlheS3e+0BnETZZI//UtquGTJHzS2EWwSwCYQP8=)
2: ppcwt792_0fJ4KuVU5oh5bBxCK8.roa (hash: aGVLz4AJdDai2w17wkg6qcb6wYCOJ1V940AR2tF2zrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:de:47:41:85:a1:d9:d6:ab:7a:82:95:da:f9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: Mar 13 17:01:07 2025 GMT
Not After : Mar 14 17:01:07 2025 GMT
Subject: CN=ee12e0d375d524923dddbe0cd63ab358a9b6b04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:87:37:a1:ff:de:bb:ff:40:a4:7f:64:ad:
59:a3:fd:1e:dd:6b:87:23:5a:4e:75:96:3a:8c:14:
6a:cf:ec:2d:8d:62:de:1d:7e:c3:bd:c9:a6:10:62:
36:a3:7c:48:49:de:a0:48:45:4c:a3:bb:5e:79:5f:
e3:cb:9f:6e:04:18:be:c0:c8:d0:b4:88:84:6b:4e:
05:1a:eb:9f:97:71:38:87:85:7e:9e:eb:79:65:b7:
e3:f7:19:83:39:28:d3:78:42:eb:4c:10:7b:97:c1:
b4:2b:10:6e:ca:2a:ad:4c:15:9c:f2:45:5f:62:5d:
e6:16:c4:ad:36:b7:a8:17:33:6b:a3:50:fc:55:c6:
4c:93:03:e2:cd:59:dc:28:c8:39:02:9d:c8:28:48:
b5:77:cf:87:1b:51:3c:c4:ad:c8:83:22:a9:d5:bd:
b9:54:37:b3:e6:23:ce:bf:e7:f3:49:eb:cd:85:9f:
32:fd:16:d7:0d:92:9f:69:d5:56:b7:d3:61:f2:be:
27:43:fa:cf:44:e3:d3:d7:92:80:ab:63:2c:c2:0b:
6a:45:b6:34:14:58:3c:44:31:48:51:1b:39:1b:2e:
bb:89:a2:ac:44:15:f7:5d:95:64:52:84:7c:8d:42:
ff:5e:cb:86:58:28:a5:3c:1f:89:41:8a:52:71:b2:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:12:E0:D3:75:D5:24:92:3D:DD:BE:0C:D6:3A:B3:58:A9:B6:B0:4E
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:5a:19:d3:fa:1d:45:27:cc:a4:83:ff:c9:90:9f:66:0b:4f:
77:8e:c3:4b:0d:69:ea:5b:81:25:66:39:25:51:2e:89:aa:46:
30:cb:5f:ff:16:99:10:02:b6:b2:e6:cb:6e:2e:cf:34:a7:a5:
59:e1:6e:1b:4f:d9:0b:a8:7c:cd:5b:ec:89:90:5b:1b:58:2a:
64:90:2c:40:1b:94:b1:6d:95:39:20:d5:f3:81:7b:c9:9a:02:
a8:5d:7b:bc:38:7d:45:1c:0d:d0:ab:d8:1f:44:1a:02:9d:85:
f5:bd:e3:14:64:32:e9:dd:37:01:1a:bd:2c:3f:6e:78:63:40:
c4:38:52:3d:29:14:98:82:9e:9a:87:9f:5f:f8:85:dd:dd:28:
2a:90:73:31:0e:4b:0c:33:e6:c2:6f:8d:a8:f6:58:a2:0e:86:
cb:9d:83:be:a8:c2:cd:74:60:82:a7:4a:fd:6a:86:a9:ca:af:
47:c3:55:a1:e3:a6:32:9f:d4:1f:9f:25:8e:82:94:83:14:fe:
9d:42:8d:22:9f:f7:53:93:8f:94:15:55:1a:47:08:a4:41:76:
ce:ff:9c:cc:24:e7:33:5a:7d:e7:a5:bf:89:a5:1b:6e:99:06:
e2:81:2c:a1:ce:23:cc:00:84:b7:dc:be:42:dd:15:63:e0:29:
32:6c:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:41:58 2025 by rpki-client