Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: exCzHhrx29T2jaFeVmGHoJ6zDuWvc2hVc15tW9I54gA=
Subject key identifier: DF:3C:F5:0E:41:13:2E:B4:EB:35:39:F7:B5:6B:12:D1:BE:9D:38:67
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 01964DB4F2D64E226D40145CFE7F20F2AB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 1506
Signing time: Sat 19 Apr 2025 11:00:26 +0000
Manifest this update: Sat 19 Apr 2025 11:00:26 +0000
Manifest next update: Sun 20 Apr 2025 11:00:26 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: vue9i0D+ETPFJYWMENEKuOfhSgWoPpEe2p8W29+A0uA=)
2: ppcwt792_0fJ4KuVU5oh5bBxCK8.roa (hash: aGVLz4AJdDai2w17wkg6qcb6wYCOJ1V940AR2tF2zrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:f2:d6:4e:22:6d:40:14:5c:fe:7f:20:f2:ab:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: Apr 19 11:00:26 2025 GMT
Not After : Apr 20 11:00:26 2025 GMT
Subject: CN=df3cf50e41132eb4eb3539f7b56b12d1be9d3867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9e:ca:f6:ba:dd:55:67:b4:eb:01:7f:e1:77:
b6:72:32:3c:9c:f5:29:63:42:da:5a:15:32:2e:59:
2c:91:b3:94:d5:55:ec:66:79:7e:74:b1:99:a6:da:
73:5c:1e:70:76:bc:01:cb:6d:53:3e:56:06:01:bb:
8a:55:1c:8d:fd:cf:7a:6e:16:ee:ef:4b:8a:f5:67:
10:52:96:3c:39:e1:31:0f:34:93:7d:04:15:02:30:
7b:64:df:e2:74:af:49:97:b2:ae:10:64:84:65:86:
35:59:78:f7:92:e1:1d:fd:5d:30:db:03:ec:3b:4a:
a5:63:fb:1c:29:fc:f1:eb:f1:84:19:53:be:77:77:
b1:0f:19:6d:bc:d0:79:14:bb:ea:d3:16:81:b5:52:
32:b6:21:da:14:70:dc:8e:25:85:2a:04:6f:85:30:
68:4c:2c:d4:38:3b:24:0b:03:60:33:8b:4f:89:39:
bb:85:c3:78:04:4e:f9:6e:3f:49:8b:59:41:19:ad:
4f:2d:1b:05:c7:08:ea:d7:bd:70:98:80:49:83:22:
6c:f4:0e:d7:af:20:e7:ba:f0:c8:ae:e6:eb:43:6e:
03:cd:0d:46:d4:19:bc:3b:18:80:da:5a:f5:1f:7b:
54:f5:2e:e2:1b:e7:c5:46:7e:b1:11:5c:c3:ed:aa:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:F5:0E:41:13:2E:B4:EB:35:39:F7:B5:6B:12:D1:BE:9D:38:67
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a8:01:42:02:69:a8:0e:40:26:72:a9:a6:a9:a3:1a:be:07:
7d:80:ed:29:5f:f4:4a:7b:03:c8:47:57:01:3e:9f:14:90:d5:
63:96:cf:92:54:a4:b0:ec:1e:3a:41:3b:57:75:1d:74:9c:31:
ba:27:54:f6:b5:b4:18:fa:d6:59:59:33:72:58:ff:34:2c:49:
30:78:8a:02:21:7a:94:72:0f:f2:91:16:bb:b4:b6:db:d1:a0:
2e:e8:4f:b4:76:37:6b:dc:f9:51:c2:6f:a3:a7:74:27:b4:a7:
12:62:99:ba:e2:f1:da:f8:10:66:32:5d:30:dd:3c:d2:8f:59:
00:2b:c6:9f:84:2a:68:23:c5:04:b2:3c:8b:12:d2:87:3f:73:
80:4b:66:45:1a:12:57:8d:89:b0:1e:76:05:4e:c3:00:69:45:
72:b4:cf:05:0c:9b:76:4f:b1:33:56:a0:c4:ce:16:c3:4f:f7:
33:88:4a:75:e3:07:2b:a6:91:a5:99:81:c5:8b:9f:ca:8b:43:
df:6a:72:4f:df:c2:cd:f2:dd:07:c7:fa:40:34:f0:64:47:e6:
e1:44:0a:f7:08:c7:c7:c6:fe:a5:b0:86:8c:6b:15:4e:8c:b0:
14:11:c8:3b:e5:f7:78:de:c2:64:01:c0:fe:65:ca:cf:ab:9a:
30:ae:1e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:13 2025 by rpki-client