Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: 9cP2nX3sctVaK23BkChDe31T9i/rwCRcDiKrEa7AwWE=
Subject key identifier: 13:96:EA:02:3F:7A:CC:4D:01:41:09:B5:7F:CA:C1:64:CC:DF:62:28
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 019590AADF093316FC51AC945CCA3D2E2C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 1497
Signing time: Thu 13 Mar 2025 18:01:12 +0000
Manifest this update: Thu 13 Mar 2025 18:01:12 +0000
Manifest next update: Fri 14 Mar 2025 18:01:12 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: 7NLM8WX8Q5SGv6IZpIeqxSNHz3BgRLO6vApUdEByQ4g=)
2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:aa:df:09:33:16:fc:51:ac:94:5c:ca:3d:2e:2c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Mar 13 18:01:12 2025 GMT
Not After : Mar 14 18:01:12 2025 GMT
Subject: CN=1396ea023f7acc4d014109b57fcac164ccdf6228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:27:92:1c:0f:f6:87:1a:58:ed:bd:1c:49:
50:12:38:79:5c:4e:0e:e0:37:53:a6:cd:73:94:e5:
9e:cf:2a:db:be:09:89:3e:95:96:be:79:92:b5:b7:
3c:f0:76:ed:61:2c:83:57:64:0e:2c:bf:2c:ea:fb:
5b:f0:6d:0a:ec:f2:29:92:ed:55:4c:40:d9:33:3c:
c1:ea:2f:10:24:ab:86:ae:ef:87:71:56:07:02:bb:
f9:4e:ac:09:a8:27:94:00:d5:f6:78:d1:07:1c:14:
21:73:63:23:af:31:e8:31:be:75:5e:86:c1:f0:a4:
07:4f:b6:89:15:85:fb:05:b0:92:67:96:4e:0e:0a:
14:16:6e:06:bd:8a:7a:6a:d2:70:72:68:20:38:45:
fb:13:ee:7f:36:85:39:9e:2f:c1:41:63:d3:7a:59:
d6:80:23:1c:43:ed:98:69:d1:08:34:57:7f:14:f0:
7f:0c:8b:e2:4b:05:a2:71:c6:e5:65:45:0b:e9:50:
3f:ca:d8:e4:0e:f7:7e:32:9b:31:47:bc:c1:d1:a4:
34:93:fe:49:19:1f:d2:51:f9:04:8e:42:f2:e1:76:
e9:45:e1:19:a9:e5:ba:b9:fd:f0:94:8e:07:9b:ee:
60:44:71:32:11:0d:6d:91:93:2e:e3:5c:d4:c5:64:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:96:EA:02:3F:7A:CC:4D:01:41:09:B5:7F:CA:C1:64:CC:DF:62:28
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a0:29:a5:8e:54:63:84:18:e8:96:e0:e1:d2:79:cc:ed:4e:
09:d5:26:34:7e:2b:8b:f5:38:53:ba:02:09:93:0f:f3:f3:8e:
12:f9:27:6f:82:ac:b9:4a:68:bc:08:dd:02:a2:98:51:42:a2:
88:80:87:63:0e:6e:0d:39:ed:98:51:2c:4c:a5:e4:b0:2b:cd:
14:33:9a:eb:9d:fb:f0:be:f6:59:7c:9f:61:2e:32:2b:00:03:
45:1f:b0:18:c0:e6:d8:32:2f:a2:bd:c8:10:a3:b4:d2:c1:8e:
6e:d4:4a:07:85:a1:b3:ae:52:ef:34:26:ca:78:ca:7a:00:2b:
b0:75:de:51:ce:a3:51:0b:9e:d5:ec:81:b7:0b:a3:47:f1:d6:
96:f3:7d:c2:13:6e:97:8c:d4:eb:8e:84:d3:b7:b6:61:88:ac:
74:76:ae:e1:f8:4a:0f:4a:41:4f:31:2c:bf:ba:57:1a:96:66:
db:ea:43:0c:76:ae:97:58:27:01:66:81:22:a7:35:31:5b:71:
76:55:31:85:ce:0d:07:18:ed:76:f8:e0:7e:bd:05:45:ac:b2:
f1:06:e1:b1:b7:8f:4f:fc:53:42:33:1e:1d:5c:0e:69:4b:f5:
0c:98:48:53:ec:b2:bf:7b:22:ce:a8:cd:ce:40:e6:69:71:38:
b6:4d:2c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:10 2025 by rpki-client