Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: KQiCEzIhLvo0pddv54sypyaV5/zc5MBXDQXPS/yB+FE=
Subject key identifier: A2:DE:F4:EF:C7:43:71:6F:E4:C0:09:DD:D0:E3:D2:00:F9:7C:E0:6A
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 01964FDABF6B5F8D4DC1DEA48378E28748AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 1475
Signing time: Sat 19 Apr 2025 21:00:57 +0000
Manifest this update: Sat 19 Apr 2025 21:00:57 +0000
Manifest next update: Sun 20 Apr 2025 21:00:57 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: sBl2Ah//aoEmlPimDqgEn9f0jJUBWEC7QksClQa3lgA=)
2: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (hash: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:bf:6b:5f:8d:4d:c1:de:a4:83:78:e2:87:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Apr 19 21:00:57 2025 GMT
Not After : Apr 20 21:00:57 2025 GMT
Subject: CN=a2def4efc743716fe4c009ddd0e3d200f97ce06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:24:9a:59:66:34:2b:ab:11:c4:c4:ac:6e:fc:
e8:22:d3:0b:33:ff:86:24:65:05:05:36:da:35:73:
23:d8:52:b9:20:8e:6d:10:64:57:46:12:a1:a7:4a:
df:e2:6c:f6:da:87:4b:b8:2c:b7:27:47:06:98:bf:
0f:b0:b8:3b:a4:ea:1f:e0:60:d8:6e:a0:c2:e3:ab:
3f:47:64:67:5f:f6:ef:c7:78:79:e1:4b:33:32:f4:
c0:97:93:50:13:5c:da:42:0c:03:99:75:26:d7:f3:
61:5c:d0:63:fd:a4:72:e3:0a:7e:76:66:75:e5:0b:
2d:64:b2:9a:69:c6:dd:a3:03:c7:d9:06:d7:f9:a9:
e4:e1:a0:c4:a7:87:00:82:cb:17:1f:48:0f:62:82:
71:19:98:12:1a:81:a0:e0:7f:f0:59:32:4b:99:4b:
fa:f7:a9:c8:71:79:9c:08:5b:63:a5:0a:7e:f9:f7:
2f:fd:d5:d6:4b:42:80:a4:63:11:88:8e:ad:bd:e9:
83:ff:5b:fe:6e:74:6b:ab:e8:77:af:42:eb:bc:10:
48:7a:2b:5f:2d:30:0f:f0:c0:27:d6:52:62:8b:21:
da:d5:cb:0f:02:35:78:bb:bc:b5:a0:4b:fe:64:52:
ef:3f:6c:7e:f5:23:81:11:21:3d:34:17:50:20:e1:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DE:F4:EF:C7:43:71:6F:E4:C0:09:DD:D0:E3:D2:00:F9:7C:E0:6A
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b3:36:53:8b:ed:ca:88:e7:c6:1c:be:9c:0c:3b:db:ef:a8:
7f:e6:23:b9:81:95:46:69:8b:f0:18:e0:e2:55:1d:72:e2:f1:
6b:08:97:b2:cf:ac:5d:79:c0:d3:8a:9a:ff:b4:10:81:5c:c2:
57:c8:bd:b4:11:2c:b0:91:92:ff:e3:cd:c2:38:7b:62:13:dd:
2a:34:91:12:d9:ad:01:45:f1:08:ab:7b:c7:3d:8f:1c:24:d3:
e1:d2:08:c0:b1:fe:b5:3f:d2:7d:66:6e:7a:e7:fe:19:c5:1d:
94:88:1a:d9:22:8f:60:2d:b3:87:98:9f:91:f8:88:85:ec:0b:
ec:0c:79:b9:87:cd:bf:d3:e7:27:5f:42:cf:2b:ea:05:36:5a:
c4:32:3e:5f:2c:f3:a7:b9:ed:71:19:50:2a:1a:99:bc:4a:9f:
87:b6:f5:74:81:d0:fd:cd:85:4a:83:11:7f:61:b9:2e:3d:c7:
4c:55:bb:55:f0:0c:e5:7f:b4:14:61:18:e5:a8:73:8e:4f:84:
a2:a4:76:0b:49:7f:30:92:79:c2:b5:69:cd:f4:10:0f:1e:01:
34:4a:da:82:ec:bc:0f:50:84:6d:21:09:bc:97:3c:c5:56:8c:
2f:9a:f3:5f:66:54:f9:78:d8:92:14:e8:87:bd:3f:5b:6d:1b:
98:97:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:29 2025 by rpki-client