Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
File: hUYhlvWiZe4_S4kOKGZyQCCNO68.mft (raw, json)
Hash identifier: QKLM58DrScrFcuUA3d/JR86VL7f+QIZvJFW3jGFgvuQ=
Subject key identifier: 39:4E:24:84:16:B2:9F:64:17:2B:8F:4F:AB:D5:84:5E:98:4F:E5:E8
Authority key identifier: 85:46:21:96:F5:A2:65:EE:3F:4B:89:0E:28:66:72:40:20:8D:3B:AF
Certificate issuer: /CN=85462196f5a265ee3f4b890e28667240208d3baf
Certificate serial: 0196485854C767038F555E65F207189C501C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUYhlvWiZe4_S4kOKGZyQCCNO68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
Manifest number: 0336
Signing time: Fri 18 Apr 2025 10:01:10 +0000
Manifest this update: Fri 18 Apr 2025 10:01:10 +0000
Manifest next update: Sat 19 Apr 2025 10:01:10 +0000
Files and hashes: 1: hUYhlvWiZe4_S4kOKGZyQCCNO68.crl (hash: PSYf34SBN9+BtLb6dICQIE21Whm60zQNN8EiO0UyTc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUYhlvWiZe4_S4kOKGZyQCCNO68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:54:c7:67:03:8f:55:5e:65:f2:07:18:9c:50:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85462196f5a265ee3f4b890e28667240208d3baf
Validity
Not Before: Apr 18 10:01:10 2025 GMT
Not After : Apr 19 10:01:10 2025 GMT
Subject: CN=394e248416b29f64172b8f4fabd5845e984fe5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:57:b3:73:f1:40:2f:42:ba:ca:a7:3e:be:
ae:62:03:ac:87:c0:4f:d2:b8:1b:71:50:ae:4f:8c:
0a:d4:14:b7:6e:80:9d:38:61:5c:7c:e6:2a:1b:1f:
e5:69:d0:50:e7:6b:d1:b2:74:aa:84:00:f9:2c:cf:
37:03:7e:73:3d:75:0f:71:78:d7:85:be:c6:79:e0:
5d:c0:a4:d7:55:fd:d7:a1:b5:36:94:61:29:a4:68:
02:6e:29:f0:01:36:d5:9f:fe:a2:69:d9:9e:93:8e:
2a:ce:81:00:31:22:b1:4a:7d:1f:a6:aa:3d:b1:d4:
9a:cb:63:a3:d5:96:1c:c3:08:fc:c5:23:5a:15:b4:
09:d5:9d:7a:c5:c7:d2:23:43:a0:29:ac:11:a1:fe:
85:46:a8:3a:4a:3a:d5:f2:8c:e5:a1:90:5e:7a:0d:
4f:29:e7:70:3a:b8:c9:3e:b6:19:8a:3c:77:11:33:
95:1b:a8:e5:3e:bc:60:2a:af:3d:dc:61:74:7d:15:
05:8b:54:fa:0d:7e:7e:ef:18:f4:10:d6:19:a5:c8:
18:84:8d:00:97:4f:45:2e:78:8c:cf:6d:54:eb:97:
9c:7c:12:cd:6f:23:4a:02:5a:ce:30:4c:70:10:07:
19:75:dd:4c:b0:a3:e7:1e:ac:8f:25:06:3f:61:bf:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4E:24:84:16:B2:9F:64:17:2B:8F:4F:AB:D5:84:5E:98:4F:E5:E8
X509v3 Authority Key Identifier:
keyid:85:46:21:96:F5:A2:65:EE:3F:4B:89:0E:28:66:72:40:20:8D:3B:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUYhlvWiZe4_S4kOKGZyQCCNO68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/15ae7a-883e-45dc-a804-aa6434e54f39/1/hUYhlvWiZe4_S4kOKGZyQCCNO68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3d:e9:cf:b8:21:3b:6c:de:72:15:2b:a0:ce:d9:b5:cb:e6:
f2:4c:64:08:94:eb:f2:d4:3b:eb:f2:40:a4:4a:93:7d:f6:91:
bf:65:a2:02:ae:03:60:9b:b0:7f:3a:42:d6:df:7a:14:df:27:
c5:bd:1e:a3:2e:c8:e1:ab:39:95:4e:73:b2:80:db:f8:82:eb:
98:02:1a:ae:42:a0:5a:a3:85:41:6d:be:f3:da:47:ff:9e:01:
cd:48:21:e5:2e:13:83:f3:90:e7:44:b4:f5:6a:a9:71:29:03:
72:20:e7:dc:ee:4f:af:c9:c7:fc:a7:37:cf:26:5b:42:08:36:
dd:03:10:36:d9:6f:b3:99:1d:a9:cb:cd:de:a8:fa:ed:6d:19:
fb:d6:7c:93:61:9c:c3:a9:d9:bb:1e:44:2b:94:7f:38:ec:22:
2f:c4:b4:66:fa:ae:ab:62:26:c6:62:fa:7f:ff:5e:80:a8:4b:
dd:b1:5a:f4:5a:13:8a:fe:91:eb:f1:c9:ca:59:ca:1b:aa:55:
aa:fd:e3:b4:ee:20:64:4e:cc:f9:c2:f2:05:34:45:4d:07:fa:
8e:57:87:52:a2:00:6b:41:44:fb:ea:2d:d2:bb:6c:53:c8:dc:
1b:df:e3:c8:09:f5:6f:42:04:17:36:44:02:07:7b:7c:37:b2:
a2:40:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:15:51 2025 by rpki-client