Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
File: Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft (raw, json)
Hash identifier: mt6rA5oMs5obzrB1ncxQJzk9pnBEqS4nrze8pIvU/cc=
Subject key identifier: 8B:08:D5:22:17:3B:91:9F:CB:97:79:97:8C:35:84:A2:61:44:41:CE
Authority key identifier: 1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
Certificate issuer: /CN=1db93b83bafad7bfd94f676c021baab5187007f0
Certificate serial: 019629046E8E440B0B3E80494CA08184E0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
Manifest number: 0CAC
Signing time: Sat 12 Apr 2025 08:01:18 +0000
Manifest this update: Sat 12 Apr 2025 08:01:18 +0000
Manifest next update: Sun 13 Apr 2025 08:01:18 +0000
Files and hashes: 1: Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl (hash: cA/EfsXvsre4mXBibStofyf9Ab4JeJ7MkH3vvANoxRE=)
2: aRJc7_o9XgAW9PPEgC1zuufULQk.roa (hash: aNwMxPIgMebl0KXeBZmaqOEDWlNAdOizWVRuMjJ0OEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:04:6e:8e:44:0b:0b:3e:80:49:4c:a0:81:84:e0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db93b83bafad7bfd94f676c021baab5187007f0
Validity
Not Before: Apr 12 08:01:18 2025 GMT
Not After : Apr 13 08:01:18 2025 GMT
Subject: CN=8b08d522173b919fcb9779978c3584a2614441ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dc:61:9d:9c:d0:2e:dd:f1:92:4d:aa:b6:5f:
79:39:95:97:d5:e8:bc:cc:2c:d4:e8:ac:73:09:e1:
6e:2e:6e:b2:53:bf:45:e0:7d:a4:2a:e5:c8:3d:7f:
72:08:bd:2b:72:5d:8a:18:6d:08:65:47:9c:b3:80:
15:99:ce:dd:ad:3f:72:90:a4:a7:44:07:31:ff:86:
27:df:f5:0f:82:62:88:b4:03:0e:88:33:87:23:f9:
7f:9d:e1:3f:57:ad:9e:15:c5:42:fb:0e:9e:ad:f3:
6f:4c:bb:42:60:e0:c7:73:67:1c:d5:81:62:c0:31:
06:74:29:84:df:b9:ea:4f:bf:37:7b:ee:92:df:e2:
87:80:39:cb:45:d9:bd:5d:5e:b0:fa:b7:75:8f:f8:
1d:b6:88:a8:13:2d:55:4f:56:94:01:05:8b:42:74:
a4:3f:0c:bc:c4:23:b1:0d:52:0a:c4:ad:4f:f5:a2:
74:31:be:33:49:8c:81:5c:1e:91:c0:d5:70:e3:25:
98:f9:02:36:65:58:88:9c:e5:d9:51:e9:9a:01:ad:
60:e3:0d:b4:6f:f6:4e:fb:d4:c9:ca:b6:d8:b4:31:
31:05:f9:99:41:5a:28:38:03:bd:80:1b:ac:e7:68:
60:ec:04:aa:e4:40:db:98:1c:c0:8d:68:df:7a:61:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:D5:22:17:3B:91:9F:CB:97:79:97:8C:35:84:A2:61:44:41:CE
X509v3 Authority Key Identifier:
keyid:1D:B9:3B:83:BA:FA:D7:BF:D9:4F:67:6C:02:1B:AA:B5:18:70:07:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hbk7g7r617_ZT2dsAhuqtRhwB_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a3009-8f2e-420c-9bdf-be74908186f0/1/Hbk7g7r617_ZT2dsAhuqtRhwB_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:60:65:13:81:56:26:f1:8e:7b:5c:21:7a:91:c6:c2:09:e6:
52:82:0c:60:69:9b:53:61:0e:84:b6:99:1f:b1:4d:62:2b:86:
9d:a6:d0:b1:06:82:33:3e:88:42:3a:bd:32:2c:b1:dd:2a:a8:
bc:93:ed:2d:77:f3:ee:94:f4:dd:e4:a4:79:c3:e5:2b:9f:02:
93:27:04:b7:31:c6:6e:fa:6d:6b:d9:9a:ee:c1:d7:b2:ec:3d:
4f:37:7a:d8:34:5d:17:9f:19:16:ae:94:de:ae:0c:de:04:03:
3d:e6:0e:6f:c9:d1:93:09:90:11:91:77:ca:a1:8f:fb:a4:28:
b6:1a:fa:70:1a:d2:4d:cb:b6:96:36:05:84:33:8a:59:02:4a:
55:b0:2b:84:17:ef:b6:6d:63:3a:70:d9:d3:54:6a:1b:76:ca:
22:7f:80:aa:1c:f1:e0:b9:17:c0:82:8a:a6:f5:c9:ea:c8:6f:
90:81:c2:43:d9:5c:24:87:55:9a:a0:e8:a3:b7:20:55:5a:a3:
2f:6f:d5:af:09:74:bd:00:31:49:69:4e:f5:9b:4e:07:6b:cb:
1f:59:d6:ea:8f:ec:ec:f2:cb:05:0f:d6:52:a9:07:3c:b2:cd:
bc:6d:8f:60:3e:f3:36:c7:38:a0:bd:17:38:bb:3c:89:cd:0f:
7c:18:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:04:56 2025 by rpki-client