Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: +ECcwiFvU0UQvrRStqJ2RPku4XX6UHdIdlyfTg5fQ84=
Subject key identifier: FF:BE:74:1D:8A:B4:F4:41:0D:F9:DB:66:3A:99:55:E6:16:0C:AC:DC
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 019645C469F1EC8D04C5EB9E2E360F71EF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 22:00:22 +0000
Manifest this update: Thu 17 Apr 2025 22:00:22 +0000
Manifest next update: Fri 18 Apr 2025 22:00:22 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: JAR2Dejl9T4L3xKNP9UdDjnAQB5emcEMCjqzF9QAxoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:69:f1:ec:8d:04:c5:eb:9e:2e:36:0f:71:ef:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Apr 17 22:00:22 2025 GMT
Not After : Apr 18 22:00:22 2025 GMT
Subject: CN=ffbe741d8ab4f4410df9db663a9955e6160cacdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:f9:21:de:2c:fa:e0:7b:f5:cc:ab:7a:57:
de:40:98:e8:4c:5d:83:e1:6b:c6:49:44:ae:b4:f5:
20:07:2b:9d:c5:4d:ee:14:88:f0:63:26:ab:9b:3a:
98:47:4a:48:8e:a3:75:32:79:3a:ae:73:d9:46:3a:
8f:01:d4:fc:74:6a:88:2c:08:81:de:35:60:36:a5:
3c:02:2b:8b:c5:c7:f2:db:9b:7e:c6:84:f9:0e:13:
3a:cd:73:ef:78:6a:2f:9a:89:c7:64:cf:ad:0d:09:
20:45:38:b6:97:2e:f6:5a:b0:cb:e6:b5:ef:39:f8:
4a:c9:ee:c2:a1:32:c0:ba:97:f1:f6:b9:bb:72:0b:
b7:ca:78:01:9b:6a:9b:a7:1d:67:a2:7e:eb:13:c1:
8d:6c:ec:2f:a6:85:32:2a:d8:9b:4f:37:3c:77:27:
b8:b9:9d:8a:b3:ae:85:e8:52:2f:fa:50:62:35:58:
3d:db:80:33:d9:80:36:d5:e4:55:2e:bb:29:11:78:
42:a5:b0:79:cb:e5:34:3d:82:2a:79:49:03:b6:84:
4e:47:f5:d1:04:60:b5:df:2a:cb:09:05:4e:4d:dc:
c5:81:22:46:a7:70:2e:76:41:f4:55:9c:19:ed:ac:
91:a9:f0:f5:6b:35:8d:b4:f8:57:aa:20:28:ad:0d:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:74:1D:8A:B4:F4:41:0D:F9:DB:66:3A:99:55:E6:16:0C:AC:DC
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:01:1a:30:5f:b4:68:f6:92:79:68:22:64:e9:bb:46:d9:16:
fe:51:c1:a1:c0:7f:5b:eb:97:2f:c0:8d:c5:82:c7:5a:e1:e0:
2e:2f:32:cb:d8:4a:96:e8:5a:a2:94:0c:ab:8f:a9:44:ab:48:
9c:36:8d:bb:03:af:dc:cb:b0:74:1c:c3:f9:2c:14:54:19:dc:
ba:e1:53:b9:1b:8e:8b:33:1a:65:41:6b:bc:12:d3:50:17:26:
b6:c6:22:d2:3f:91:2c:00:59:9f:52:27:84:4d:bf:4a:7d:0a:
2f:c4:9c:04:81:66:2c:42:ab:8c:e5:44:fa:fe:80:d1:59:b9:
45:a9:a5:14:85:b5:4a:c2:23:50:5f:70:30:07:5c:9b:03:69:
85:0e:cb:2c:84:99:9f:37:d8:f9:4c:2e:68:5b:e1:da:7a:50:
e7:ca:07:f4:1d:c7:af:17:0a:3c:79:00:38:87:88:77:a7:dc:
65:73:c3:37:39:d3:db:b7:11:cc:98:73:9f:f1:7d:a6:78:7a:
c1:9c:ed:e1:8c:ad:6c:a2:94:37:08:4e:e3:aa:bb:99:ad:7e:
0d:0c:85:13:5b:f7:f7:04:3c:a6:77:1a:45:1f:db:50:79:54:
18:5e:cf:88:c9:97:be:0d:c7:e0:af:a1:52:4b:24:8b:06:3c:
e7:8b:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:04:41 2025 by rpki-client