Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: XRhbwZJQJuuRR1iX45/Zmhf5P7OzwWB1cnXhXn8iTXM=
Subject key identifier: 3E:02:A8:94:47:72:7D:C5:24:E1:D4:4A:2C:DE:F1:C1:56:E6:BA:3A
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019610FBD21B2EE4CBB2FBFD9C5A1E915105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 16:01:00 +0000
Manifest this update: Mon 07 Apr 2025 16:01:00 +0000
Manifest next update: Tue 08 Apr 2025 16:01:00 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: F3LrJEYbShFLvn5IE/LRLMvU8UFugRwEzkj+rxUVLZU=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fb:d2:1b:2e:e4:cb:b2:fb:fd:9c:5a:1e:91:51:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Apr 7 16:01:00 2025 GMT
Not After : Apr 8 16:01:00 2025 GMT
Subject: CN=3e02a89447727dc524e1d44a2cdef1c156e6ba3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:49:97:93:85:c9:d4:8f:c8:54:91:48:20:
1f:cc:c5:b0:3c:db:7f:a7:9f:bd:4b:13:aa:d4:06:
c8:d7:80:a1:ca:1d:27:96:94:3a:e8:19:b4:5b:b1:
e1:78:59:d7:b1:36:7c:dd:84:3c:b1:f1:1d:31:06:
0d:12:4b:b1:50:e7:9f:4b:72:ab:d3:ac:2a:5e:f1:
f3:fa:d5:46:d8:98:01:03:d9:5f:1c:80:00:c5:32:
99:b6:73:93:ad:a6:5d:bd:0c:98:62:dc:9c:6e:e7:
f0:e7:4d:9d:80:66:3f:b2:41:0a:c0:94:00:76:4c:
b3:45:70:bb:f9:0b:c5:5f:4d:e7:47:c2:25:b6:cc:
a3:7c:c9:0b:d0:df:1e:7d:c9:a9:af:3d:fe:3d:dd:
b6:7f:7a:95:57:80:7e:ba:f9:9f:29:29:ce:94:20:
d1:b7:a6:dd:d5:6a:7a:56:b0:53:73:ab:46:7f:e5:
c0:3c:de:56:90:ec:30:89:ba:58:38:d1:fd:92:ef:
01:3d:15:8d:17:ee:2a:e8:42:1b:4b:d4:e3:37:f3:
b8:57:9c:60:6e:f7:84:5d:a7:71:a6:41:ee:47:cb:
19:a6:b7:74:be:a4:51:e8:9e:15:9e:68:44:1d:20:
17:c8:c1:71:23:7f:c4:43:fd:92:9d:1b:74:1c:ec:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:A8:94:47:72:7D:C5:24:E1:D4:4A:2C:DE:F1:C1:56:E6:BA:3A
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b4:d1:b0:29:ed:1d:3f:f9:6a:b9:35:95:ac:d2:a4:63:9c:
c3:1b:66:87:21:44:31:dd:e0:b3:e2:08:eb:22:24:ef:02:a7:
26:7c:e4:68:58:22:8b:10:6c:52:4e:8e:de:bc:d1:96:3e:e4:
77:ec:f4:6c:8c:d6:cf:bc:ff:70:36:53:97:19:96:1b:f7:b5:
81:3f:55:8f:be:0f:64:d7:42:9d:9b:0f:f7:37:94:75:82:13:
0f:be:12:76:0e:20:44:53:70:1f:96:bb:69:a1:72:00:6b:d7:
d4:d9:60:22:15:ec:27:25:e4:22:49:42:80:92:8a:1a:6d:65:
73:4c:a6:d5:a0:82:3a:03:13:f2:6c:80:36:12:7a:1c:13:3e:
cf:ed:9a:46:8d:f1:4c:9e:cc:96:5c:b4:8d:54:ad:2c:cd:b0:
70:68:5a:20:69:b2:89:1f:02:45:d1:f8:c7:93:a0:e5:40:bf:
4a:c3:da:a9:1f:a9:c7:ca:d4:1e:55:1b:23:c4:95:2b:c7:b9:
a7:ca:d0:a1:91:62:eb:b3:4e:d6:7d:77:95:1d:a3:09:f4:d7:
42:09:4c:ad:b5:9b:23:b2:75:61:f1:dd:9e:a3:6b:a9:e8:4e:
29:cc:d0:4d:72:3c:c7:27:19:9c:c2:67:1a:3a:74:48:71:cd:
3b:06:71:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:23:19 2025 by rpki-client