Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: npfja9PvaZxt2324XcHDqowy5pcKVtPmOhb6XQRjbKE=
Subject key identifier: BC:BE:08:01:88:C5:DE:53:88:9E:1E:04:EB:B5:DA:27:B6:C9:08:80
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 01964EC7FB0945CA2E3A9F7A689BEE04117F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 1500
Signing time: Sat 19 Apr 2025 16:00:50 +0000
Manifest this update: Sat 19 Apr 2025 16:00:50 +0000
Manifest next update: Sun 20 Apr 2025 16:00:50 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: 6c1g1W1Tbw6aYtzn+9G0XnGKzF/3YwImD1nda3pxGa4=)
2: pVvB4DPoqxSwKA7eSS7jFs-QMtw.roa (hash: DbYaOM55FhKgmSDQxNENLAyQLbX8jvEl6m8BL1vC3Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:fb:09:45:ca:2e:3a:9f:7a:68:9b:ee:04:11:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Apr 19 16:00:50 2025 GMT
Not After : Apr 20 16:00:50 2025 GMT
Subject: CN=bcbe080188c5de53889e1e04ebb5da27b6c90880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:72:16:b9:10:69:37:65:81:8d:e7:ff:15:
a6:44:4c:4d:4a:ee:7d:f8:86:9e:5e:2f:51:8b:c4:
57:67:2f:31:e4:4c:ca:23:ba:9e:5e:34:43:8c:d7:
47:e9:1d:b4:2f:e6:10:68:c8:d9:f8:63:c7:5c:22:
b1:b2:a7:7a:9d:09:c8:64:d9:58:0b:62:ac:e9:50:
87:30:7d:90:5c:a7:17:2a:09:91:02:06:61:11:02:
0d:d9:a9:1c:83:25:6a:42:98:62:32:71:ef:ae:72:
f1:7b:02:c7:07:4e:8f:b5:b2:c0:8b:8e:3a:1e:38:
d8:8f:c5:59:2a:05:f5:b7:ab:5a:24:45:76:e1:ae:
93:5e:70:e1:2a:47:10:82:77:92:b4:5c:5e:08:f4:
39:38:ca:41:91:3f:28:f8:10:a5:de:08:52:7f:e2:
a5:62:15:5e:f4:fd:d8:45:6a:8b:79:bf:36:89:da:
b8:b0:97:05:e8:16:70:c1:47:47:bc:69:3c:d9:b5:
96:51:88:2c:e9:ef:61:90:a1:6f:b3:5e:35:43:f8:
18:b4:f0:d7:23:ba:24:ae:ac:77:ac:1f:e0:d4:7d:
6f:b9:87:5c:f3:26:d1:0d:b5:c1:15:0e:0a:ea:39:
15:1f:04:19:6b:38:dd:20:45:67:92:58:ca:95:f6:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BE:08:01:88:C5:DE:53:88:9E:1E:04:EB:B5:DA:27:B6:C9:08:80
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:21:3d:5c:46:fc:52:96:19:9b:cb:c8:84:90:87:cd:9a:18:
b9:bf:c2:a6:03:96:15:c1:fd:52:35:96:d8:8e:b9:38:1a:ca:
b3:ed:89:62:ed:bf:5b:b1:d2:1e:4a:13:0a:de:c6:a4:89:b9:
91:d4:bc:85:94:c6:4c:be:5e:1a:a2:8f:b5:37:b6:9e:44:08:
b0:90:1f:23:40:2a:a7:d0:b9:c1:b5:ef:d0:e9:d2:47:bd:a4:
c2:2c:67:54:33:0a:cf:88:c4:d0:3b:77:29:68:c5:a8:c3:8a:
97:31:0a:e4:d0:57:e6:21:72:70:c8:ad:ec:57:a5:00:16:d0:
b1:cb:97:71:9e:ed:e0:c3:59:c1:fa:4c:06:87:b7:51:21:99:
76:58:53:7d:b5:a4:f6:8f:11:0c:2e:c1:09:17:64:c3:31:a5:
5d:6a:46:91:70:0e:6a:27:a4:6c:18:5d:16:97:4d:4c:a9:cd:
e7:e7:0b:af:87:60:b4:d5:0c:58:b8:91:19:11:73:d3:a7:60:
79:4e:ef:0c:6e:04:23:8b:d8:86:44:bf:2d:e2:b6:3e:1f:78:
19:21:97:0d:f5:fe:e9:c9:79:12:40:d4:a0:0b:47:3f:95:92:
8a:89:24:f2:d3:ae:2a:4e:b3:66:75:b7:4f:a4:a4:96:38:8c:
16:3c:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:38 2025 by rpki-client