Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
File: HK8vo44dGk0OBmCb8pdugcUKrQo.mft (raw, json)
Hash identifier: RwcmxjoDYuI5UzD2PhOM3l3F6BK5Qk4fevTp40q9x8I=
Subject key identifier: 73:30:0D:EB:93:EE:BC:01:54:7C:A8:A5:ED:42:4C:DA:C7:25:BF:24
Authority key identifier: 1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
Certificate issuer: /CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Certificate serial: 0196458D602A407DC6DC478E289845A1667A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
Manifest number: 11AB
Signing time: Thu 17 Apr 2025 21:00:14 +0000
Manifest this update: Thu 17 Apr 2025 21:00:14 +0000
Manifest next update: Fri 18 Apr 2025 21:00:14 +0000
Files and hashes: 1: HK8vo44dGk0OBmCb8pdugcUKrQo.crl (hash: v8+vpM/J4Lob7LmiTvNFKpnrFfFQ69AiFPkHmYmkzow=)
2: lmgzBptHHcGR1jAKHjpS47zLYEQ.roa (hash: t/2vEU4hMx7G3HXdySNq/pjezwcUhKsGwxxqSv/Bf/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:60:2a:40:7d:c6:dc:47:8e:28:98:45:a1:66:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Validity
Not Before: Apr 17 21:00:14 2025 GMT
Not After : Apr 18 21:00:14 2025 GMT
Subject: CN=73300deb93eebc01547ca8a5ed424cdac725bf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:a5:92:dc:a2:0e:a4:54:4c:41:e1:5e:3f:
86:67:cf:02:a6:c7:14:3c:a6:06:46:b8:79:87:b5:
cd:dc:d0:eb:f4:a6:5a:d3:9e:8b:1f:f0:39:88:4d:
b2:b7:5d:8b:19:8c:c3:8f:9b:c8:b6:f8:b7:e4:02:
3d:e2:56:0c:e1:17:b6:88:ba:41:c4:1d:13:f0:ae:
ae:bd:f3:88:dc:51:a5:96:b5:27:a5:be:00:46:24:
5c:27:7f:44:f7:39:f7:90:ef:2f:db:2d:d4:6f:37:
81:c9:f8:d7:4a:85:5d:ed:66:ec:b2:e0:95:04:46:
fc:6d:01:83:30:bf:54:34:a5:10:83:97:a4:57:be:
b1:45:91:eb:19:9c:aa:86:e8:02:1c:22:49:2e:41:
07:bd:4c:e6:bc:3a:8d:d3:58:18:e2:5c:bb:81:d0:
5a:4a:6a:a9:f2:65:13:41:15:8c:73:62:fd:e9:50:
53:de:55:d3:85:46:6e:81:87:8b:95:a9:77:dc:61:
6d:d3:1d:60:70:36:ef:8b:2a:26:3b:20:2c:3b:48:
c2:c9:1a:4a:28:ab:a7:8f:3b:18:80:12:6c:1b:63:
1a:2f:e1:a2:74:b9:37:89:b1:fd:d3:05:cf:65:02:
8f:43:79:3e:9c:cf:9c:07:f9:ed:f8:98:45:69:31:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:30:0D:EB:93:EE:BC:01:54:7C:A8:A5:ED:42:4C:DA:C7:25:BF:24
X509v3 Authority Key Identifier:
keyid:1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3d:a2:04:db:25:73:de:ee:82:91:fe:7e:f8:ac:2f:cd:4d:
69:f8:dd:12:d4:97:90:62:80:04:02:93:bc:e3:fb:2f:d0:3c:
75:ac:80:ac:86:d8:32:9f:02:2b:22:06:24:ea:11:44:79:5e:
79:98:17:e0:b4:ad:fe:4e:f3:66:86:25:3a:7b:b6:82:d5:7d:
c5:59:9f:6e:8b:f2:f5:32:7e:63:8a:84:96:3f:ce:c9:0f:f0:
19:87:7d:2b:4c:8c:8e:c2:84:4a:e9:9d:33:cd:47:57:fc:47:
74:b3:9e:87:3e:6b:73:fd:08:da:a7:dd:d2:88:bc:74:48:1f:
b1:5d:83:a5:e9:9e:3e:bd:f0:6a:8d:1a:b2:53:e7:33:f0:f8:
f4:36:12:1f:39:c5:a7:00:58:3e:3c:43:77:2e:b6:97:64:33:
d0:ca:9a:ef:d6:d2:bc:c1:39:7a:e4:58:d6:77:67:b6:b2:84:
fa:2e:a2:93:f9:01:65:4e:6f:87:e6:10:7f:73:fc:5d:e4:db:
4a:e0:8f:9c:ec:61:68:48:64:c6:48:1b:b5:15:c9:2b:8f:48:
9d:80:2e:13:e1:3e:0c:b8:71:33:eb:4d:e7:f5:5b:c7:e6:b7:
9e:1c:65:63:4f:c9:03:d5:2b:43:15:5d:ff:c7:4b:af:ab:c7:
f9:76:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:15 2025 by rpki-client