Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: mi5WHYhiwXpLrVkzOU0N7e/eI51p0KHmnuUWIJ0m0Ic=
Subject key identifier: 60:1C:F3:13:10:F8:7E:3E:3B:22:86:41:4F:17:B7:8E:F7:77:60:5C
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 019645C4DB4458E2AE3BDB5C2FA51F413168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 22:00:51 +0000
Manifest this update: Thu 17 Apr 2025 22:00:51 +0000
Manifest next update: Fri 18 Apr 2025 22:00:51 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: ybbrPoI1uuVnf1gasWkgMQcddkhB/oLrwgzr2I7gkO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:db:44:58:e2:ae:3b:db:5c:2f:a5:1f:41:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: Apr 17 22:00:51 2025 GMT
Not After : Apr 18 22:00:51 2025 GMT
Subject: CN=601cf31310f87e3e3b2286414f17b78ef777605c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:5b:7c:b4:b8:90:31:fc:05:64:fd:a3:e2:
9d:bb:55:29:4c:b6:e8:d4:a7:7b:49:d5:6d:08:d4:
9f:d1:9c:59:c9:35:45:8e:ef:69:6c:f1:6f:4f:1e:
43:97:81:68:44:aa:5a:a8:04:3b:43:a2:ef:e6:49:
96:a1:62:df:e3:c0:2d:65:78:e3:30:46:0b:61:3d:
22:90:e0:e8:e2:66:98:fc:59:35:58:5c:c9:55:fa:
36:d0:4d:dd:a1:0f:16:be:e0:75:9b:7f:40:b6:a9:
fd:76:32:df:6a:3e:89:70:d1:cc:71:cc:c0:f0:3d:
fa:b0:8c:5d:37:5e:fe:e8:34:e7:11:ab:36:29:d9:
81:5c:7e:d4:39:e2:b2:bb:7e:d7:37:cd:91:c0:dc:
7e:f4:bb:da:30:21:16:35:85:fe:e8:12:a8:3d:a9:
6b:ac:11:80:50:5e:65:24:e0:af:9e:f3:4e:a8:fd:
c7:02:21:20:d0:aa:77:e2:04:81:d8:52:4a:ce:b2:
8b:49:4b:d0:eb:52:76:e5:3d:83:55:2a:5c:a9:ae:
5b:d9:73:5a:56:6d:38:17:5d:12:3a:f9:b5:c9:26:
80:d2:09:87:92:fa:6c:1b:61:d1:6a:9e:eb:74:a9:
54:0f:c4:5e:89:66:7e:f3:b8:33:a3:19:f8:13:69:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1C:F3:13:10:F8:7E:3E:3B:22:86:41:4F:17:B7:8E:F7:77:60:5C
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ba:95:3c:34:14:95:3a:52:96:a1:12:94:5e:2e:62:93:8a:
8a:ad:6d:e6:0b:2b:1e:13:4f:4e:bc:f7:4e:99:7a:82:64:d8:
79:29:35:10:0b:85:17:b0:bf:de:07:bc:ed:e4:fd:c5:a9:24:
b2:d6:e3:3f:d2:d3:bc:c4:2d:b4:17:19:d3:40:66:47:da:df:
68:7f:73:19:ac:7b:6d:91:f4:67:d2:bf:f9:70:97:33:36:e1:
21:07:c5:52:ac:78:22:9b:67:7b:34:83:df:d6:10:6c:27:ab:
74:31:01:65:79:20:ff:e8:6a:b6:2f:a2:cc:57:0a:77:57:24:
42:ba:7e:74:3f:db:fb:20:0e:0f:fe:7f:de:2a:98:55:98:bb:
87:58:c6:49:4b:85:4e:40:73:ce:37:44:77:68:c1:ea:12:60:
a0:73:88:33:75:ff:8e:ba:f2:38:d1:59:0a:28:53:75:dc:60:
4a:0f:52:dc:be:3f:e0:1b:b6:d9:3d:89:34:32:8a:25:b9:11:
a8:5b:31:58:fd:37:8d:e2:83:24:85:ef:56:10:2c:56:78:2f:
e5:06:ea:5f:5c:21:c0:93:b6:45:3e:02:50:91:94:3f:b5:e1:
61:42:e5:9e:42:eb:4d:a4:b2:7a:ef:f7:d2:a6:7a:d5:a6:c7:
69:2c:44:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:35:31 2025 by rpki-client