Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: Mwd/bp41PP1uKUcLTNLFl3oeh8BEbl0QmjtteYtCtLk=
Subject key identifier: E4:D7:67:A6:E0:8C:EC:44:5D:DE:C8:B9:79:A7:A1:8A:71:30:9E:00
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 019510C755E99C8A7A7CF9B1BB90BB507C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 22:00:53 +0000
Manifest this update: Sun 16 Feb 2025 22:00:53 +0000
Manifest next update: Mon 17 Feb 2025 22:00:53 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: +H1AIzL+ks0Qj7BTbnJWmjZZ0VhofcqAVsbPZcrs4j8=)
2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:55:e9:9c:8a:7a:7c:f9:b1:bb:90:bb:50:7c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Feb 16 22:00:53 2025 GMT
Not After : Feb 17 22:00:53 2025 GMT
Subject: CN=e4d767a6e08cec445ddec8b979a7a18a71309e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:e7:0c:01:ef:35:8b:aa:91:fe:ef:2c:89:
0c:56:bb:09:3f:7f:25:95:cc:f0:a1:bb:0c:72:1e:
c8:3c:7c:f7:8b:54:76:f6:6a:b2:10:79:3d:0f:16:
66:fe:f8:68:77:06:ba:da:e3:21:18:da:d3:ae:dc:
4d:be:3a:93:74:09:88:36:48:e4:62:db:0b:20:43:
dc:60:fd:18:2e:a3:ee:b6:cc:09:30:7f:db:e8:a0:
93:4f:ff:2a:99:28:70:99:b7:38:c1:8c:d6:d8:91:
77:4b:87:f1:c0:dd:e7:76:a9:71:47:b3:a4:bd:52:
44:d5:14:39:74:54:61:a0:13:2a:e5:b0:52:db:8d:
65:f2:85:fa:7f:a7:25:c4:7c:86:de:87:e9:8a:73:
51:63:39:0f:34:aa:4a:3b:a4:42:9c:84:2d:e9:08:
ac:e9:72:e7:3d:76:e1:77:f9:f9:1a:77:c9:c0:2b:
2c:27:52:ff:0b:7c:58:41:79:2e:33:7e:6d:a4:90:
90:eb:df:02:2b:58:50:2d:78:5c:88:25:4f:48:13:
49:65:88:2c:9c:ea:27:52:d6:f3:f1:4e:0f:9b:a4:
ea:d5:df:b3:9f:ad:9b:e1:dc:02:92:d1:08:44:1e:
5c:d8:20:b6:4c:d1:5d:f6:eb:3b:0d:db:ae:a3:b1:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:67:A6:E0:8C:EC:44:5D:DE:C8:B9:79:A7:A1:8A:71:30:9E:00
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:e5:dd:be:55:e6:5f:f6:02:e3:19:73:54:e4:45:8b:6b:21:
d3:18:a2:20:74:bb:24:85:3a:0e:15:7e:71:6b:66:25:51:83:
a5:9c:d5:32:ad:b7:fe:16:9c:72:8e:2f:95:dc:75:fa:00:68:
00:8a:35:db:e2:8d:f2:f5:23:0a:34:ef:84:e5:ff:36:b2:1d:
53:7e:da:48:72:87:dc:3c:80:a4:66:0e:e8:d8:78:a7:68:a8:
1d:26:a4:8b:78:7c:c2:a1:5f:87:2e:9c:35:50:cb:28:62:9d:
ce:a3:5d:3d:99:d7:d5:7a:c1:b2:5c:34:3d:0b:36:a9:2a:a9:
17:3a:b8:91:ea:9c:a6:86:58:1b:4a:23:02:75:5f:2a:10:b2:
3a:e6:94:8c:8d:d4:0e:8f:79:6c:48:06:2c:ef:00:a7:ff:49:
73:1c:4d:3f:f4:48:cf:aa:23:22:d9:0f:09:e1:51:f5:d2:8f:
b1:7d:24:10:71:73:19:48:7c:63:cf:8d:c6:29:1f:df:30:aa:
f3:7b:64:97:a1:70:0f:c5:4a:6e:1b:aa:30:f7:36:e6:9a:0a:
97:a2:de:40:1d:85:82:fe:ab:db:3c:5a:b8:cb:97:a7:8d:d7:
b0:7b:af:74:23:7c:43:09:b1:d8:17:77:3f:8c:3d:35:50:bf:
8e:52:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:23 2025 by rpki-client