Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: FlpV2rUx3wCIBW/hSoaobWYRHog5Do6tA9BO1ioD0yU=
Subject key identifier: 7D:53:B9:34:EF:55:63:4F:31:2A:4F:57:26:3F:B9:6C:7C:AE:45:1E
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 019660CE1E9C2895D87F41D6A506BA5393AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 1506
Signing time: Wed 23 Apr 2025 04:00:42 +0000
Manifest this update: Wed 23 Apr 2025 04:00:42 +0000
Manifest next update: Thu 24 Apr 2025 04:00:42 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: 7AS6Tuy5ajCS26NsZ00kLzbKigB8/1Jq4c6T89b2yxk=)
2: zWwWyLKfCmRpNmwFBTvojnygc1I.roa (hash: rn4lqHeH4XjZAogo04iFGrMuS15xr6iivrKPmjp5V94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:ce:1e:9c:28:95:d8:7f:41:d6:a5:06:ba:53:93:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Apr 23 04:00:42 2025 GMT
Not After : Apr 24 04:00:42 2025 GMT
Subject: CN=7d53b934ef55634f312a4f57263fb96c7cae451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:8d:a1:ed:8c:f1:27:25:02:9c:27:b6:9a:
96:b1:43:47:33:bf:38:af:41:ab:9a:b0:ab:4e:ba:
2b:23:86:ef:a9:a0:37:8b:e4:9a:23:48:c5:8b:38:
bd:f9:5c:1f:49:71:05:77:6d:0e:f8:a3:af:57:a8:
e9:ac:c7:e4:9e:b0:3a:61:d1:97:42:1d:d2:83:0f:
7d:01:23:a6:2e:d5:8b:74:81:66:80:11:fb:bd:68:
f0:f1:9e:65:80:ab:93:b8:f5:99:2c:9e:59:6a:7b:
c5:04:47:e8:f3:fb:04:d5:e3:b9:75:99:55:86:72:
c4:18:02:ce:24:11:c3:0f:1c:60:4d:ba:d1:82:75:
04:e1:8f:8a:54:ef:3a:f9:32:4b:ae:05:cd:cf:97:
b9:6d:04:34:cb:a4:da:b4:9a:0a:19:64:b5:17:4e:
7e:2d:66:60:fc:52:11:9a:97:8e:10:68:84:ce:86:
01:e8:5b:14:4b:ad:c6:b9:f4:ec:36:c5:db:b9:63:
7c:51:ab:2f:39:fd:09:ef:1f:20:8a:4d:b3:b3:be:
aa:0c:00:c3:29:b8:a5:84:c9:c6:51:c2:5f:53:77:
34:85:d8:a7:a8:fc:3d:4e:2f:04:ed:ff:9d:8c:ea:
eb:fc:4d:8f:b4:2e:b2:d4:99:1a:82:9b:1e:60:3b:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:53:B9:34:EF:55:63:4F:31:2A:4F:57:26:3F:B9:6C:7C:AE:45:1E
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:31:48:6d:dc:33:b0:c4:57:87:6c:8d:dc:0c:bb:11:2c:a7:
b6:a0:73:94:91:0d:94:f8:cd:f9:f1:51:99:cf:f6:c4:da:3f:
92:89:ae:53:f6:d4:f7:83:42:f3:63:2e:cc:14:00:69:9e:ac:
bc:b4:ce:45:88:53:b1:fc:b5:3f:e9:0f:85:36:3a:eb:33:65:
6b:3f:81:e4:b5:11:70:b2:a0:c3:33:60:06:fc:f0:99:c5:88:
c4:92:cb:a4:50:75:06:e2:cf:6f:99:fc:53:a4:84:20:de:0f:
53:d7:56:54:b4:c9:77:5b:20:26:c9:c6:80:67:bb:67:42:ac:
82:02:76:c6:28:2d:ca:97:10:1e:d7:eb:55:53:b9:9f:0b:fb:
5c:8f:d5:2f:08:a1:83:8a:19:af:29:a2:89:df:97:32:d1:ff:
00:cf:66:b2:0f:8e:61:1a:26:89:4c:79:e8:f4:d4:4e:ab:61:
75:46:fb:33:1d:3d:02:27:2d:cd:0b:46:1c:e3:48:9e:58:e3:
4e:1a:60:7b:32:a1:7d:04:c7:48:fd:a5:fe:77:cd:21:cf:16:
26:8f:8c:e6:fc:60:9f:8c:1e:a1:4d:7b:c1:26:49:49:12:e6:
32:f3:3d:3e:1e:10:b5:c7:20:73:73:d2:b4:f6:0b:2d:31:c1:
b1:7b:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:00:45 2025 by rpki-client