Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
File: hbc7mIsBRCjrr2ehj30Zmbojxk0.mft (raw, json)
Hash identifier: 0IahHWeG6siy0D4U2QJLsnVKcoOsRDRk9r750YHXVfg=
Subject key identifier: 10:FD:78:C5:27:6F:E5:B5:39:E8:A6:E0:1F:D9:36:B0:F9:53:C0:21
Authority key identifier: 85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
Certificate issuer: /CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Certificate serial: 019647B358676EB872EB5CDD3E9171356448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
Manifest number: 1114
Signing time: Fri 18 Apr 2025 07:00:58 +0000
Manifest this update: Fri 18 Apr 2025 07:00:58 +0000
Manifest next update: Sat 19 Apr 2025 07:00:58 +0000
Files and hashes: 1: hbc7mIsBRCjrr2ehj30Zmbojxk0.crl (hash: OfGgz/ghDjLehJknSZXeB6MTt+O0kWP9VHqColjKY44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b3:58:67:6e:b8:72:eb:5c:dd:3e:91:71:35:64:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Validity
Not Before: Apr 18 07:00:58 2025 GMT
Not After : Apr 19 07:00:58 2025 GMT
Subject: CN=10fd78c5276fe5b539e8a6e01fd936b0f953c021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:76:fa:a0:21:31:f4:e4:44:c7:1e:97:18:
51:d2:84:c7:cf:bf:22:c4:3e:9a:2d:af:12:e5:bc:
f3:e2:8c:d1:bc:4b:13:97:ea:0a:ef:b1:7a:84:21:
03:dc:32:5a:ce:e2:b6:0d:9b:69:00:81:92:9f:98:
c6:6d:ab:4f:28:31:aa:69:62:e2:cd:d9:17:93:1a:
68:90:27:2c:06:f2:45:b5:81:0c:61:25:1e:50:f6:
02:2f:5d:d5:e3:d5:c9:00:14:aa:77:91:f5:17:7e:
6a:09:9d:f0:57:f5:b7:7b:0e:b3:df:0a:5e:cf:44:
01:1c:6a:22:6f:97:ff:14:e5:b8:19:40:70:be:d0:
4c:df:de:e9:31:df:e5:6a:51:18:b5:7d:89:50:28:
92:cf:7e:70:49:c2:15:3e:55:65:af:e8:82:ba:24:
bd:f5:c2:e5:13:20:ef:d9:5e:5d:42:71:5f:74:31:
b7:80:71:da:c1:bb:8e:e6:0c:72:34:73:ae:34:3f:
7e:c1:96:81:8e:cd:73:39:5b:30:5c:76:f6:fb:15:
bf:28:d6:71:3a:4c:3a:34:1f:04:f7:7e:ec:3a:54:
e7:37:21:83:83:52:a2:ab:78:13:5b:48:b6:c2:91:
60:24:5b:1c:f3:c2:a8:04:61:40:6a:7f:15:16:60:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FD:78:C5:27:6F:E5:B5:39:E8:A6:E0:1F:D9:36:B0:F9:53:C0:21
X509v3 Authority Key Identifier:
keyid:85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f5:f8:cd:9f:9e:a5:95:df:fc:95:8e:74:77:11:d9:0d:58:
81:94:46:3c:81:f7:32:ef:f1:f8:75:59:e3:d4:0e:e2:ac:30:
87:63:df:4a:5d:56:d7:67:7c:b4:e5:c2:e4:b9:58:00:90:15:
ad:9a:63:4f:f7:79:a0:06:9c:f5:d5:ad:69:1c:8f:d4:56:40:
ea:a4:46:58:00:d0:e4:38:3f:fa:de:87:82:58:7c:2c:de:2d:
ba:93:65:22:d3:12:ad:56:66:e6:37:13:cd:74:d1:3d:bc:04:
8e:12:4a:c5:48:8b:d4:38:96:6a:ca:04:0b:35:11:39:76:8e:
cf:98:f9:ce:f2:93:5d:b4:32:c4:e9:47:71:2b:ba:bb:c3:eb:
6b:0e:fc:10:d1:6d:62:28:87:fe:5f:ea:92:6b:b7:6d:fd:eb:
db:ec:cb:d6:39:bd:e5:56:56:f6:61:7b:80:12:a7:9c:82:ab:
ed:c8:cc:f9:31:c3:50:30:c6:90:ca:0e:93:b3:79:f2:b6:27:
ac:4e:c9:8e:ec:e3:3b:8c:d5:ae:b5:f1:65:f8:45:86:3e:fa:
a5:9e:ac:f7:38:e0:f7:32:0b:a1:d7:a5:0a:b3:fb:9f:a7:d5:
1e:ee:8f:b3:e7:e5:00:47:af:70:0b:66:58:05:c9:2f:9f:96:
1d:d6:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:02:19 2025 by rpki-client