Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: /i7awDvlOLKy/ipVbN9otCJ6DQLePi1jbC3dqFtDV9M=
Subject key identifier: ED:43:18:6B:2B:86:F7:89:22:F4:23:C2:44:3D:36:D7:A0:60:B6:BF
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 01964D7ED558CE301E9841243C5EDB427E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 10:01:19 +0000
Manifest this update: Sat 19 Apr 2025 10:01:19 +0000
Manifest next update: Sun 20 Apr 2025 10:01:19 +0000
Files and hashes: 1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: fLjShG6UXAy3iRhtFvdCancw7PKNUL9PS9+BoJH8ApY=)
2: oaiKe9BUmU6ux91XLaQvZC7XqN0.roa (hash: uC3IsodMVYaUiVMHtDRZahUGbsjXFHZTUvnA/e2zbi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:d5:58:ce:30:1e:98:41:24:3c:5e:db:42:7e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Apr 19 10:01:19 2025 GMT
Not After : Apr 20 10:01:19 2025 GMT
Subject: CN=ed43186b2b86f78922f423c2443d36d7a060b6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:26:fa:47:a2:53:b1:08:0e:13:a6:f4:75:
92:c1:62:62:d3:aa:a6:d6:97:03:7d:81:af:95:27:
a1:5f:0b:c1:10:3b:e5:e9:ba:13:d9:3e:66:f2:3f:
06:d5:84:33:39:9e:0e:12:85:ed:73:1b:a9:ca:93:
66:6a:e6:cb:cb:43:34:4d:19:84:56:4f:40:a2:ee:
5c:7d:b7:15:06:0a:17:a5:01:26:71:f9:7c:8e:b6:
b7:11:38:c1:d0:37:c5:81:c1:52:18:ce:b1:5c:d5:
19:d5:2e:f8:fc:9b:43:a8:27:76:90:43:e5:3e:8c:
27:0a:f1:d4:5a:83:62:91:9e:15:de:34:83:90:08:
17:29:1f:e0:d1:1a:cc:dc:9a:15:a9:ef:34:cf:de:
2b:78:25:16:a4:c2:3f:53:ec:85:f6:38:37:f4:14:
68:76:5e:3e:b3:6d:69:09:8d:28:0a:06:ed:d2:de:
95:01:0e:10:a8:14:05:c5:f7:6e:22:49:14:2f:68:
57:e9:ac:d4:05:7d:1a:39:7a:43:62:64:05:ee:a3:
94:e1:df:b3:5c:b6:8f:ca:d0:76:1f:32:0d:cc:39:
43:46:f5:89:35:4f:96:a0:e6:5c:40:21:d0:0b:ec:
23:0f:ad:e4:cb:d4:1e:ba:86:76:64:52:0b:df:38:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:43:18:6B:2B:86:F7:89:22:F4:23:C2:44:3D:36:D7:A0:60:B6:BF
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4b:c0:1d:8b:2b:56:9e:60:da:03:68:38:6b:85:14:7c:fc:
d7:b5:ab:3d:b4:d2:c0:a6:ca:70:b7:12:01:20:24:8a:1d:13:
1a:4c:c4:d7:52:8c:74:92:42:8d:25:7a:80:91:d3:45:8d:4b:
57:f8:b4:cc:53:d7:e6:60:07:33:e5:c2:7a:7c:c5:55:f9:b0:
ce:5f:56:cd:e6:f9:3c:66:70:fa:fd:a7:cf:2d:ca:5b:c2:16:
e9:1b:54:38:39:b3:21:5e:e6:72:71:62:2d:0f:06:f3:73:4a:
eb:85:a8:31:17:d1:02:86:01:64:58:af:42:ec:e0:88:e6:dc:
1c:46:a8:33:b7:84:3a:38:cb:9f:4b:df:cf:97:69:09:e1:6b:
ee:0c:bd:d9:0c:f0:4a:69:11:38:78:25:b9:55:4a:ab:16:e1:
5a:aa:8f:7f:55:e1:b0:9e:dd:c6:aa:d6:c6:41:6a:b3:6d:06:
68:9f:75:ce:48:a8:fd:81:b1:12:8f:83:00:ab:1d:e6:0d:42:
ce:4c:80:55:3a:30:4b:dd:fa:c5:89:0e:57:b2:d1:8a:5c:0a:
00:85:f3:a0:e4:ed:8f:12:a5:7c:84:4d:48:ec:39:ae:85:03:
5c:b6:2d:78:4c:f4:ee:b2:cf:dd:30:8c:d8:76:d8:86:17:34:
27:bb:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:25 2025 by rpki-client