Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: RXZ1XN6VR8NyKri4NC2A3kWP5xka8Xw0NBmdVepQREA=
Subject key identifier: 8E:D2:2A:65:AD:C9:2E:C1:DF:FA:E6:37:E8:56:E0:7D:72:D5:53:F6
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 01961ADA4116E1230BCF296E79C435E0F220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 0B88
Signing time: Wed 09 Apr 2025 14:00:33 +0000
Manifest this update: Wed 09 Apr 2025 14:00:33 +0000
Manifest next update: Thu 10 Apr 2025 14:00:33 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: FR2aL7f8wuSNInOYKpXDi/EuZ9e49DIEdTRn1qSWtAs=)
2: Z51tk-_RA8tS0qKG579XKDThD1k.roa (hash: jrw3DdxxDeKhPMS6oVcqpTg9EmGuyht4s1KNeKcKW/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:da:41:16:e1:23:0b:cf:29:6e:79:c4:35:e0:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Apr 9 14:00:33 2025 GMT
Not After : Apr 10 14:00:33 2025 GMT
Subject: CN=8ed22a65adc92ec1dffae637e856e07d72d553f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:cd:32:37:c9:f9:e0:2f:21:2d:7d:72:7d:
5a:4e:3c:c2:63:06:63:02:32:f2:b7:f9:95:bb:72:
7b:27:66:f4:aa:77:87:b8:13:83:73:17:50:58:27:
1c:40:c2:6f:62:c6:da:c1:4d:f5:0a:5d:41:ab:ee:
d9:e9:dc:62:48:19:fb:27:b2:34:7e:83:3e:3c:9b:
76:4f:45:10:80:0c:36:6c:0c:2a:bf:bb:f6:9a:ee:
80:d2:1f:b0:36:c1:7f:72:76:d1:0e:fb:a6:c5:c7:
49:5c:46:cf:8d:f2:f4:98:49:ae:d1:00:42:0f:66:
fa:4f:e0:57:29:98:95:4a:fe:0a:a9:3b:d5:e5:63:
bd:ac:8e:25:18:42:7a:e0:db:04:00:6e:cc:2c:a7:
25:d8:8a:dd:fd:f6:d5:8a:47:0a:99:99:5d:03:25:
7c:63:3c:85:f3:90:95:df:1e:ad:4c:15:85:0b:ab:
a7:07:bc:81:93:ce:df:29:66:45:27:a3:ae:2d:ee:
67:ff:23:e8:cc:aa:a5:1e:c6:dd:56:d4:18:25:3d:
f4:d3:eb:cc:59:ae:9e:23:a4:cc:18:08:1d:39:c1:
28:5d:ef:68:f1:a1:8c:ac:0f:86:bb:63:0b:19:b0:
52:8f:a1:14:c2:66:ec:0c:28:62:ea:81:48:63:c1:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D2:2A:65:AD:C9:2E:C1:DF:FA:E6:37:E8:56:E0:7D:72:D5:53:F6
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:da:29:24:fd:8f:5e:dc:aa:bb:aa:57:78:49:aa:4c:41:66:
b6:94:f0:76:b0:a2:8f:0d:97:20:67:e9:af:42:51:77:09:e7:
ab:2c:43:b4:0f:3a:ef:b2:55:a1:db:2e:ec:07:88:13:15:67:
b7:c9:a1:5d:d1:8d:65:8e:ea:0d:43:fe:0c:bd:2e:00:c7:2f:
1d:18:7d:5f:8a:a6:58:de:36:84:4a:99:4b:73:0f:54:03:c4:
37:7d:d4:ab:d5:7d:90:f8:0e:f7:63:02:2c:4f:37:7f:1d:bb:
88:68:82:2f:0f:66:88:81:0a:c4:6f:63:5d:ba:c2:c0:74:2e:
ba:31:d1:1d:e9:7e:88:64:30:8c:e6:59:04:5d:d6:fd:6e:33:
53:43:89:fb:41:48:54:de:6f:47:4d:2d:ff:70:d0:01:9a:36:
2f:42:d7:cb:02:52:fe:28:4b:c1:58:8a:9f:42:43:4c:28:10:
c9:ad:0e:71:5e:7b:7f:ca:b7:5b:f7:f1:23:f9:a8:64:5d:39:
db:7c:2e:a1:07:ac:f4:79:3d:8b:59:10:9a:5c:ff:2e:7c:4c:
34:a8:cc:04:06:ad:30:3d:21:a0:25:8d:18:51:db:ff:d5:c7:
d7:2f:f0:5c:a5:e9:d3:ef:67:75:95:f7:84:e3:9e:b8:37:9b:
cf:73:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:23:55 2025 by rpki-client