Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: TQPnXKLc9pJus1dapRYNqo2mTdORyXJ7/FlGBO7yvZU=
Subject key identifier: 56:3D:DC:16:EC:35:D1:0B:2C:63:4B:F1:A7:2A:32:3C:91:D5:55:F6
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 0196575D3611E7C20E39C1A353B80C833FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 0D5A
Signing time: Mon 21 Apr 2025 08:00:48 +0000
Manifest this update: Mon 21 Apr 2025 08:00:48 +0000
Manifest next update: Tue 22 Apr 2025 08:00:48 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: 8U955WXM9O/XrA3ZvICYZ7MwaTEn1rhcDTgB9IqunXY=)
2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:36:11:e7:c2:0e:39:c1:a3:53:b8:0c:83:3f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Apr 21 08:00:48 2025 GMT
Not After : Apr 22 08:00:48 2025 GMT
Subject: CN=563ddc16ec35d10b2c634bf1a72a323c91d555f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:b9:ab:6b:1d:0d:6d:3a:21:a5:f0:07:35:
c9:33:ac:83:20:6b:78:a2:f8:51:fa:ae:8d:28:91:
63:34:9b:47:20:b9:b1:ee:6d:3b:9b:bf:f6:f8:c4:
cb:46:12:f0:57:77:0a:d1:91:43:77:52:e7:cc:d0:
4d:c3:91:a1:ed:d0:68:1f:5a:33:b3:e7:6e:68:8d:
a1:b7:dd:e5:1a:52:b4:ef:51:2f:aa:b4:9c:b9:d6:
58:9a:b6:ae:39:51:ad:f9:30:31:d3:b7:b9:e3:22:
0f:d6:47:b9:27:dc:f6:4c:9b:bb:25:59:97:14:c0:
4b:81:ef:33:61:fb:02:19:7a:eb:ad:30:e7:a1:17:
b6:58:0f:2b:fc:2c:94:3e:c1:b3:2e:2b:17:8f:e1:
64:46:75:b4:b9:7a:f3:5c:6c:33:bd:5f:83:64:35:
c0:02:09:0e:a1:b8:5c:01:5d:a3:77:8c:f5:b8:7a:
2d:94:4c:9b:da:90:e3:e9:6f:fe:55:3b:0c:51:39:
03:30:15:d8:b6:02:36:ea:64:39:48:1d:94:53:21:
f3:7f:30:38:e6:f9:db:50:7a:6f:c8:c9:ec:1d:0d:
38:4a:89:10:28:c3:32:6c:17:bd:66:e1:c5:ae:8c:
e7:c2:3c:0f:18:76:05:e5:f4:03:77:b8:55:1f:e5:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3D:DC:16:EC:35:D1:0B:2C:63:4B:F1:A7:2A:32:3C:91:D5:55:F6
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:60:77:eb:fe:c8:f4:0d:23:4f:66:57:d4:44:1f:be:0d:4a:
78:5a:09:a2:c6:e8:e6:fd:ed:a2:22:c1:a0:32:87:aa:98:ea:
a1:53:9b:9a:b1:f8:0e:2d:a0:3f:9d:79:22:c4:2f:cc:77:4a:
cd:b5:8b:5e:8d:c0:7a:f8:5f:68:d6:ea:78:e2:6a:f6:cb:22:
8b:41:e2:70:6f:c0:ec:b7:cc:0b:11:e5:58:6c:87:a7:57:2a:
45:24:9e:16:e5:f6:aa:09:7f:78:fe:65:ab:b4:b6:2e:89:e3:
74:5c:8e:3c:3a:af:9e:c6:62:08:ac:90:2b:2b:52:f7:26:ee:
23:db:76:9a:24:b4:1c:25:ef:60:d9:bf:96:76:bb:ee:75:6f:
72:c7:f2:f7:8d:05:06:9c:e6:51:27:97:9e:5d:d7:9d:1e:48:
d6:da:b7:07:ec:b8:9e:bd:58:7e:e1:c7:77:3d:9e:47:d7:4c:
4b:ba:49:56:79:d5:cd:1b:5d:2a:ed:cd:78:8a:e7:db:3c:1d:
a0:de:1d:2b:a5:39:c1:b1:4d:e2:8e:b8:7c:6e:95:46:3c:89:
26:32:dc:3e:2a:fc:8b:a5:b4:dc:90:e8:08:ba:d8:ff:e7:33:
99:bf:61:fc:6f:2d:4d:e4:15:df:93:41:41:78:d8:7b:32:81:
af:af:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:21 2025 by rpki-client