Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File: Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier: toJubA8jgyXvkq3es+3sXXILCm6fewpaNIILc/pjLGM=
Subject key identifier: 2C:4C:95:16:E1:53:B6:F7:70:EF:82:CE:9A:C4:FC:75:A6:3E:EF:C8
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer: /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial: 019655374FE7BDE82C5300B1872497948CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number: 0B03
Signing time: Sun 20 Apr 2025 22:00:10 +0000
Manifest this update: Sun 20 Apr 2025 22:00:10 +0000
Manifest next update: Mon 21 Apr 2025 22:00:10 +0000
Files and hashes: 1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: YB9xAj1GEwdzP86AwF+hA5pKkYYP3D20RvC++6taDAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:4f:e7:bd:e8:2c:53:00:b1:87:24:97:94:8c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Validity
Not Before: Apr 20 22:00:10 2025 GMT
Not After : Apr 21 22:00:10 2025 GMT
Subject: CN=2c4c9516e153b6f770ef82ce9ac4fc75a63eefc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:62:83:17:77:75:9c:f4:9e:36:67:a4:ae:
e9:f3:8f:16:30:2b:71:ae:67:68:55:f9:78:f1:84:
59:b9:90:b6:a6:12:70:da:18:55:e2:3e:60:b6:0a:
b3:49:4b:68:34:92:23:02:86:c2:5d:00:17:3c:6e:
85:04:1f:e5:fa:e4:29:88:88:fc:ce:49:03:e1:e7:
fc:4d:4a:cd:3d:23:98:d5:96:32:92:e1:b8:df:e1:
b1:d9:5b:80:76:75:fc:0b:24:49:e0:18:a6:fb:42:
16:eb:aa:b1:f2:28:8a:c9:4c:60:95:a4:b2:a2:9e:
a3:33:fb:2a:48:c9:ed:7f:db:8a:18:58:a0:80:fe:
b0:a9:7b:80:54:c2:a9:a2:f6:a7:b8:7d:27:f6:e5:
30:ee:fe:27:ae:40:f7:41:a9:6b:72:e2:69:57:c3:
70:54:26:f5:ca:91:5d:16:61:34:5a:15:1d:c8:31:
b2:25:ed:b8:d9:be:e3:4d:f6:96:99:9e:22:75:c1:
70:db:0c:62:4f:b9:4f:0b:cc:67:3a:af:47:ee:c9:
89:ed:c4:f1:53:5e:89:a6:ad:7c:7f:d5:48:0c:5e:
ef:c2:87:cb:64:db:a4:35:47:36:1f:39:d6:76:5c:
4e:45:d8:0c:fc:76:33:bc:83:1f:c6:a4:ed:e7:77:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4C:95:16:E1:53:B6:F7:70:EF:82:CE:9A:C4:FC:75:A6:3E:EF:C8
X509v3 Authority Key Identifier:
keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3e:f7:c1:65:11:c7:f1:6f:17:b9:77:1b:bb:5b:8c:a6:97:
28:a2:71:20:53:f2:9f:3d:a1:92:c4:be:19:40:3d:a3:3e:cd:
51:e8:6a:92:45:00:63:6e:9c:0e:c4:16:80:6f:7c:e1:4f:50:
45:5a:cf:52:eb:f5:df:f7:d0:dc:df:71:99:0a:19:4a:96:7b:
0e:03:13:d0:18:5a:77:0c:4c:47:1d:96:b8:d9:17:09:85:8e:
fb:d5:27:34:58:e0:45:0f:b3:67:17:6d:79:61:bb:3d:d2:1c:
95:60:2c:0b:c4:b2:01:9e:4e:5a:1b:c6:8b:fa:de:9a:d1:13:
9b:0e:23:af:f8:51:0b:2c:c0:49:f0:8e:59:56:e0:05:18:9e:
88:22:3a:35:db:c1:b2:a8:62:c9:7f:e0:e5:4b:da:cf:ec:98:
73:6c:8f:66:92:88:25:a0:f1:d3:af:91:cc:76:ec:0b:45:f2:
43:3d:18:5b:91:f5:cf:fc:58:ba:a6:b3:c6:9c:9d:21:fa:12:
25:e8:15:cd:ca:43:35:14:59:9f:f2:54:f7:5e:b1:0f:d4:11:
57:f1:b4:00:25:48:0a:c4:e1:5e:8f:91:1a:d3:59:3d:14:a9:
39:81:a0:d7:a4:7c:1a:ec:10:45:43:f6:99:63:92:e6:d9:cb:
65:10:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:47 2025 by rpki-client