Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
File: hUxfKY2BrMVXP9WfsF3YbyCry6g.mft (raw, json)
Hash identifier: CGk+TKvOufQCoCS2YDOBF529iAWcxQG9BFjJroKgGcU=
Subject key identifier: 45:33:53:FF:99:6F:88:8A:03:E9:85:F8:55:4F:89:8D:C2:20:95:F2
Authority key identifier: 85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
Certificate issuer: /CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Certificate serial: 019510C7D4DF8825872850FAA519947D3661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
Manifest number: 0ED4
Signing time: Sun 16 Feb 2025 22:01:26 +0000
Manifest this update: Sun 16 Feb 2025 22:01:26 +0000
Manifest next update: Mon 17 Feb 2025 22:01:26 +0000
Files and hashes: 1: hUxfKY2BrMVXP9WfsF3YbyCry6g.crl (hash: cHsM2Wc9o3M3u7Vi/x1h9Hg9viohn20cLihTT0GFxlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d4:df:88:25:87:28:50:fa:a5:19:94:7d:36:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Validity
Not Before: Feb 16 22:01:26 2025 GMT
Not After : Feb 17 22:01:26 2025 GMT
Subject: CN=453353ff996f888a03e985f8554f898dc22095f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:b6:ad:4a:08:86:2a:51:2e:8c:1f:3e:87:
f8:ad:f8:81:4d:cd:23:bd:d0:50:c8:a5:16:d5:7a:
dc:6d:73:2f:51:d3:7c:5d:34:6a:7f:70:27:16:d0:
0d:db:f3:78:c9:81:f5:b0:9b:69:2c:47:92:04:d2:
da:24:28:64:b0:ec:80:a4:c9:d9:4a:85:cc:b6:27:
2c:ca:b7:b5:ed:2b:71:7e:c7:a3:38:6e:19:fe:52:
88:71:0b:a7:70:9a:d2:27:b3:36:f4:fc:00:9b:6b:
3c:33:9b:58:bd:69:1a:80:08:10:88:9b:ac:ea:03:
f4:7e:9a:23:e0:4c:3a:58:f7:9d:fd:02:fb:d9:ea:
f7:b3:3d:74:74:28:d1:ea:3a:a0:85:bb:61:1e:21:
a1:44:b8:f5:e7:fb:7e:4f:a3:92:a6:98:1e:6c:2f:
9b:4c:b2:b9:7b:54:81:bf:be:6a:83:9c:2f:49:db:
77:1a:f3:73:fe:a9:fa:f1:fa:af:d2:e4:85:f3:84:
f0:50:01:52:a8:19:68:78:6c:02:a3:59:fe:eb:bb:
05:bb:0f:2a:a8:8e:23:7d:dd:9c:84:6c:75:cb:8f:
15:41:09:e4:60:6f:ac:b3:f8:4a:d3:76:0f:e3:f0:
1e:1d:16:43:15:35:e8:45:81:db:d8:68:b1:ca:88:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:53:FF:99:6F:88:8A:03:E9:85:F8:55:4F:89:8D:C2:20:95:F2
X509v3 Authority Key Identifier:
keyid:85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ea:33:97:e9:1a:d8:bb:09:6d:38:24:4f:df:21:bc:7e:66:
2e:c7:cb:5e:83:31:e7:76:a8:44:5d:e5:bf:39:a7:28:88:fe:
ee:79:14:14:d1:02:84:64:0c:08:82:c4:43:b2:2a:b5:41:16:
11:99:a2:83:b3:48:da:2d:d4:80:5d:c3:08:d6:fe:74:c4:09:
c5:fd:63:a2:39:de:ba:9d:ef:aa:b1:36:95:32:22:39:00:07:
d1:d6:ee:d2:94:98:ed:22:1e:0d:ba:d4:39:39:80:cd:0b:d6:
d6:51:28:3d:71:5a:eb:ce:2b:65:47:1e:69:de:02:0b:84:27:
4d:b1:2e:64:fe:37:6b:9d:5a:e8:1f:10:6b:90:c7:88:a3:2f:
a1:06:1c:b5:3c:2c:36:a1:15:16:56:85:b2:96:f2:66:48:a5:
f9:17:7a:67:e2:d4:86:98:fa:cf:d6:04:86:a3:26:7c:4f:1d:
07:d2:7f:9a:c1:e9:04:64:44:31:0d:97:de:47:75:72:d0:1a:
3b:3d:a7:17:db:d9:d4:25:f9:fa:3f:61:52:52:a2:e7:92:87:
5c:1a:6c:de:05:dc:3b:e5:77:00:28:1d:e6:07:22:9e:7a:bb:
7a:65:ae:6a:6e:e7:08:5e:c6:fc:7c:b2:ab:63:ae:ca:69:24:
62:a3:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:33 2025 by rpki-client