Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
File: HKrZOQiq2NJG62n35mqnDeW9Whc.mft (raw, json)
Hash identifier: Tkk+ZrmIP9Aw1VwuyHy7jX1Z2/zBN5EOxlDUeYxrFYo=
Subject key identifier: D7:15:D8:B3:A7:B7:65:C9:C2:14:EF:73:8D:64:40:7C:1C:1A:7B:B9
Authority key identifier: 1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
Certificate issuer: /CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Certificate serial: 0196440D11FFC9E40E081089D77553817F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
Manifest number: 0BDA
Signing time: Thu 17 Apr 2025 14:00:29 +0000
Manifest this update: Thu 17 Apr 2025 14:00:29 +0000
Manifest next update: Fri 18 Apr 2025 14:00:29 +0000
Files and hashes: 1: HKrZOQiq2NJG62n35mqnDeW9Whc.crl (hash: nSQbs0hOnXd9Mpz843/CIyuVYigWq7hwA1Aw1fEJk3Q=)
2: ackszuiJCTUVf3NL6BGlMWZR6mU.roa (hash: eS/ev9znkjBG3HaRk+tKGqjX3/CUPsNsHqj4Rs2K9+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:11:ff:c9:e4:0e:08:10:89:d7:75:53:81:7f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Validity
Not Before: Apr 17 14:00:29 2025 GMT
Not After : Apr 18 14:00:29 2025 GMT
Subject: CN=d715d8b3a7b765c9c214ef738d64407c1c1a7bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:7b:f7:53:1a:de:90:0e:0e:45:04:82:29:
d9:56:46:09:50:22:d6:59:e6:e3:58:72:56:82:d0:
c8:e3:9d:d5:f4:1a:ef:ce:83:e6:db:25:b2:65:b1:
43:bd:f2:e8:a2:4f:f6:5e:29:9e:7f:c0:de:93:ab:
f8:75:c1:2a:c6:ce:ba:c8:f1:01:a4:43:30:47:e7:
12:84:4b:8c:3e:43:3d:59:50:f6:96:13:04:30:1f:
01:77:71:5f:52:ce:13:83:db:82:de:c8:e6:6d:6b:
74:52:c3:91:4b:07:f2:bf:c8:aa:9a:f7:62:7a:7f:
9a:7c:2d:1c:7a:62:e6:48:6c:98:ba:69:6a:72:67:
ae:2e:52:cf:b5:4f:5e:14:e7:68:49:96:b8:7d:12:
78:16:0e:01:79:2f:17:88:f2:6e:97:2a:1e:9e:82:
6c:6e:2d:42:fd:d8:ae:58:e2:aa:f8:6b:40:10:89:
13:17:ac:2b:51:4f:6d:f3:f3:21:09:b5:3e:80:61:
ad:51:df:f2:50:fe:5c:91:80:ec:66:fd:bc:15:ff:
34:b9:59:8a:72:b0:bf:e3:27:02:df:47:fe:47:26:
64:90:43:d3:02:b2:99:43:14:2f:14:cc:6b:5d:ea:
27:56:46:6c:95:c3:49:60:10:96:b2:f4:a2:d7:48:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:15:D8:B3:A7:B7:65:C9:C2:14:EF:73:8D:64:40:7C:1C:1A:7B:B9
X509v3 Authority Key Identifier:
keyid:1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:1d:59:3f:8f:be:12:0c:c2:7f:b2:4c:d3:56:ab:fa:5a:
71:f8:46:80:c5:0a:27:b6:78:f8:3c:da:67:c9:22:2e:d3:52:
d3:4c:e5:82:79:af:e8:e6:9a:b2:c3:a5:21:10:2d:4c:67:68:
58:89:5c:04:ae:d7:e8:78:bf:69:3b:56:dd:2a:ea:37:fe:43:
0a:ad:53:14:8c:36:02:b0:b1:9b:ad:71:c2:62:30:e3:97:d0:
41:52:e1:1f:2f:96:20:ff:dc:9d:f8:c3:22:65:30:97:95:64:
d4:5f:6b:16:fa:ce:c0:fd:01:e1:2f:03:35:a0:71:a4:05:6b:
a2:b7:03:1f:ab:b6:03:6f:7f:cd:c3:00:d2:c7:d4:87:b0:ba:
ae:53:73:2d:59:e4:8b:e7:d4:9f:96:d2:9c:3c:44:68:de:f8:
17:1e:bb:59:2d:d7:e0:ad:61:83:3d:d4:47:99:d1:fc:ee:d8:
0d:d9:f6:f4:5b:39:97:28:a9:03:99:e9:cb:c1:77:8f:2b:9a:
00:94:7e:82:1e:b7:10:d2:6a:12:97:70:a7:e8:e0:2c:36:a8:
86:b9:d1:48:b5:13:c5:28:4e:f0:82:c8:5a:bd:e6:b6:7e:8b:
b6:28:b3:0f:ca:36:5f:7c:e7:d4:15:93:7a:d0:6d:05:ff:70:
ea:c9:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:16 2025 by rpki-client