Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
File: hyDPLDSRRvabop66wMiCKIEcovE.mft (raw, json)
Hash identifier: VTn3EsHOYHbFO2kFgZfiddtDKV9/adVTxYXAkgmxP5E=
Subject key identifier: 30:9A:45:E2:D9:31:D4:91:3C:7C:3E:2D:47:8C:42:F2:CB:91:1B:BE
Authority key identifier: 87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1
Certificate issuer: /CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
Certificate serial: 01964F6D71FD836ABC947449F30716E07217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
Manifest number: 08C7
Signing time: Sat 19 Apr 2025 19:01:34 +0000
Manifest this update: Sat 19 Apr 2025 19:01:34 +0000
Manifest next update: Sun 20 Apr 2025 19:01:34 +0000
Files and hashes: 1: hyDPLDSRRvabop66wMiCKIEcovE.crl (hash: 6Wzfyxah9bIrSHidlpeoXaR4jcQo0mPTHdLcz1oifXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:71:fd:83:6a:bc:94:74:49:f3:07:16:e0:72:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
Validity
Not Before: Apr 19 19:01:34 2025 GMT
Not After : Apr 20 19:01:34 2025 GMT
Subject: CN=309a45e2d931d4913c7c3e2d478c42f2cb911bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:ac:e7:66:86:56:fd:e4:51:57:35:9a:60:
93:44:89:ce:3d:37:c3:78:b3:8d:ce:e9:de:71:ef:
83:8e:17:a8:54:46:52:84:1d:5d:0c:6b:17:f2:9b:
b3:93:7b:a0:72:a1:78:26:f3:1a:64:48:72:3e:5a:
4d:c8:a5:b2:c1:7d:29:de:cd:23:4d:8f:57:85:8c:
fe:2f:3f:0f:39:0b:a6:d7:cf:eb:b4:fe:da:2f:cf:
17:6c:50:de:a3:6b:dc:95:a0:4b:88:ca:04:ce:36:
1f:84:cb:dc:cd:dc:18:36:32:59:86:c8:f9:18:0d:
6b:61:2b:50:1d:73:79:e0:5e:69:02:69:9e:07:f8:
13:35:ad:44:ed:a1:4c:f2:66:9e:36:1a:0f:f2:00:
50:31:6b:c0:c9:4e:0c:59:f7:70:84:0e:9a:03:fc:
c6:8b:52:73:e7:6d:8a:66:ab:5d:06:9b:db:6d:19:
27:93:04:81:4f:23:7e:6f:91:f4:b2:48:bd:23:3b:
6d:a2:b9:bb:dc:ab:c0:ab:16:c2:5c:a1:7a:29:18:
9b:bf:04:a8:95:af:19:fb:60:e7:da:98:ad:f1:28:
48:5d:58:06:ae:ee:bf:22:b2:1e:c8:40:e5:93:13:
fe:f3:14:f3:c6:c6:68:8a:8a:5b:4a:2f:17:97:f7:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9A:45:E2:D9:31:D4:91:3C:7C:3E:2D:47:8C:42:F2:CB:91:1B:BE
X509v3 Authority Key Identifier:
keyid:87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bd:fb:cc:1c:8a:1f:3d:7b:36:9d:d1:a6:25:11:dd:8f:82:
9e:ef:13:3a:50:ec:5f:f8:3e:05:96:5f:3d:d2:dc:1d:c7:50:
b0:31:12:54:6f:0e:87:b9:00:f2:9e:22:cb:e3:f0:57:5d:28:
26:d6:c7:cd:e6:23:d5:a8:5e:6e:9b:cb:4c:45:c9:62:62:da:
d2:30:27:83:f8:ac:25:62:96:97:01:d6:89:9f:4c:30:3d:4f:
54:76:8a:07:90:a0:8f:b2:ea:61:25:f5:c1:c3:5b:08:ea:b9:
2e:92:b0:1a:c5:24:7f:04:11:0a:7e:95:e8:22:20:37:24:87:
2b:58:b0:dd:01:fd:16:93:a7:66:15:26:f2:6f:c4:dc:3e:6a:
3f:98:79:8a:e1:49:b6:9e:b4:0a:6d:76:cc:32:5e:13:b4:cd:
f4:e9:b3:18:96:8e:b1:f8:97:8f:bb:c1:7e:b0:3d:71:e8:97:
8a:46:ae:79:78:18:9e:6d:fe:72:b6:56:b8:8a:c5:d8:a0:db:
0d:7f:93:99:61:a3:f0:06:e8:d1:3a:47:bc:38:1b:cf:ad:68:
1a:19:d7:fa:84:74:e8:03:29:08:47:60:33:d1:68:7c:21:46:
1d:2b:91:3d:83:84:24:e9:e1:62:16:59:f3:57:21:9f:f0:8d:
90:13:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:32:13 2025 by rpki-client