Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: gfNApmnEMZlZHr/VBM1uS7I7+BN1Twwy04Ar/FvhmEs=
Subject key identifier: F7:E8:1D:9A:6F:7F:CB:64:9C:1C:33:50:AE:D8:18:AE:98:BE:A8:3C
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019653B7DB2C7B380E59270BB6DA47857650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 04BD
Signing time: Sun 20 Apr 2025 15:01:20 +0000
Manifest this update: Sun 20 Apr 2025 15:01:20 +0000
Manifest next update: Mon 21 Apr 2025 15:01:20 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: aKEHeh9Hj6YN7GkWWDKCXm2R3sx/7wg3eVG5MRsFsBg=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:db:2c:7b:38:0e:59:27:0b:b6:da:47:85:76:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Apr 20 15:01:20 2025 GMT
Not After : Apr 21 15:01:20 2025 GMT
Subject: CN=f7e81d9a6f7fcb649c1c3350aed818ae98bea83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:f0:e7:1a:9b:0a:29:92:0e:6b:75:eb:f5:
f2:0e:9e:46:6d:30:9c:14:9e:28:68:5b:d6:f5:55:
fa:50:87:4e:c2:fb:af:cc:01:98:3e:58:25:04:53:
03:e5:e3:4c:fa:4e:b9:34:d2:1a:4d:c2:ed:02:b4:
23:23:3e:73:7f:42:8a:af:5d:63:4b:e4:44:27:ea:
5f:41:2a:88:77:41:16:9f:d6:22:91:56:1c:8b:56:
0c:60:52:e8:f8:da:38:47:14:12:8d:ad:19:dd:b6:
8a:12:08:79:b8:db:dd:f0:03:9e:d2:bb:0a:71:b4:
e0:69:35:39:58:d3:32:29:c3:9b:a4:f2:61:d7:dd:
6d:e4:0e:de:a8:3b:8b:10:05:36:f6:de:b9:c4:fd:
4e:c6:48:dd:a5:ae:95:87:d0:63:ee:58:2d:33:d7:
7f:0e:95:64:21:2d:9a:9c:0e:1e:7b:f9:0d:62:c8:
d9:9c:bd:3b:38:00:71:00:14:0a:52:4c:1e:5d:01:
24:b4:98:1d:6f:57:d1:ab:53:1a:54:a7:b8:21:82:
74:21:17:2b:d8:00:1e:07:21:53:f5:59:e4:7f:5b:
e8:49:77:fe:14:33:af:ad:ed:1d:2e:0a:f9:27:f2:
56:2c:6f:b1:78:50:70:08:fa:a4:d7:a9:30:f0:ac:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E8:1D:9A:6F:7F:CB:64:9C:1C:33:50:AE:D8:18:AE:98:BE:A8:3C
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:af:f2:dd:4f:a4:d0:b9:36:77:26:15:63:e2:77:1b:1c:f1:
e8:16:4e:40:79:ca:55:ca:e8:bb:55:fb:1d:4b:20:7a:95:13:
14:ef:18:4a:13:cf:78:fc:d5:15:2c:d4:28:8d:bc:51:0f:88:
25:0d:5d:fb:6c:d2:7f:6f:cb:f6:d3:ba:dc:65:c8:8c:67:23:
d3:09:c3:8c:5f:f4:11:50:ce:43:48:63:96:16:91:d2:52:de:
bd:4c:8f:93:89:1d:83:18:d8:a1:25:eb:ae:cb:fa:7b:dd:0b:
f4:3f:2d:24:b4:6d:4f:99:20:c1:a2:f8:1c:cc:f7:68:1d:eb:
c0:c1:73:74:f0:c1:f3:90:41:87:a4:72:d2:11:f2:9a:79:60:
0e:f3:73:a9:49:6b:65:01:2f:77:c1:dd:85:42:55:d6:99:35:
bf:f6:f5:38:f3:a9:92:1a:33:97:90:29:8c:3a:ff:ba:11:ea:
b2:9d:72:6c:ce:95:b3:e8:c4:f6:88:fb:8b:58:1e:e8:cb:84:
f4:ce:f1:b2:2a:3b:d9:4c:50:f3:00:a1:bd:a9:48:c7:c4:dd:
ad:0c:92:17:cc:81:f6:cf:3d:de:c6:6a:74:78:eb:9f:41:ea:
94:61:fa:53:a4:47:dd:3d:c5:6d:aa:af:d0:34:e0:8e:b9:54:
30:22:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:41:00 2025 by rpki-client