Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
File: hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft (raw, json)
Hash identifier: 0a156dEd5LiFRzIiwPnmolIcX6T/4wbGeX+bi+E81Z4=
Subject key identifier: F6:D3:49:EB:A2:D2:3B:BD:E2:D3:31:CA:CE:F0:DF:E1:F2:77:4A:10
Authority key identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
Certificate issuer: /CN=8618b054d20dfdc9c5493c52c86234774904be77
Certificate serial: 019643D6CE5FD8E06C15FC5C2A901EEC52E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
Manifest number: 14F2
Signing time: Thu 17 Apr 2025 13:01:13 +0000
Manifest this update: Thu 17 Apr 2025 13:01:13 +0000
Manifest next update: Fri 18 Apr 2025 13:01:13 +0000
Files and hashes: 1: hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl (hash: 7tvuZsvw1w7DoGzx3ctQDxX2B44JekXRK0XLw9oD3+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:ce:5f:d8:e0:6c:15:fc:5c:2a:90:1e:ec:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618b054d20dfdc9c5493c52c86234774904be77
Validity
Not Before: Apr 17 13:01:13 2025 GMT
Not After : Apr 18 13:01:13 2025 GMT
Subject: CN=f6d349eba2d23bbde2d331cacef0dfe1f2774a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:22:ee:8e:8e:55:59:2a:d9:9b:5b:08:f4:
1f:82:66:a9:7c:3f:3b:bd:a3:96:eb:8e:6c:79:db:
f0:ee:ab:d5:10:37:51:88:b6:5e:00:8f:e4:15:b2:
d6:88:dc:3e:d9:d3:74:7f:d2:a4:78:d0:6a:4e:aa:
ea:5f:47:8b:b2:b8:ea:b8:67:90:fa:d6:a5:2c:f8:
6f:a6:84:4f:14:78:4a:60:ef:42:fa:7f:b6:73:70:
5c:ff:c4:1c:65:f8:04:86:42:fe:fe:60:2c:e0:05:
2f:ec:0a:9a:4b:09:ad:d7:74:f1:83:57:4a:00:70:
5e:af:8a:78:46:79:fc:40:f4:32:9e:65:63:30:73:
2c:6b:2e:2a:a6:5b:48:62:a5:94:cf:81:e1:12:c8:
6a:23:cb:23:0f:75:96:e9:4a:a7:90:24:7b:1c:ac:
0c:d4:b3:b8:f1:63:ad:cd:ed:b6:dc:5f:bf:1f:c7:
51:ce:b9:62:11:0f:bb:c1:26:db:81:53:c5:c8:f2:
03:1e:7b:66:e4:17:29:f7:e0:73:7b:12:71:14:79:
e2:0d:6f:26:42:75:c0:2a:b6:28:77:c8:fd:9b:29:
bf:e1:db:1d:82:ec:51:d8:5c:b7:93:43:f5:ad:34:
ff:95:39:d7:42:71:d8:2e:a1:fe:98:1a:27:f6:35:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D3:49:EB:A2:D2:3B:BD:E2:D3:31:CA:CE:F0:DF:E1:F2:77:4A:10
X509v3 Authority Key Identifier:
keyid:86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:44:5a:4b:67:62:f2:08:25:c4:9d:dc:ec:81:9b:91:cc:f2:
a2:9c:00:7e:26:b8:38:48:07:9f:c6:4c:31:b4:a9:4b:c7:9f:
4a:47:b2:73:5d:d5:48:d2:2c:4d:c9:ff:c4:3c:28:b9:cb:cb:
e0:b0:e9:43:2a:8e:db:ff:68:93:99:03:6d:9d:8a:37:52:ad:
2f:b7:ac:84:48:a7:a6:66:94:fa:38:1e:28:a5:7a:e4:ef:f2:
c3:02:85:eb:80:2b:d9:ab:df:35:e5:db:9e:95:97:63:41:47:
94:81:78:fb:0c:d3:5d:21:c0:8c:55:4b:5b:2a:39:c4:e9:ea:
e1:25:64:dd:bd:d3:d3:a0:72:b0:f6:27:06:4f:9f:0a:0e:ca:
15:18:82:03:83:cc:e1:c0:f8:d9:b8:dd:9f:03:52:7b:d6:46:
34:c7:3d:3c:62:61:e3:53:1a:af:64:62:9d:b0:76:3d:45:51:
2c:4e:3b:44:b9:00:e9:a7:91:b1:04:05:f9:53:7d:b8:9e:9c:
c8:f3:24:3a:f2:aa:2b:c9:9b:34:7e:db:d6:e5:8c:16:fc:71:
cd:22:5e:f5:79:99:e8:1e:ac:90:a7:5f:b9:7a:6b:c2:84:4e:
b5:80:de:0f:10:b7:53:a2:3b:71:d5:31:7a:b3:c6:ae:10:ff:
ae:62:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:26:36 2025 by rpki-client