Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
File: HbvT4bzmclG1jybP0l_UAVZBZgM.mft (raw, json)
Hash identifier: F05R0GF6yaclBMlbgRhLw4J3UXIzT5O1P1Bql8GJmc8=
Subject key identifier: 85:9C:FA:AE:0F:35:86:D6:17:2B:F3:ED:42:33:91:03:10:4D:33:E4
Authority key identifier: 1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
Certificate issuer: /CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Certificate serial: 01964B8F6A94F0025E77BA4C085A61C3BD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
Manifest number: 14F5
Signing time: Sat 19 Apr 2025 01:00:11 +0000
Manifest this update: Sat 19 Apr 2025 01:00:11 +0000
Manifest next update: Sun 20 Apr 2025 01:00:11 +0000
Files and hashes: 1: HbvT4bzmclG1jybP0l_UAVZBZgM.crl (hash: oslIKd4pJqijsSLStX5HZtJ3PyBFWRHFXK8q1T5MewM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:6a:94:f0:02:5e:77:ba:4c:08:5a:61:c3:bd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbd3e1bce67251b58f26cfd25fd40156416603
Validity
Not Before: Apr 19 01:00:11 2025 GMT
Not After : Apr 20 01:00:11 2025 GMT
Subject: CN=859cfaae0f3586d6172bf3ed42339103104d33e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:0d:21:dd:b9:05:ee:3c:ea:bb:fc:09:4c:
3b:14:ec:9c:a3:ab:66:d3:21:33:b8:ca:b7:37:55:
be:c4:94:57:5f:f2:a5:5e:1e:5e:bb:f8:0b:99:f2:
a5:ef:ea:12:22:2e:4c:00:b9:48:ec:44:91:65:42:
6f:bd:41:2a:a1:e9:1d:c8:60:ad:28:dc:fe:7d:0f:
33:36:d1:e8:4d:9d:a0:95:58:3a:de:21:f7:ed:43:
a9:14:61:a8:d9:5a:83:68:02:3e:1a:90:7e:a4:03:
12:67:50:03:52:ea:9e:62:48:8c:a2:c3:f1:eb:14:
fe:9a:44:34:52:48:f7:ac:16:50:01:a3:25:b5:57:
08:35:c9:ac:8d:41:d8:fb:18:2c:6e:9a:92:6a:19:
f1:b4:49:9d:f4:b3:72:81:21:a5:77:77:95:aa:1a:
fe:89:1f:ec:2c:86:fe:e7:eb:cb:28:35:98:69:db:
e6:29:e1:2c:33:66:a9:20:69:ae:f5:7a:9d:5e:8b:
12:70:53:c5:f9:0f:17:f3:f7:2c:e2:45:15:8d:7f:
52:b8:e9:59:bf:4b:33:2c:23:3c:5d:1f:f1:32:45:
7a:87:cf:90:4b:81:cb:c7:bb:4f:30:6b:63:b0:68:
6c:1d:f0:7b:c5:d2:0e:09:17:ff:3f:64:1b:fb:11:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:FA:AE:0F:35:86:D6:17:2B:F3:ED:42:33:91:03:10:4D:33:E4
X509v3 Authority Key Identifier:
keyid:1D:BB:D3:E1:BC:E6:72:51:B5:8F:26:CF:D2:5F:D4:01:56:41:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbvT4bzmclG1jybP0l_UAVZBZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0c0a69-6705-426c-9e70-cf8b01f6ef17/1/HbvT4bzmclG1jybP0l_UAVZBZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9d:b7:c1:6c:ac:ef:78:cb:60:f3:f5:de:da:00:00:cb:ad:
e4:6c:4c:38:47:42:26:be:02:ba:6e:77:8f:04:93:1c:33:19:
91:8d:ec:2d:12:a3:e9:a2:14:11:7f:70:73:ff:4b:92:65:88:
8b:d9:73:cf:28:45:0d:7a:ed:e0:ee:20:00:db:b0:0c:39:53:
5e:97:68:ad:4a:25:12:29:52:83:44:dc:10:22:25:e1:a1:a0:
07:ad:6c:85:7c:06:33:ea:63:22:af:e3:5f:0d:bc:a5:c1:02:
bb:b3:ab:dd:39:ef:9d:ed:49:85:57:9a:7a:35:c3:40:c9:c2:
f4:60:3f:85:5b:e8:f4:2e:17:37:3d:03:00:13:19:56:cd:f4:
1a:64:ca:29:3d:a7:c7:6a:7a:30:13:d1:ba:5c:6f:67:f3:1d:
b2:4e:e9:9c:2e:d9:89:ef:07:17:c4:19:73:94:d2:75:ac:22:
7d:9a:e5:3b:af:e9:62:8f:3c:8b:9a:90:96:4d:2a:8a:0e:60:
2f:e6:16:62:ee:23:7f:5f:b2:46:d9:1e:58:cf:c1:22:fe:b3:
63:61:e8:c2:f5:8a:41:63:71:d1:b5:fe:a6:1e:06:6a:db:3a:
3e:3d:0a:1e:dd:67:6f:3b:57:54:60:c3:52:04:d0:d5:f2:58:
2f:ce:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:50:35 2025 by rpki-client