Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier: 9yg1PB3bFo1mqmH3MQQMVmbp3ESSO203UWov8GbpSrU=
Subject key identifier: 74:9E:D2:B7:F0:81:64:1F:4B:47:11:36:87:80:40:23:F0:ED:32:3A
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 0196515B1800DB4A74C68D2850365642F3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number: 50
Signing time: Sun 20 Apr 2025 04:00:46 +0000
Manifest this update: Sun 20 Apr 2025 04:00:46 +0000
Manifest next update: Mon 21 Apr 2025 04:00:46 +0000
Files and hashes: 1: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: j7msKhJ/jhsVTigMZtulieab1vjktkQhda/Fe4tbt+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:18:00:db:4a:74:c6:8d:28:50:36:56:42:f3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: Apr 20 04:00:46 2025 GMT
Not After : Apr 21 04:00:46 2025 GMT
Subject: CN=749ed2b7f081641f4b47113687804023f0ed323a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:89:02:b3:3a:66:a5:48:b7:7a:25:26:46:
da:1b:1f:64:50:4a:8e:7f:4c:43:6c:55:05:81:50:
f0:0d:d5:65:45:c1:49:4c:67:d9:57:4d:3e:90:bd:
49:b0:e4:c0:04:5f:27:65:19:bd:d7:9f:b3:8f:8b:
5e:c7:40:02:85:23:6a:ee:fc:c0:e3:78:ca:80:9b:
89:ea:6a:df:a3:e3:97:87:8d:4e:d6:23:f7:66:32:
55:8a:c9:3f:2b:e2:da:6a:bc:70:a4:60:db:f9:e5:
60:e0:bb:4f:cb:46:96:7e:6a:78:a9:7b:a6:0c:f0:
a0:bd:53:cd:94:db:b9:88:8b:b4:22:db:fa:22:62:
70:a6:88:8d:b9:be:5a:b6:72:26:6d:40:ef:4b:27:
a2:7f:07:a0:26:1f:2a:95:69:3e:99:48:df:b2:4b:
d4:b2:8d:b1:f3:99:e8:f8:a8:ed:f1:05:a6:44:d2:
0e:08:15:3d:56:ee:42:ac:95:d6:e9:7b:2d:a9:e2:
74:48:df:e1:b8:50:aa:a9:22:b3:cf:f8:f2:5e:49:
91:8e:7a:5e:37:93:66:b9:9a:fe:43:e3:94:f5:06:
cd:59:25:28:99:ca:9a:21:7c:40:6d:48:b4:83:6f:
b5:91:3c:05:a1:43:8a:de:03:dc:28:9b:fe:b2:4a:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9E:D2:B7:F0:81:64:1F:4B:47:11:36:87:80:40:23:F0:ED:32:3A
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:35:09:96:93:b0:73:a3:ef:9c:6b:15:96:e0:fd:e3:f1:30:
c5:c2:ba:7d:3c:73:09:40:0a:34:ba:c8:dd:65:7c:6f:5e:ba:
d8:76:08:f5:b7:c6:1b:ab:6b:9c:29:58:7b:bc:c0:72:50:d1:
86:a7:c1:ec:89:68:b8:19:a8:4d:46:b2:24:97:4f:ac:c5:44:
40:47:ae:d2:df:7e:60:76:90:09:d9:92:fe:38:ec:c9:f1:b8:
e2:1e:2a:a0:cb:f6:0d:0c:81:16:95:de:9a:e3:a8:23:80:2a:
f1:ee:4f:8b:90:ee:a3:9e:84:05:8e:a3:29:f5:53:8f:36:82:
2b:e0:18:5b:89:c1:48:68:ac:be:a3:00:7d:92:66:4d:a7:a1:
89:4f:98:9f:2f:17:f0:1e:f6:f2:21:c0:74:34:96:e9:d8:0d:
1a:2b:fd:0b:ed:9d:ec:22:7d:ad:d4:96:5a:c3:77:f0:14:bb:
38:6b:72:62:46:dd:9d:12:a7:3f:15:32:f8:2c:42:99:f8:4e:
a3:31:13:c5:73:63:fd:f2:b3:46:2b:b7:f3:d5:00:20:52:51:
7b:df:7f:b3:ac:69:1a:9f:a9:26:7d:36:3c:38:a5:f8:43:31:
32:b4:f2:22:ab:58:14:fa:ec:e0:bd:27:fe:e5:bd:42:eb:44:
27:d8:66:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRWxgA20p0xo0oUDZWQvPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTNjZDNkZGU3ODlkMjk0NzkzYWZjZTkzOGE1MzNjMDJi
Yjg0ZDEwHhcNMjUwNDIwMDQwMDQ2WhcNMjUwNDIxMDQwMDQ2WjAzMTEwLwYDVQQD
Eyg3NDllZDJiN2YwODE2NDFmNGI0NzExMzY4NzgwNDAyM2YwZWQzMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ2JArM6ZqVIt3olJkbaGx9kUEqO
f0xDbFUFgVDwDdVlRcFJTGfZV00+kL1JsOTABF8nZRm915+zj4tex0AChSNq7vzA
43jKgJuJ6mrfo+OXh41O1iP3ZjJVisk/K+LaarxwpGDb+eVg4LtPy0aWfmp4qXum
DPCgvVPNlNu5iIu0Itv6ImJwpoiNub5atnImbUDvSyeifwegJh8qlWk+mUjfskvU
so2x85no+Kjt8QWmRNIOCBU9Vu5CrJXW6XstqeJ0SN/huFCqqSKzz/jyXkmRjnpe
N5NmuZr+Q+OU9QbNWSUomcqaIXxAbUi0g2+1kTwFoUOK3gPcKJv+skooowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSe0rfwgWQfS0cRNoeAQCPw7TI6MB8GA1UdIwQY
MBaAFB0TzT3eeJ0pR5OvzpOKUzwCu4TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMt
YTc3Y2FhYzQ2MjVjLzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kMjlhNWYtYTUyYy00Yzc5LTkzMDMtYTc3Y2FhYzQ2MjVj
LzEvSFJQTlBkNTRuU2xIazZfT2s0cFRQQUs3aE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDUJlpOw
c6PvnGsVluD94/EwxcK6fTxzCUAKNLrI3WV8b1662HYI9bfGG6trnClYe7zAclDR
hqfB7IlouBmoTUayJJdPrMVEQEeu0t9+YHaQCdmS/jjsyfG44h4qoMv2DQyBFpXe
muOoI4Aq8e5Pi5Duo56EBY6jKfVTjzaCK+AYW4nBSGisvqMAfZJmTaehiU+Yny8X
8B728iHAdDSW6dgNGiv9C+2d7CJ9rdSWWsN38BS7OGtyYkbdnRKnPxUy+CxCmfhO
ozETxXNj/fKzRiu389UAIFJRe99/s6xpGp+pJn02PDil+EMxMrTyIqtYFPrs4L0n
/uW9QutEJ9hmdQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:14 2025 by rpki-client