Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: NQnhK+LjVuarjFPXZpeoRF5IbJ4DwFlldAuDlia7HyQ=
Subject key identifier: FA:5B:93:59:67:04:02:E5:A4:88:B2:57:56:B7:E9:19:38:35:91:82
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 019644B27F2897001F3F0A970FEB04911BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1487
Signing time: Thu 17 Apr 2025 17:01:10 +0000
Manifest this update: Thu 17 Apr 2025 17:01:10 +0000
Manifest next update: Fri 18 Apr 2025 17:01:10 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: eavKSiN5pi3Eb3x29KOXB7c+9HBh88XALBEuUAJljuM=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:7f:28:97:00:1f:3f:0a:97:0f:eb:04:91:1b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Apr 17 17:01:10 2025 GMT
Not After : Apr 18 17:01:10 2025 GMT
Subject: CN=fa5b9359670402e5a488b25756b7e91938359182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:13:ca:be:16:35:0b:e2:b6:5e:18:c0:25:
d7:a3:da:9c:25:ef:42:e2:22:5f:02:08:4f:b5:f6:
28:c2:43:4d:7f:dc:d2:8c:a1:fa:4e:0d:35:ce:55:
f0:0e:08:c9:07:ce:f0:ee:e4:4c:64:b1:de:c1:6f:
d4:32:8b:5b:da:a3:64:5e:27:e7:ff:2b:75:08:fd:
70:27:3a:ed:60:66:be:bd:5f:f6:b1:d1:da:8a:63:
bf:36:28:8c:0c:87:db:e3:73:f7:ab:66:b1:13:b6:
01:d4:b7:87:a5:f9:43:c8:b4:b8:7b:3d:7d:9e:da:
eb:7f:9f:38:e7:9a:0e:f2:65:58:03:97:ad:49:48:
6d:90:b2:7d:46:98:48:31:51:f8:2c:15:0e:a2:2c:
4e:7a:a4:2e:4f:62:e7:55:89:48:93:2f:ad:e8:15:
d5:7f:24:cb:85:ee:c0:73:27:95:8d:a8:be:2e:03:
0f:1c:36:71:80:40:7b:2c:79:60:83:bc:10:b8:d0:
d1:9f:93:d0:57:f3:bb:fb:69:c5:09:fe:34:9f:0f:
5e:c6:56:00:1b:fe:59:9f:23:44:af:92:bb:45:1c:
24:4c:cb:f0:84:63:9f:b1:c0:a9:78:76:e6:82:59:
ed:ac:fd:97:67:ae:c2:c2:47:a6:31:29:75:e9:0c:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:93:59:67:04:02:E5:A4:88:B2:57:56:B7:E9:19:38:35:91:82
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ca:4b:6b:20:d1:4b:1c:43:9c:5c:f9:33:71:4b:be:1a:4b:
9c:a1:62:50:9c:77:b2:4e:a2:af:44:7e:81:7a:f3:53:85:49:
64:de:54:df:44:57:58:33:f7:2a:31:dd:7a:5b:1e:2e:c0:c0:
e3:f5:20:d4:4d:43:00:fc:da:44:bf:fb:c6:93:a7:2b:4f:db:
e2:95:46:d1:e6:33:f9:a0:86:e4:88:31:c8:3d:04:81:c4:d2:
40:b9:0f:bf:1c:98:d3:62:37:b5:97:81:51:3b:35:8d:c2:00:
6f:68:1c:ea:be:20:67:a3:50:d0:49:c4:5e:5a:a1:9f:71:34:
68:02:8d:da:86:88:13:8a:e2:52:1e:da:9c:ac:0f:ff:45:66:
ca:a8:59:2e:90:99:a5:06:b9:ad:a9:d3:22:2f:bc:af:51:a8:
01:07:a0:6d:c1:d0:5f:42:78:62:78:02:fe:63:b4:9f:1a:eb:
bb:9d:90:dd:a0:48:23:82:13:12:3b:f4:e2:8a:36:5f:77:c9:
39:a4:af:a8:c4:62:bc:21:78:f0:09:ec:67:60:0e:91:4a:8d:
da:25:1a:c2:b2:30:ba:d3:54:7f:53:db:61:b0:70:72:0e:38:
c9:b1:da:cf:33:d2:2e:7e:55:7e:8a:9f:87:70:46:b6:96:ba:
b8:81:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:36 2025 by rpki-client