Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
File: HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json)
Hash identifier: OkDA30dCplyWoDZ5A9P44aCkW1VUKTzNLW6hrOAHJvg=
Subject key identifier: 16:D8:A3:CC:09:E6:C6:CD:1A:1E:D1:2C:11:32:17:D2:F0:64:9E:72
Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
Certificate issuer: /CN=1c237b6883697912957f8d3373702bc906d26445
Certificate serial: 019640679260B1A558542BDD843A3359779D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
Manifest number: 110A
Signing time: Wed 16 Apr 2025 21:00:51 +0000
Manifest this update: Wed 16 Apr 2025 21:00:51 +0000
Manifest next update: Thu 17 Apr 2025 21:00:51 +0000
Files and hashes: 1: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: xa9VZ12UrEz5MHs9gfvRlJrbBEEzHcjVPGddkYQXpyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:92:60:b1:a5:58:54:2b:dd:84:3a:33:59:77:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c237b6883697912957f8d3373702bc906d26445
Validity
Not Before: Apr 16 21:00:51 2025 GMT
Not After : Apr 17 21:00:51 2025 GMT
Subject: CN=16d8a3cc09e6c6cd1a1ed12c113217d2f0649e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:6c:0a:df:4a:27:81:8d:b4:27:f5:4e:e6:
a1:7b:d5:f0:3a:0b:02:e4:b7:c0:58:39:8a:1e:70:
df:71:8f:6f:c2:8a:7c:45:dc:be:2b:b8:74:85:8e:
c0:8a:73:52:f8:89:64:09:a9:28:c5:d9:b6:86:b7:
d4:f8:27:fb:97:4c:24:6c:a8:e7:41:87:cf:2b:b8:
f7:f6:8d:7b:26:2e:4c:27:63:78:04:10:e3:39:4c:
b1:a1:02:42:0d:a9:44:8e:3e:a8:d1:2b:cc:21:8d:
05:e5:c3:4a:0f:1a:da:fe:e6:af:c2:a1:ea:52:5f:
1d:cd:57:19:46:59:0e:2d:4e:1e:7d:ff:ae:41:a0:
25:89:68:30:9f:c1:ce:b0:c0:06:4c:59:c8:7a:29:
e4:d6:b4:d8:49:8c:17:21:e9:7b:aa:35:d8:43:f8:
ea:4d:75:d8:ac:e3:cf:af:f9:9d:c6:4d:08:d5:87:
b9:61:57:56:0d:54:32:e8:e2:32:93:80:ad:42:41:
e6:27:80:39:ff:f2:57:c5:8d:34:ec:dd:bc:c3:84:
4b:52:2f:3b:d4:36:5d:d3:b8:96:6f:e1:75:5c:5f:
8a:4f:5f:29:8d:4b:1d:a4:07:5e:6b:81:34:3e:9e:
f7:ea:f2:77:0d:95:3b:a6:fa:ab:55:73:91:f6:28:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D8:A3:CC:09:E6:C6:CD:1A:1E:D1:2C:11:32:17:D2:F0:64:9E:72
X509v3 Authority Key Identifier:
keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d1:2b:eb:45:66:fd:d9:ca:04:6b:17:f3:4e:12:4d:3f:1a:
d0:02:2f:63:d6:af:be:dc:8f:db:55:70:0c:3c:2c:f7:12:c0:
1c:cc:fe:39:b6:9d:e7:9b:f5:32:4f:02:b1:c5:9b:ad:da:6b:
33:f0:4f:50:99:c0:a9:ab:f8:8d:c6:7e:ef:ab:76:7f:08:ff:
7d:66:70:ab:89:c3:f8:17:75:2f:8f:89:27:bf:aa:d3:1a:2c:
a8:d9:a0:f2:ce:5a:4b:5d:d2:19:19:b7:f4:d3:fe:ad:ff:73:
94:ba:70:4f:34:a2:d9:68:31:d3:21:e8:2c:a8:d5:2f:1d:ed:
e0:4e:8a:35:5e:50:78:1d:47:42:f2:42:68:37:4a:94:28:b6:
1f:29:49:cf:76:0e:da:d9:c3:1a:9c:f0:4b:e1:fc:96:b3:9f:
cd:4d:29:06:c6:6e:75:bf:d5:37:13:be:ea:39:55:d9:b3:6f:
13:ff:c5:d0:8e:a0:bb:1d:99:47:6c:bc:2f:f5:8c:ed:d3:d4:
a0:c6:25:f6:57:cf:ae:8b:c4:c7:e1:9e:4b:2c:70:bd:f6:a3:
7a:0e:eb:62:51:b9:ed:4d:1a:68:a0:67:60:b4:dd:10:c1:64:
b6:bd:11:93:60:f1:84:91:f6:24:23:d1:c8:cd:1d:b8:89:c6:
a2:69:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:00:26 2025 by rpki-client