Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json)
Hash identifier: dVsCw8VvKY4QSYgj5DcUVn2n0LoUTSUKB91jMzRF098=
Subject key identifier: 47:77:43:AC:18:35:0E:E3:3A:EB:4B:29:B5:96:F8:65:3C:98:0C:B6
Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Certificate issuer: /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Certificate serial: 01964A7D54F65016D393F4A46A006DC4AB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
Manifest number: 0304
Signing time: Fri 18 Apr 2025 20:00:49 +0000
Manifest this update: Fri 18 Apr 2025 20:00:49 +0000
Manifest next update: Sat 19 Apr 2025 20:00:49 +0000
Files and hashes: 1: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: 836oJk4yGEFudiRS/Yojxln637VFoDvyZedJNcvIIo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:54:f6:50:16:d3:93:f4:a4:6a:00:6d:c4:ab:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Validity
Not Before: Apr 18 20:00:49 2025 GMT
Not After : Apr 19 20:00:49 2025 GMT
Subject: CN=477743ac18350ee33aeb4b29b596f8653c980cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:b0:d7:68:61:04:1c:39:b3:a0:49:df:07:
a5:79:fd:bf:9e:69:4d:49:2f:3e:0f:3e:84:a4:78:
cf:91:5e:95:d1:bc:ac:01:83:23:b4:5d:83:d7:95:
b2:9c:c9:33:79:50:55:89:a7:df:b7:07:cf:47:f6:
33:4c:61:af:f9:c5:af:7f:a4:42:64:81:d8:86:e7:
91:d8:71:24:ce:3a:0e:73:18:c6:2c:9e:2c:00:45:
e5:ef:d6:aa:85:7a:d6:90:55:d8:b2:ad:eb:32:f0:
78:97:56:d6:e8:8b:95:a9:78:c0:6f:b7:d6:42:91:
98:d9:b0:85:0c:f4:04:06:54:1e:75:08:5c:e2:79:
db:10:3c:52:0c:07:96:f5:95:d6:b0:82:9a:c0:1e:
81:bb:45:16:d8:7c:f3:2c:be:64:18:4a:f5:9b:76:
f3:47:9c:ad:55:d4:32:be:38:61:d6:76:61:17:a6:
ee:3b:77:44:da:53:86:d6:8d:6d:95:10:b0:94:4f:
c3:f7:e6:e0:f6:48:1b:1e:9d:94:13:d5:04:40:9b:
11:c7:f4:1f:fe:aa:1c:3d:cb:fb:c5:1c:e1:4a:ba:
af:3f:ae:a4:15:d8:13:5c:12:18:1d:c5:64:a6:3c:
3d:d9:94:ae:90:d9:48:d8:70:30:78:9c:52:1a:b7:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:43:AC:18:35:0E:E3:3A:EB:4B:29:B5:96:F8:65:3C:98:0C:B6
X509v3 Authority Key Identifier:
keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:30:36:1e:92:d9:88:06:5c:f6:aa:5c:85:67:08:9c:c6:6f:
81:8e:74:bf:21:8b:61:b8:68:af:c6:d2:6b:8b:a0:7b:8f:ce:
21:89:ec:ec:73:72:05:54:ba:11:68:de:0e:0b:7f:38:4b:ea:
ad:f6:11:de:c9:39:2c:c8:53:bc:3b:f2:76:c7:9b:e6:65:a4:
2b:bd:6a:d3:a8:f8:13:39:2c:ee:d3:ff:f0:6e:a6:06:5c:85:
b3:4a:10:d2:e0:01:5a:c6:c9:9c:fd:ed:70:a5:10:71:90:b5:
0f:5e:78:ee:9a:1d:a5:25:24:fd:1d:c6:32:e8:7e:f1:06:b2:
8b:74:06:00:d6:30:77:54:ce:51:92:a6:81:5f:0b:1f:dc:57:
30:ca:4e:b5:c1:e3:4b:18:cb:e7:b1:97:65:c6:59:b7:1a:ac:
22:6a:91:53:5c:fc:81:12:e4:12:7b:4e:33:44:3b:64:1b:a6:
19:4a:b4:2b:3e:c9:5a:c1:40:58:b7:17:11:2d:c1:83:aa:9f:
14:70:c9:03:45:91:3f:ad:2e:ce:72:a8:79:36:f8:12:85:15:
36:5d:bf:69:71:8f:4a:9d:75:87:59:7b:41:ba:77:75:43:bb:
45:5e:f9:86:35:f8:7d:b1:93:7c:05:5b:94:1b:30:71:d0:90:
d8:bf:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:01:28 2025 by rpki-client