Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: nOgywGofA/AG+q0NAn49g/GA7We6MuAJ3VFeg+BvXuw=
Subject key identifier: AE:C5:F2:8A:E6:8E:A0:38:F9:25:EB:ED:E1:CF:40:E4:6B:27:16:06
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 01963EAF935166CF89CB4822F6464CF2BD36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 13:00:15 +0000
Manifest this update: Wed 16 Apr 2025 13:00:15 +0000
Manifest next update: Thu 17 Apr 2025 13:00:15 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: 9uW+Fh9aHG0/rEBA/7l05Yimnw9qX1L6fxAYPtyQ8fA=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:93:51:66:cf:89:cb:48:22:f6:46:4c:f2:bd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Apr 16 13:00:15 2025 GMT
Not After : Apr 17 13:00:15 2025 GMT
Subject: CN=aec5f28ae68ea038f925ebede1cf40e46b271606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:95:a2:c5:02:42:b3:08:e8:6d:94:cb:dd:
41:85:b1:98:55:8d:2e:5b:af:84:37:0a:46:b5:77:
89:53:37:c6:09:d3:9f:78:66:79:60:c0:5c:15:8d:
a2:7e:68:45:9f:ad:51:c3:1d:92:7b:c2:ea:ec:96:
f3:02:4e:aa:b0:68:2a:70:1f:26:e4:eb:c2:c1:ad:
2e:91:b6:3c:89:06:a1:74:28:20:2e:9b:20:87:fe:
8a:2e:41:9a:1c:c1:d6:a1:48:41:b9:7b:83:d0:d7:
67:79:38:72:82:64:89:65:36:cc:69:77:04:fc:e4:
12:c2:3d:b3:c3:6a:95:4a:0d:64:40:c2:a8:d6:6d:
b1:18:32:12:d0:73:5b:6f:6d:48:38:1d:89:7c:3e:
e5:35:68:23:cf:e6:23:43:b9:89:88:9d:5e:3b:9d:
f6:af:29:25:47:ba:03:4b:ec:c2:05:d1:88:72:63:
c5:c7:ff:98:a9:ec:ff:54:60:18:df:14:9a:69:bd:
4d:95:23:2a:dd:b3:6f:d0:c5:ae:fd:78:b8:3c:26:
49:d0:04:81:0a:03:65:37:68:53:38:bb:34:8b:31:
86:f5:b5:6b:59:7f:e1:57:5f:ce:6b:40:ca:96:98:
ed:64:af:84:b7:a1:b2:22:3c:1d:ab:20:21:07:c6:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C5:F2:8A:E6:8E:A0:38:F9:25:EB:ED:E1:CF:40:E4:6B:27:16:06
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:67:63:78:77:86:0a:fb:7a:ce:28:87:92:04:1b:ac:32:94:
6d:b2:4f:8b:db:bc:94:d6:42:3b:7a:8c:50:b4:34:f2:c2:00:
e1:7e:38:03:1e:39:77:d3:f4:86:34:4d:e7:cb:17:7c:ff:0e:
73:38:be:0a:98:0b:6f:23:a1:dd:96:2f:3a:02:13:3d:8f:2b:
43:fe:bd:70:e8:dc:7b:24:2e:cd:5d:ec:eb:b4:70:66:37:7b:
7f:32:51:82:31:27:14:ef:5f:b7:53:a3:86:16:d3:ff:45:d0:
0d:b9:3c:ac:05:f4:fd:49:ba:14:2a:40:ac:90:e1:36:32:87:
cb:e2:7e:1b:2a:02:bb:19:a7:00:a2:44:aa:20:52:19:7a:1b:
db:e9:94:8d:64:64:97:a5:7a:70:27:06:53:57:0e:25:1d:23:
ed:4d:40:ac:e5:ce:85:15:1b:c0:44:48:4d:99:5f:22:e6:69:
5d:d5:c6:ab:c1:09:49:c2:b6:a4:d4:40:6b:0f:0b:9c:4d:b5:
6d:57:bb:6c:77:c0:da:2b:8d:bd:fd:47:d8:ba:c9:e1:c8:12:
e1:50:eb:c8:bf:a3:83:9d:49:4c:0e:d1:49:59:61:14:59:4f:
f7:81:8b:75:07:6f:a2:40:22:7a:30:9c:77:f2:e8:ce:9f:b5:
b8:ec:5f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:53 2025 by rpki-client