Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier: 1971UtTDXLnQ6b0XPHgOtmHPR2TPwOhcdWBd1Vov6no=
Subject key identifier: D5:19:3E:7C:9C:E4:DE:D6:EE:EB:F8:85:E2:A5:95:52:CD:E0:AC:9A
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 01965CF21AEDADB9C938D7CC557F94AC3376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 10:01:32 +0000
Manifest this update: Tue 22 Apr 2025 10:01:32 +0000
Manifest next update: Wed 23 Apr 2025 10:01:32 +0000
Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: i5b3b7tXpKUDfdGvym9Y/DWqoi02FliJHOBBBPEKfvs=)
2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:1a:ed:ad:b9:c9:38:d7:cc:55:7f:94:ac:33:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Apr 22 10:01:32 2025 GMT
Not After : Apr 23 10:01:32 2025 GMT
Subject: CN=d5193e7c9ce4ded6eeebf885e2a59552cde0ac9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:d6:7a:10:56:0e:45:be:52:d2:28:6c:0d:
8c:99:b7:11:4c:2f:7a:01:09:a6:95:c7:b4:3d:65:
81:59:99:db:cb:57:72:f1:c1:9d:23:91:89:9e:4c:
7e:ed:95:05:2a:13:6e:26:4d:dc:03:a9:0b:14:77:
47:8d:c3:11:85:74:3c:bd:71:cb:34:b7:2e:9f:69:
fd:db:bc:8a:3e:35:0a:c8:3b:c1:bb:c3:1c:54:92:
a3:5d:87:1c:89:ce:4b:d6:68:f2:14:05:bf:01:f3:
49:93:1f:fd:30:31:8b:5f:df:c7:ee:bf:b5:2f:62:
d8:6a:c5:fa:1e:6a:b6:91:4e:84:ce:6b:5c:fc:ae:
28:ea:88:2a:c4:dd:8e:0a:26:74:f2:29:48:22:e3:
05:d2:04:a0:2f:4f:36:37:05:e6:75:c6:7a:bf:f8:
46:69:5c:cd:d4:0b:08:d3:4d:dd:d6:90:b4:2b:fd:
7e:af:9b:9e:82:c1:7d:72:f6:c1:08:fa:bf:38:bb:
9c:12:80:e5:51:13:ea:f7:ae:58:b0:8b:54:e9:70:
b5:6d:e7:ac:74:de:f6:c1:f4:1c:90:96:0c:98:cb:
b9:c9:ac:58:2d:20:93:8c:3e:27:78:c7:59:0b:06:
e2:37:05:d3:0f:5e:b3:2f:15:0f:c2:46:d4:ea:3f:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:19:3E:7C:9C:E4:DE:D6:EE:EB:F8:85:E2:A5:95:52:CD:E0:AC:9A
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:28:57:d7:ec:45:9d:7b:9e:3f:3f:d7:51:44:f8:05:e1:29:
68:93:1d:15:c8:2b:84:b2:a5:32:e2:1e:08:25:d7:6b:53:9e:
35:b5:e6:65:4d:c7:14:ea:ef:78:1d:6a:fb:e6:ce:a1:9e:30:
4f:00:9c:3f:6d:a6:ca:08:64:16:d2:53:97:5a:67:8c:ec:25:
fd:41:ee:b9:be:ad:90:1a:4a:c6:3a:a7:a6:eb:85:5e:8a:0d:
2c:93:65:90:f3:01:64:9c:5c:eb:41:a5:be:9d:59:8b:e3:d8:
0e:15:c9:15:43:64:9a:7f:3a:c5:9b:86:99:27:d0:e9:70:39:
10:f0:cf:37:02:7f:ba:7e:2b:64:4e:f8:5a:00:7d:51:81:b7:
e5:2f:4e:45:bc:fd:e3:81:19:4f:08:dd:96:8b:1f:ce:e7:e0:
71:4e:30:51:42:bb:88:7a:1f:49:f7:3d:67:00:75:45:7c:0c:
7b:47:01:1e:ee:26:00:a3:37:2e:04:98:85:fb:67:fe:db:8f:
fc:ba:00:cb:ba:53:5d:9d:f9:ed:4b:b0:78:9c:83:94:a4:01:
0f:8e:57:22:78:dc:21:dc:42:44:d6:38:63:71:ed:d9:66:af:
91:dc:9b:23:12:67:19:6d:bb:d6:0b:03:f0:7a:e7:09:fe:17:
52:f0:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:31:53 2025 by rpki-client