Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
File: hgLiX_EiDtSqju94wzpyKrWIP40.mft (raw, json)
Hash identifier: riGGIUy/84453gz4wUOyIyxBoWyu95N9yjBfKdQiY+w=
Subject key identifier: 54:23:D6:1E:7A:33:A1:75:6D:2C:89:FF:F1:0C:66:D0:EE:BA:76:6E
Authority key identifier: 86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
Certificate issuer: /CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Certificate serial: 019769298B91CC7D61B909066F32679B0FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
Manifest number: 41
Signing time: Fri 13 Jun 2025 12:00:19 +0000
Manifest this update: Fri 13 Jun 2025 12:00:19 +0000
Manifest next update: Sat 14 Jun 2025 12:00:19 +0000
Files and hashes: 1: hgLiX_EiDtSqju94wzpyKrWIP40.crl (hash: s6flRv/WNC5117UmoGlK4rIdhjf0u3gVxiCVWkgOzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:8b:91:cc:7d:61:b9:09:06:6f:32:67:9b:0f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Validity
Not Before: Jun 13 12:00:19 2025 GMT
Not After : Jun 14 12:00:19 2025 GMT
Subject: CN=5423d61e7a33a1756d2c89fff10c66d0eeba766e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:b0:9d:9a:ec:c5:30:26:04:4f:c0:c7:be:
ce:75:ef:e2:e7:d8:0a:68:82:29:8e:2b:4c:47:38:
97:d3:e5:f5:be:14:3d:72:c9:f7:b8:b7:50:c8:4e:
09:2d:10:ed:b6:48:3a:b1:cd:8e:a3:4c:cc:95:40:
f1:0a:15:f5:2e:6e:10:53:be:41:51:2d:f8:fc:d8:
53:54:22:59:91:e5:bd:c5:a2:dd:02:3d:de:d1:e8:
66:87:6c:c2:a6:24:84:91:44:e7:15:35:95:08:2a:
f9:ff:ee:f0:cb:ad:4c:55:0e:fb:1c:0f:8c:d9:5b:
57:30:46:30:e0:93:49:eb:e3:07:49:56:10:71:26:
78:2b:8d:30:50:a1:e5:8d:8a:3d:24:ae:38:5a:de:
d0:8f:39:6d:ea:1d:66:7f:9b:4b:ee:dd:44:54:de:
2c:e6:4b:28:72:1d:c8:c2:dd:31:80:e6:0c:e0:37:
1c:d2:a5:55:e4:39:86:d6:85:73:58:d7:49:b7:44:
fd:49:e4:f6:48:f7:38:cb:e0:ba:75:18:e1:72:03:
b9:3e:e4:05:26:85:ae:b3:0d:72:50:df:70:79:06:
a0:bf:53:6e:bc:47:d8:c4:fc:c6:ba:d9:44:a1:5a:
a4:88:fe:f0:fa:8d:ac:6f:73:be:32:c3:e0:46:8c:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:23:D6:1E:7A:33:A1:75:6D:2C:89:FF:F1:0C:66:D0:EE:BA:76:6E
X509v3 Authority Key Identifier:
keyid:86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c0:08:34:3b:77:e5:07:62:aa:d7:94:71:ac:b7:da:c1:97:
3a:d3:59:5d:89:ef:a9:54:e4:74:1c:9a:b0:18:4c:7a:18:5e:
bb:fa:ee:26:88:72:62:9f:6c:1c:d0:01:4f:ac:8b:a9:f1:73:
e7:82:d9:b6:7f:ee:29:72:de:73:40:b7:6c:0d:a0:40:b6:17:
72:12:8e:1f:6e:a7:4e:9a:58:4b:21:a9:3b:1a:31:8b:8f:3c:
ec:18:04:41:67:64:14:26:1f:0a:0d:59:17:0e:ef:53:7e:b7:
4e:9a:07:97:24:f4:0d:ae:f8:8c:b1:b0:fd:c5:4e:14:6e:e8:
fc:a2:a6:f9:c6:88:39:f1:50:eb:e3:b3:86:f4:59:9d:38:63:
52:96:38:81:3b:5f:b4:2b:4e:46:34:76:e4:bd:a0:e6:32:f4:
90:19:40:c1:d7:71:75:aa:f8:55:ec:48:d8:ef:08:9a:59:ce:
a6:db:a9:53:a4:c6:42:e9:87:91:d0:d7:fa:3e:1c:bd:a7:b9:
f8:be:69:53:a4:54:aa:59:fd:bb:09:bd:e3:48:22:d2:3a:c3:
c0:2e:cd:a3:1f:bb:95:1e:d5:32:e3:58:7c:79:11:fe:75:73:
8a:26:dc:e9:29:fa:3f:1b:67:9b:6a:93:97:6e:90:14:fe:46:
18:47:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:42 2025 by rpki-client