Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.mft
File: HNuFgmJdF7G8uuE_xt20OruV0v4.mft (raw, json)
Hash identifier: +R2D9Fkl60Wkr19E1SppROVnyscNVDIA14QVOeMU57s=
Subject key identifier: A5:4D:67:74:FE:6E:A2:2A:09:53:6A:96:AF:E3:5D:9D:C4:3A:06:03
Authority key identifier: 1C:DB:85:82:62:5D:17:B1:BC:BA:E1:3F:C6:DD:B4:3A:BB:95:D2:FE
Certificate issuer: /CN=1cdb8582625d17b1bcbae13fc6ddb43abb95d2fe
Certificate serial: 01978168DF04A4DD693CFB68B5761849E6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNuFgmJdF7G8uuE_xt20OruV0v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.mft
Manifest number: 0156
Signing time: Wed 18 Jun 2025 05:00:23 +0000
Manifest this update: Wed 18 Jun 2025 05:00:23 +0000
Manifest next update: Thu 19 Jun 2025 05:00:23 +0000
Files and hashes: 1: HNuFgmJdF7G8uuE_xt20OruV0v4.crl (hash: KU83C6fJfcBJBH4LdDS6a4Iz74FLYY7Dw2I2b8leUx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNuFgmJdF7G8uuE_xt20OruV0v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:68:df:04:a4:dd:69:3c:fb:68:b5:76:18:49:e6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdb8582625d17b1bcbae13fc6ddb43abb95d2fe
Validity
Not Before: Jun 18 05:00:23 2025 GMT
Not After : Jun 19 05:00:23 2025 GMT
Subject: CN=a54d6774fe6ea22a09536a96afe35d9dc43a0603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:03:89:7e:ec:b4:35:14:5d:68:17:bf:ad:
9e:41:cf:3d:0b:39:96:12:c9:0d:31:3b:a3:33:4f:
a9:8c:2a:fd:df:e0:61:c8:80:59:13:94:3b:03:d0:
7f:7f:c7:0c:2b:04:cb:15:33:76:0b:91:1a:28:c6:
a6:0c:28:5e:10:55:bf:6f:93:6c:ca:e4:cb:9c:a3:
03:1c:a4:1b:dc:ae:d8:f3:9a:4b:e7:42:23:65:ed:
30:a8:58:71:8f:41:52:60:a0:45:b6:57:4f:ec:26:
bb:b2:d0:5d:b3:c5:1d:0b:16:5e:e4:2e:16:17:67:
76:e0:b6:0e:80:e2:e8:61:12:a1:a3:18:21:f3:2d:
f2:dc:bc:05:7e:76:38:a0:89:59:05:ec:a5:cd:86:
d5:1f:47:67:64:58:97:08:16:12:10:2c:f3:55:d2:
4a:c0:b8:22:a3:c3:55:64:6a:09:a6:bb:88:1e:47:
c3:38:d4:c6:5d:05:fa:f1:c2:c3:27:1e:8c:0a:fb:
62:7e:87:9a:c1:da:0c:71:0c:5e:ca:47:a0:21:91:
61:cb:35:65:ac:20:dd:ff:24:92:7d:a9:36:97:7e:
96:21:f9:ff:3c:5a:7f:1e:da:9c:3b:06:c0:cd:ae:
90:5f:dc:c5:5c:fe:6e:8e:70:f9:a7:69:3d:87:21:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4D:67:74:FE:6E:A2:2A:09:53:6A:96:AF:E3:5D:9D:C4:3A:06:03
X509v3 Authority Key Identifier:
keyid:1C:DB:85:82:62:5D:17:B1:BC:BA:E1:3F:C6:DD:B4:3A:BB:95:D2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNuFgmJdF7G8uuE_xt20OruV0v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/54cabe-0052-455f-8047-45fba5c97593/1/HNuFgmJdF7G8uuE_xt20OruV0v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8c:75:fd:60:39:f8:1b:d3:49:e6:8f:8c:d9:dd:1a:55:06:
e4:22:cc:bd:44:78:16:51:0d:ed:54:93:7d:9e:af:60:3d:46:
4d:b4:fd:3d:7b:6e:d2:10:66:46:09:29:c6:69:6c:d8:4b:fe:
79:b2:91:c8:51:e4:71:cf:37:6d:e7:df:6c:17:06:c4:2f:4e:
d4:92:5b:5a:46:30:5a:a6:94:ee:e8:7f:8a:3d:f9:bc:5c:f7:
a2:63:66:07:2d:60:3d:2a:b8:9c:90:f9:c6:96:2f:9b:56:63:
91:b9:de:14:1e:4e:6f:4f:4d:4b:65:aa:cb:73:b8:8a:12:64:
29:80:0d:bc:a8:9b:52:91:0f:bf:41:df:4e:69:89:da:9f:ba:
47:ff:13:33:18:9a:90:3c:b4:4d:9f:3b:c9:f7:88:e2:73:94:
23:6d:2c:a0:c2:b0:41:b0:0e:42:41:58:28:fd:12:e5:48:0e:
17:f4:2f:ce:c0:0c:90:b4:c9:b8:8f:4f:2f:41:ba:91:4e:8d:
4a:7a:83:f8:84:d4:fc:f1:5b:d3:a6:c9:f2:96:f9:35:ab:86:
23:b2:67:98:37:87:ca:19:62:4c:78:3d:b1:5f:b6:8b:fc:70:
d5:30:ba:86:ce:95:8a:a6:54:ed:8e:81:7e:93:5e:25:9e:ac:
49:c0:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:13:50 2025 by rpki-client