Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: t63X9Nw0Hv+AayYdM0Prx2fH4IrC1qc9a019Tl9AyQE=
Subject key identifier: 72:63:2A:AE:05:0E:A5:06:92:7E:BB:C5:2C:F7:29:A9:F8:F7:84:7E
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 019768F30A805F3E3B53F6B043903A1596EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 131D
Signing time: Fri 13 Jun 2025 11:00:47 +0000
Manifest this update: Fri 13 Jun 2025 11:00:47 +0000
Manifest next update: Sat 14 Jun 2025 11:00:47 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: TGpmbkZa6jPZNoLykwX7vfOKrX9E7KzfYTDY+GuJZp8=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:0a:80:5f:3e:3b:53:f6:b0:43:90:3a:15:96:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Jun 13 11:00:47 2025 GMT
Not After : Jun 14 11:00:47 2025 GMT
Subject: CN=72632aae050ea506927ebbc52cf729a9f8f7847e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:44:4d:ca:d6:86:12:e5:93:ee:59:ed:1d:
d1:41:3f:0d:e1:0a:22:a3:d9:76:7c:59:2b:7d:ea:
52:4b:5a:c1:85:86:ee:e1:7f:71:05:c8:34:7f:3e:
76:cc:46:3e:00:57:81:d4:cf:35:3f:19:2c:36:df:
f4:4b:30:83:56:30:d1:02:fe:62:b7:64:36:dd:99:
5d:ca:8f:c2:f8:8f:65:5d:0c:2f:e2:95:0e:d8:40:
ee:ef:63:ea:a5:c3:42:e6:68:20:68:ff:e3:21:ee:
51:80:65:42:69:e5:0e:ad:50:90:81:7f:d3:f5:09:
2a:b7:bb:13:f5:db:80:a1:1a:00:3c:28:93:6d:96:
78:a8:12:a0:bc:0a:cc:ea:81:ca:14:f2:9f:cf:5d:
52:dc:a6:bb:24:04:69:56:35:0c:48:86:82:07:3a:
c5:5d:99:ff:d0:b6:c9:d7:3e:24:0d:0f:f5:24:ec:
f4:b0:35:35:73:24:f2:d2:de:94:1b:3c:98:7f:91:
c9:18:56:b1:ec:a4:fb:73:e9:99:8f:5f:22:8f:5f:
be:dd:e0:16:77:91:57:97:db:39:3c:15:bd:7f:a3:
a6:bd:65:73:ce:cc:cc:e1:d2:0b:ab:39:1d:0e:0c:
52:28:6f:f4:72:56:37:06:51:82:59:b2:2a:5e:09:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:63:2A:AE:05:0E:A5:06:92:7E:BB:C5:2C:F7:29:A9:F8:F7:84:7E
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:40:0a:45:2b:37:15:00:70:15:31:89:b5:aa:5e:7b:f4:f8:
69:94:03:f4:8f:be:29:f4:dd:8a:2c:9f:94:0f:96:6f:4a:8f:
68:c1:b8:05:cc:de:f5:67:4a:39:6f:8f:36:3a:99:94:71:14:
5f:f9:af:dc:52:82:6a:15:c6:b1:2f:36:bb:87:a6:24:f5:2f:
97:12:b5:31:19:c5:56:89:01:79:d4:78:95:da:82:83:5a:d0:
41:56:18:ee:38:aa:18:01:60:6a:6a:3b:33:96:60:8d:9b:70:
a3:bf:eb:28:58:07:df:59:18:5d:54:c0:86:a6:5c:53:3e:de:
47:ef:5d:a2:ee:18:97:3f:62:67:2d:ab:b5:0f:ee:15:80:2a:
06:f6:7d:3c:ce:d0:d2:a3:3d:b6:96:de:5a:35:20:be:13:72:
c4:26:67:a3:dc:c5:23:b1:a4:0e:87:6e:6a:b6:45:46:ef:0d:
5f:34:5f:b3:90:84:2c:24:8a:aa:8e:a4:f2:af:df:9c:e2:e8:
6c:13:c3:00:51:fd:bc:6b:ba:69:d4:a2:f4:0d:b9:88:52:bf:
05:5e:02:a2:5e:18:05:61:79:ae:92:fd:57:0e:07:a9:0a:04:
be:b6:1f:aa:86:df:8e:1a:f4:0d:25:e0:5c:58:9f:c4:33:96:
1b:65:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:48 2025 by rpki-client