Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json)
Hash identifier: MG8SKII3I2pw5YRKuIKvXFb2YLZIe87Wzth8W8fTcwc=
Subject key identifier: A7:C5:19:B1:1C:28:1A:8E:CC:16:76:14:A8:0F:00:8F:4B:D7:15:2F
Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Certificate serial: 019769CF32256F6B1158C628DB96D3556F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
Manifest number: 0BBB
Signing time: Fri 13 Jun 2025 15:01:15 +0000
Manifest this update: Fri 13 Jun 2025 15:01:15 +0000
Manifest next update: Sat 14 Jun 2025 15:01:15 +0000
Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: uAeCM55jxylzovBqZ8YNrz14e4UDzbSilt4ilduO2N8=)
2: oaQkn5zr2sFy17og-aVMkuLXdds.roa (hash: VtZ3pTO5W1yzA+ps5HMSQhypm611YNtn0vckyLuCUAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:32:25:6f:6b:11:58:c6:28:db:96:d3:55:6f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Validity
Not Before: Jun 13 15:01:15 2025 GMT
Not After : Jun 14 15:01:15 2025 GMT
Subject: CN=a7c519b11c281a8ecc167614a80f008f4bd7152f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:5f:99:56:a9:93:60:82:64:76:59:e7:f3:
d3:18:02:84:b8:17:6e:04:8c:bf:65:ab:b7:ba:f5:
9d:40:52:ab:27:c8:b5:7a:8a:c8:32:d6:39:f9:b3:
22:89:b3:9a:6e:0f:a5:69:11:11:26:ff:8a:70:21:
5a:e5:12:1b:c3:e4:0d:90:b2:be:8a:f9:e7:6e:30:
95:f1:8d:b8:72:5c:2c:0c:39:c3:72:7e:82:6b:3f:
4f:d4:7f:95:d1:be:63:1c:d8:5a:bc:c1:6f:3f:6b:
96:bf:2f:10:7c:4e:5d:b8:dc:18:a0:55:71:3c:03:
b9:51:35:f8:76:91:c0:4f:c0:30:71:f2:ce:37:fd:
2b:b3:d6:59:b7:6a:ea:6f:26:75:9a:61:7e:b9:73:
b3:f9:ca:47:22:2a:99:f5:1b:da:7f:94:aa:aa:9c:
cd:c5:3f:49:3b:5a:da:bc:8d:19:36:41:72:84:c8:
fd:2b:7c:7a:77:c6:5f:75:10:b6:56:85:b4:1c:fa:
31:21:94:db:23:53:f1:59:bf:d5:b7:8b:90:71:3e:
2e:82:c0:4f:0a:ad:b6:34:7e:89:c5:4a:3e:4a:a7:
90:90:5c:9d:1e:d3:5f:0d:32:5b:dd:ba:d0:f0:d4:
86:04:87:8a:4f:ad:a1:b3:c8:24:db:7f:5d:73:8a:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:19:B1:1C:28:1A:8E:CC:16:76:14:A8:0F:00:8F:4B:D7:15:2F
X509v3 Authority Key Identifier:
keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:44:cc:e9:e5:3a:a3:4c:22:92:36:05:a9:40:0a:b1:44:5b:
8d:ea:36:77:64:82:e0:13:ab:1e:81:fe:2e:98:e9:64:84:8b:
cb:f5:3d:f0:bb:aa:83:fa:a2:d6:88:d4:d4:f0:89:86:be:8d:
0e:d7:e1:3b:1a:96:d2:ea:69:43:8a:6e:9e:59:f0:d8:c1:19:
da:64:94:8c:1d:95:e4:0e:a8:db:92:96:cf:da:2a:2b:14:40:
a0:f2:99:4f:68:5c:d4:da:05:b0:aa:da:94:94:6d:f3:e8:98:
8a:8f:9b:1f:c9:ff:94:d3:9c:fd:19:0a:0d:83:94:a4:29:84:
1b:7d:37:e4:58:75:5b:66:71:d2:93:f3:66:03:34:bb:90:ec:
67:ca:0b:d8:43:bb:fe:73:91:a6:3f:46:c5:66:5b:8b:74:79:
33:66:2c:a2:71:cf:67:2d:09:3f:0f:e2:be:16:21:83:ad:db:
1b:5f:21:30:cf:88:0a:26:c0:d9:2c:bd:76:b5:e4:46:22:81:
9a:d1:e9:9b:b6:4c:53:de:4f:0f:56:5f:a9:a1:4b:f3:83:13:
b1:02:26:80:86:e4:32:d5:48:47:ac:d3:bd:c0:51:e6:36:df:
0c:67:fd:0e:fd:4e:fa:d4:4a:cd:76:3a:ad:f9:08:45:d4:eb:
6e:f6:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:47 2025 by rpki-client