Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: Wh4KxrkuHF3jpLSAVciMKeMLyBbqvfiUtJvXvmZZgRc=
Subject key identifier: 98:19:4B:53:86:8B:45:C4:83:A5:79:FE:21:84:D0:DB:7B:BA:27:09
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 01976F2CE89692A93DDCBC58717F48A0E176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:01:43 +0000
Manifest this update: Sat 14 Jun 2025 16:01:43 +0000
Manifest next update: Sun 15 Jun 2025 16:01:43 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: iV0P9Qy2az+tOXEBr7pcRfp0wUMSdImmruDmfup20cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:e8:96:92:a9:3d:dc:bc:58:71:7f:48:a0:e1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Jun 14 16:01:43 2025 GMT
Not After : Jun 15 16:01:43 2025 GMT
Subject: CN=98194b53868b45c483a579fe2184d0db7bba2709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:2e:c3:e0:38:9c:11:d5:7a:11:64:9e:4c:
99:59:61:c1:1c:23:83:59:19:e7:d2:6d:a0:4b:a2:
4e:d2:dc:5b:64:c5:13:95:db:bc:c7:99:41:62:a5:
eb:cd:f1:02:3c:a8:25:c0:12:1c:00:2d:e2:d4:17:
94:c9:b8:91:f7:f8:84:af:fb:24:a3:17:42:c9:1c:
31:74:a9:f8:29:68:c3:dc:aa:41:06:b2:04:4e:2c:
2b:7d:2a:4f:4d:a1:11:9a:d9:4e:38:47:a2:2a:17:
2c:c4:69:62:44:37:87:0d:bc:2b:07:03:dd:28:5f:
f2:68:d3:a8:6d:15:fe:74:46:36:81:e8:40:43:a8:
12:c1:b1:23:5b:53:c1:0e:fb:fa:25:1c:f1:19:6e:
ea:62:f6:cc:05:e1:8f:aa:82:8b:0c:64:8c:9f:24:
ee:2e:c9:f6:12:83:c5:66:2d:24:bf:53:8a:00:36:
44:fe:5d:f3:7a:3c:cd:4a:fe:cb:9a:36:07:a4:72:
68:29:f7:6f:9b:29:ae:03:d2:ee:70:25:5a:1e:ca:
8a:a3:21:a3:b9:f5:47:13:46:56:54:7d:4d:cf:7c:
b3:52:9b:3d:5f:48:83:af:00:0f:8c:f7:7a:db:06:
30:68:51:a4:10:e3:e5:df:0b:0a:df:7f:7f:7f:51:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:4B:53:86:8B:45:C4:83:A5:79:FE:21:84:D0:DB:7B:BA:27:09
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:04:37:19:93:66:18:74:96:df:58:f9:71:9a:82:e2:c8:df:
35:c4:a4:93:10:dd:25:3e:a2:82:63:f5:80:43:7e:ce:2d:a3:
e3:27:be:6b:1b:05:4d:30:f5:57:d3:cc:c6:7f:ff:21:75:58:
da:fe:b7:3c:76:e5:c2:00:e3:f7:f7:4f:c6:a3:2c:1e:82:87:
36:01:20:6e:69:24:7d:17:ff:2b:80:c4:f0:4f:27:ad:87:3f:
fc:4f:bf:ea:1a:86:56:29:7c:85:19:ad:31:f4:03:88:e7:e9:
68:31:05:9b:0e:1d:a0:dc:2d:e5:51:d3:b6:c1:b2:f3:46:34:
63:90:52:11:b4:15:25:83:0d:a5:01:63:b0:95:a2:70:c0:05:
6d:38:2f:ab:4a:f5:54:80:02:bc:47:37:8d:4c:fe:80:f4:d8:
87:42:0f:88:b2:f1:ec:0c:21:4f:0f:6d:bf:2b:17:52:a3:3c:
77:7f:41:94:2a:1c:a9:58:22:e7:14:7c:70:8b:eb:a6:88:ba:
28:5e:e4:55:68:b4:fe:17:3d:c9:df:27:4a:db:6b:4f:8f:c5:
65:f7:55:72:98:e2:37:76:90:a8:fe:60:dd:fd:ea:db:2b:d9:
67:c5:73:33:f0:47:49:fb:8d:d7:11:6d:c4:1a:78:5e:21:71:
f3:55:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:25:19 2025 by rpki-client