Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: 3CLFID5nBiM/w9Ivy7k3wWgvPiKAsHWYDyUZZ5OrF78=
Subject key identifier: 8B:A7:E5:C0:A3:FB:D4:3F:10:C4:C5:DC:93:2E:34:1F:6A:F3:24:8D
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 01987B9B609BFEA8D72E7F80060992C77979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 19:00:37 +0000
Manifest this update: Tue 05 Aug 2025 19:00:37 +0000
Manifest next update: Wed 06 Aug 2025 19:00:37 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: a2R2gw9h1aPoE7ppmjZ4YFXw7GJCnFN7jk/fXC8jEJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:60:9b:fe:a8:d7:2e:7f:80:06:09:92:c7:79:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Aug 5 19:00:37 2025 GMT
Not After : Aug 6 19:00:37 2025 GMT
Subject: CN=8ba7e5c0a3fbd43f10c4c5dc932e341f6af3248d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:65:22:41:e5:b2:38:62:84:4e:34:ea:a7:
bf:6c:05:55:de:3a:9f:e6:10:bc:e7:c2:71:20:1d:
f2:ed:71:12:b1:68:3e:95:8b:bd:50:30:be:d2:4d:
8b:4b:92:de:f5:62:be:32:69:7b:fe:84:c2:f7:fa:
83:72:7f:b8:9c:90:d7:24:91:5c:5d:de:92:3a:f8:
05:3e:3c:81:d9:bb:2f:ff:27:e7:44:16:64:e0:36:
94:de:e9:af:e6:5c:4e:bf:28:69:fc:8b:b6:27:10:
09:5a:bb:58:d4:f8:57:ba:17:05:1a:e0:74:6f:85:
4d:27:c6:15:86:93:bd:4e:2a:4a:39:ef:f9:0a:5c:
62:77:df:61:d6:d7:13:80:4d:1a:a8:32:a3:ae:95:
5a:71:71:24:9e:3c:8e:5e:2e:e1:f6:94:e8:32:f2:
b5:e2:54:39:23:e5:c6:22:06:cf:96:24:34:c8:3d:
c3:ec:4a:75:d3:a7:2b:b5:00:f8:a5:b2:2f:a1:80:
44:a5:a3:f2:dd:af:b4:aa:76:4b:22:c5:cc:fb:46:
38:dc:4b:b6:c8:9b:5d:05:83:6e:ee:1b:39:0e:fb:
fd:f8:dd:b0:9b:94:6d:1e:3e:78:0d:8b:56:06:b4:
36:81:66:ef:f4:6e:84:01:99:6c:44:13:a4:50:ae:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A7:E5:C0:A3:FB:D4:3F:10:C4:C5:DC:93:2E:34:1F:6A:F3:24:8D
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7c:02:81:0d:a8:5e:e8:d2:a3:c1:6a:0f:96:6f:91:7e:90:
61:97:54:f8:88:56:c8:1c:b8:0f:f1:c1:ef:69:eb:cc:5a:2f:
49:cc:b2:74:1b:31:69:e9:d8:e7:34:13:58:00:75:fe:fa:44:
8d:32:56:28:56:2d:d1:c2:b6:53:c6:78:d8:55:5a:5f:90:04:
07:85:3a:57:bc:a7:47:12:de:d3:45:02:22:ef:7b:74:19:d3:
6d:ac:3c:0f:ea:b2:99:af:b6:d2:c4:36:61:f9:ba:b2:1d:04:
f8:21:fc:22:4a:17:5e:0a:c7:50:39:23:c6:60:ea:64:0a:08:
c4:d0:a4:e6:b5:6c:8c:a6:92:b5:a3:42:3c:b4:68:20:d4:1c:
77:9e:86:fb:95:0f:d8:c9:56:3e:75:90:76:5a:a3:71:74:97:
2d:c4:bd:e1:b8:bd:31:08:41:38:03:b0:dc:fb:83:3e:de:15:
82:09:27:6f:e1:23:e7:4e:cb:97:f2:2f:e8:ed:83:56:d9:a7:
9e:ea:a6:0b:ee:3f:04:c5:66:1b:88:1a:71:fd:c0:8f:ad:d5:
1d:79:42:16:48:a4:42:59:ca:7b:75:f1:85:f4:55:6e:e8:d7:
f6:6d:6f:bd:ed:fc:6f:d7:4c:4a:2f:86:60:da:7e:34:64:b9:
71:3a:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:32 2025 by rpki-client