Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
File: hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json)
Hash identifier: woU7ehi8PpbPDPdsNJfwkOsNmsc+g+PKI2uUSP+cqL0=
Subject key identifier: 97:A0:22:53:FB:F6:6F:C3:E0:E1:AD:EC:AC:08:74:08:26:AD:80:2F
Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
Certificate issuer: /CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Certificate serial: 01977942173704607CC5DC50C354B4E09E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
Manifest number: 1187
Signing time: Mon 16 Jun 2025 15:01:03 +0000
Manifest this update: Mon 16 Jun 2025 15:01:03 +0000
Manifest next update: Tue 17 Jun 2025 15:01:03 +0000
Files and hashes: 1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: E1hWrZfI7C/7hJK1TciuFR4id5AaSaHkzsOUnCHRHh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:17:37:04:60:7c:c5:dc:50:c3:54:b4:e0:9e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Validity
Not Before: Jun 16 15:01:03 2025 GMT
Not After : Jun 17 15:01:03 2025 GMT
Subject: CN=97a02253fbf66fc3e0e1adecac08740826ad802f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:f1:21:8a:19:03:e9:e5:d0:59:29:17:36:
6c:77:0b:15:4e:f5:f3:8a:3f:e7:36:01:40:0d:85:
66:b5:36:30:09:4b:72:b3:62:49:a1:59:f4:79:b6:
09:c8:90:f8:c8:1f:b8:93:73:57:45:eb:65:68:93:
d4:42:09:7e:8a:81:53:14:ea:23:e0:5a:d6:fe:a2:
6b:f5:f6:58:41:33:14:44:b2:78:bb:0d:58:35:f8:
67:46:34:cb:c8:23:3b:b7:4c:e5:8d:d2:1a:ac:b5:
b1:18:8f:07:d6:85:31:50:0e:69:56:5b:59:54:d5:
49:e3:82:55:5a:ea:39:ab:15:cc:a3:48:79:11:68:
89:cb:69:e6:0c:4b:77:a6:da:5d:e9:b7:6a:51:66:
a0:82:6c:a9:c2:cc:09:52:d5:59:fb:cf:d6:be:4c:
d9:4f:00:1f:dc:22:02:e6:f6:ae:15:26:1f:db:56:
9a:df:c3:67:6e:52:41:eb:cf:d9:b4:ad:99:c7:51:
c5:c5:16:18:49:71:d7:d4:46:b4:a1:05:cb:4e:39:
fa:fe:95:05:ba:ae:a4:69:b9:9f:27:a6:b3:65:23:
f1:78:ed:40:d2:8d:e5:4e:11:b3:13:8f:18:e1:a0:
75:d2:65:b7:37:13:eb:ef:18:03:fc:45:ca:c8:b3:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A0:22:53:FB:F6:6F:C3:E0:E1:AD:EC:AC:08:74:08:26:AD:80:2F
X509v3 Authority Key Identifier:
keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2e:1b:c0:a9:5d:9f:5b:c3:5a:da:e7:68:f5:cc:62:63:9c:
32:ec:46:e0:34:5d:a8:10:a3:b8:df:cf:0d:a9:50:89:de:6c:
ab:93:99:56:3f:49:4a:0f:64:23:d1:ab:b9:1d:e2:07:99:d7:
81:75:d1:61:1c:a9:46:6e:5c:2c:ca:5b:13:2f:b0:5e:22:a7:
a9:0b:0b:5b:65:e5:5d:24:fa:4e:4a:ed:11:67:ff:47:0f:0b:
cd:82:b6:fb:72:7f:0a:01:c3:fb:a3:4a:0c:14:19:0b:f4:48:
d6:40:cc:54:dc:0c:85:91:88:1f:cc:01:02:4f:2f:b3:0f:9c:
1a:bb:ab:e1:87:95:c9:d7:46:17:a3:46:3f:f9:70:92:02:79:
fd:df:e2:6b:af:07:51:11:7b:26:29:8b:4e:b6:3d:3b:eb:48:
b0:eb:a0:fe:63:04:b5:80:ce:43:09:21:56:87:1b:1a:87:92:
52:a2:4f:e0:e4:0a:b3:44:21:5b:2d:d4:dd:97:30:59:6b:b6:
3c:db:1e:51:8d:40:68:a0:2d:c5:76:63:7e:31:4c:bd:1e:d3:
42:e3:3a:91:b9:5e:09:0e:ca:fd:0c:48:e8:25:0f:90:96:4f:
63:6d:c9:fe:42:18:7d:15:4e:bb:fc:44:a0:b6:66:ac:fb:84:
7c:01:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:14:53 2025 by rpki-client