Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
File: hbc7mIsBRCjrr2ehj30Zmbojxk0.mft (raw, json)
Hash identifier: YXrfahO/p5vcY6tqWb0Nca9p4ZcWBrqY7cdOiJz+1ro=
Subject key identifier: 9D:F4:BE:7F:8D:D8:B4:F5:AF:77:06:7D:FF:86:C1:81:52:E0:A7:E1
Authority key identifier: 85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
Certificate issuer: /CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Certificate serial: 01976960E8CC245FCA76529B0A2E6F74D035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
Manifest number: 11AA
Signing time: Fri 13 Jun 2025 13:00:48 +0000
Manifest this update: Fri 13 Jun 2025 13:00:48 +0000
Manifest next update: Sat 14 Jun 2025 13:00:48 +0000
Files and hashes: 1: hbc7mIsBRCjrr2ehj30Zmbojxk0.crl (hash: 4HLpfk/kRPEn18ojR7pEb6HBuFS3U8tTwg2yEc+XNzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:e8:cc:24:5f:ca:76:52:9b:0a:2e:6f:74:d0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b73b988b014428ebaf67a18f7d1999ba23c64d
Validity
Not Before: Jun 13 13:00:48 2025 GMT
Not After : Jun 14 13:00:48 2025 GMT
Subject: CN=9df4be7f8dd8b4f5af77067dff86c18152e0a7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:3e:bb:cb:40:50:52:a1:6b:06:54:49:8e:
86:10:a1:0c:7d:a2:ce:8e:08:9e:47:be:40:cc:1b:
d5:11:9c:a3:44:ac:8b:7d:50:4c:53:62:fa:60:d4:
f3:77:4e:8b:e5:47:41:17:93:70:ca:78:8a:e2:57:
b3:3e:71:27:62:c0:12:d6:34:1c:dc:b7:6f:71:a8:
a1:1c:db:f9:24:53:0d:d3:e0:3a:28:37:1e:c5:91:
42:65:62:51:49:9e:e8:44:ac:e2:03:b3:f2:1f:fe:
b8:65:c5:a5:b8:18:b5:86:22:ff:35:1a:11:d3:43:
db:e6:76:aa:b1:ba:08:c2:ee:9f:5b:5b:94:63:7e:
97:19:80:9b:92:a9:05:f5:b7:5b:2c:81:d3:a9:68:
2a:12:1f:6f:1f:bd:d6:ac:33:a3:46:d8:55:02:3b:
e2:d5:5c:b8:63:5e:38:30:dd:00:54:34:2f:c6:d7:
30:a5:c3:4b:0a:09:83:f9:9d:6b:06:8f:f0:9c:57:
79:d1:4d:c6:79:05:14:7e:32:38:db:b1:27:30:d8:
28:a9:0e:21:c6:99:62:34:d6:82:23:47:ba:e5:c4:
98:ca:87:21:23:5c:01:27:f8:5b:d8:e9:bc:e5:e4:
26:0d:aa:72:44:73:bf:cb:1d:49:b6:3a:de:47:75:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F4:BE:7F:8D:D8:B4:F5:AF:77:06:7D:FF:86:C1:81:52:E0:A7:E1
X509v3 Authority Key Identifier:
keyid:85:B7:3B:98:8B:01:44:28:EB:AF:67:A1:8F:7D:19:99:BA:23:C6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbc7mIsBRCjrr2ehj30Zmbojxk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b850de-0c6b-4dc2-ad9e-cfede09007aa/1/hbc7mIsBRCjrr2ehj30Zmbojxk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7c:18:ed:2b:bc:cc:ff:34:fa:8d:2a:80:8f:4b:7b:b3:f3:
7d:26:3f:67:18:00:c6:cf:a4:ac:61:2a:c2:5e:e1:8b:1f:b0:
d5:1e:cf:cd:95:79:64:8d:b4:92:97:89:e1:b2:c3:44:9b:f8:
5a:5f:a1:9d:61:c8:94:7b:d6:c4:16:ce:96:a4:19:0d:8c:b4:
3a:82:fb:a9:fd:c3:07:94:50:1c:fe:19:cc:ab:45:78:c5:9f:
0a:93:90:3d:2b:06:76:a0:23:56:cb:d6:de:43:5b:c3:9f:7c:
c6:dc:f7:5d:2a:0a:11:dc:b8:1e:57:2e:be:0e:e7:ac:0e:25:
fc:b2:b5:63:37:dd:73:e9:23:b4:70:7b:0b:8c:19:74:9f:a6:
97:e6:8f:8b:b7:ff:8d:cb:b3:5d:1a:11:67:e4:9b:db:a9:81:
ce:d3:70:a5:35:a7:9e:6e:67:68:9b:3d:cb:f9:f0:3f:5a:79:
60:cb:c6:eb:2e:58:27:d3:5c:56:64:b7:fe:99:6a:73:c3:15:
ac:e8:e2:ea:7a:a5:c1:ef:55:e2:59:2b:b9:0f:9d:5a:07:d0:
2a:25:a5:73:9d:1e:a5:ce:44:c4:24:58:b1:62:07:e2:f6:7b:
7a:0e:a2:6d:f3:9a:73:32:18:fe:7a:59:ec:fa:58:0b:b1:75:
88:a2:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:44 2025 by rpki-client