Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier: Vfl1nqtpREm1s9fdvOx8ZadefmeAtBDMjap9WkYEtNI=
Subject key identifier: BB:93:D9:D5:D3:B5:84:78:27:9B:4A:43:D1:50:3A:F0:D5:B9:C3:64
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 01987ED37BB0D32F4D7C2B118B304C0C7FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number: 111C
Signing time: Wed 06 Aug 2025 10:00:45 +0000
Manifest this update: Wed 06 Aug 2025 10:00:45 +0000
Manifest next update: Thu 07 Aug 2025 10:00:45 +0000
Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: IlBKkKH+a0MsNGBPJRSuS8yzKwNuDHnz6frbKlxyakc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:7b:b0:d3:2f:4d:7c:2b:11:8b:30:4c:0c:7f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Aug 6 10:00:45 2025 GMT
Not After : Aug 7 10:00:45 2025 GMT
Subject: CN=bb93d9d5d3b58478279b4a43d1503af0d5b9c364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:86:86:8f:c0:d9:5a:c4:8a:c4:9f:38:1d:
70:c1:96:6c:85:04:95:0d:fb:27:80:c1:7b:35:68:
5d:52:27:f0:4f:e4:d4:3f:1c:2f:a9:69:f8:8a:fc:
68:2e:61:92:31:fe:74:02:c2:40:0e:9c:4c:7d:98:
e5:27:bd:9d:52:23:14:32:2f:88:57:24:41:76:ef:
a1:35:50:e1:2c:84:fb:99:b3:52:44:05:63:53:84:
98:7e:41:fd:b6:e7:e7:d1:bd:75:34:7a:2e:14:6e:
ea:5f:2c:d7:2f:54:c9:d6:0a:33:e3:10:a4:df:58:
58:83:b5:a0:9b:3c:29:e7:c1:3f:66:a0:10:ae:ab:
e9:9f:74:22:a0:18:61:06:fd:7d:81:4d:cc:23:b5:
ff:f7:db:af:c5:bd:6b:30:c0:e5:2d:97:ba:2b:81:
03:29:85:81:d4:dc:d6:96:b6:f2:36:e2:66:37:f4:
b4:19:2d:d6:72:66:99:a7:fa:30:c6:f1:a3:bb:f7:
79:ed:dc:14:75:58:82:19:dc:e9:c8:0b:d7:ce:7c:
e2:28:19:78:8d:f8:de:6a:b3:79:75:c0:ca:ae:f7:
08:d4:8b:31:c7:7c:86:ae:d8:74:66:e9:91:ac:17:
f8:42:8d:71:a2:d1:60:07:53:39:64:b8:9c:6a:f0:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:D9:D5:D3:B5:84:78:27:9B:4A:43:D1:50:3A:F0:D5:B9:C3:64
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:13:c9:84:2b:ba:90:b6:86:51:b2:b2:7b:1a:46:0b:a5:2c:
39:10:aa:e5:6f:46:d2:7b:63:e3:40:a7:56:c7:ff:bb:df:e5:
61:7a:8b:be:f9:1e:c3:20:bc:26:67:1e:40:7e:bd:8e:03:6c:
6d:97:67:15:54:5d:a1:25:a9:8b:7f:2f:fa:32:17:de:77:6d:
e6:fc:3a:1f:3f:a7:68:d4:4e:01:87:b2:ec:4f:6c:c2:81:c7:
e4:34:d4:b7:0f:be:23:4f:32:ec:43:be:6d:aa:29:e4:42:3a:
8b:84:d1:24:f2:51:f0:2c:41:94:e4:e2:7b:1c:68:2c:cf:0a:
62:91:8a:89:e2:fb:9d:36:66:63:e7:ba:bf:e4:0c:e9:e3:ff:
ae:e9:a2:37:2f:24:2b:fc:b0:0d:36:f3:91:f2:e8:c4:cf:20:
42:d3:c3:a1:48:c6:85:96:15:57:24:33:ba:b4:98:18:4d:14:
1b:1c:8b:6f:46:0d:0b:ac:e0:10:2a:cd:4e:93:f2:7d:fe:62:
21:ea:cd:da:b1:6b:ac:b6:f4:56:56:74:f4:98:6b:27:4e:be:
97:5e:e0:0a:4e:a1:7b:d6:ce:30:a6:e7:c9:61:28:32:dc:48:
60:2b:00:58:d1:0e:89:33:b9:02:5c:e3:5f:cf:31:1c:c8:f5:
c9:3f:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:14 2025 by rpki-client