Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier: FQJQ/Rax7OEUBA1K1C3mJdQAKWqF1qK5ELZVZvz6PbY=
Subject key identifier: 9D:D8:2A:ED:F7:D2:33:18:CB:59:C0:42:70:44:16:42:2F:71:DB:CC
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 019768BBBE6C72C3B145A839C01D3EA8BF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number: 108C
Signing time: Fri 13 Jun 2025 10:00:23 +0000
Manifest this update: Fri 13 Jun 2025 10:00:23 +0000
Manifest next update: Sat 14 Jun 2025 10:00:23 +0000
Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: oaozXj3YAe5N2lVzCrCW8PYXj449fvNaL/cPms7F4AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:be:6c:72:c3:b1:45:a8:39:c0:1d:3e:a8:bf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Jun 13 10:00:23 2025 GMT
Not After : Jun 14 10:00:23 2025 GMT
Subject: CN=9dd82aedf7d23318cb59c042704416422f71dbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:f9:39:51:6c:e9:cc:5f:80:83:83:57:29:
5e:f5:68:68:a7:26:dc:33:2b:70:15:56:96:8c:f7:
11:7a:76:06:91:15:f3:92:4c:7d:a5:02:92:71:2d:
a3:f5:72:14:4e:9d:97:9f:b1:56:a3:d4:86:84:3a:
0f:22:f4:66:02:62:0f:50:12:c9:8e:66:fb:be:d3:
2d:5e:73:dc:18:68:a4:25:b0:49:a1:7c:74:b7:81:
b0:92:80:97:4e:ca:b7:9f:cf:86:5f:b5:8b:7a:ee:
c9:40:37:ff:60:8e:a3:fc:8d:bc:2a:d9:1a:b3:e0:
e7:3b:6e:80:dd:b0:6d:ef:5e:9c:3c:07:43:27:7b:
6c:87:f4:6e:21:8e:65:ac:38:96:99:62:8f:90:a1:
96:85:8a:9b:74:b6:26:28:75:be:94:d8:f4:1d:14:
e9:26:cc:36:c2:dc:cb:df:db:1a:97:83:92:8f:8f:
a9:af:8d:84:db:32:be:49:ae:f3:b2:59:2f:bb:78:
40:7f:dc:f9:a7:72:00:8e:87:48:0e:a0:2d:0f:e8:
7f:eb:e7:2c:e4:94:4b:a4:33:1b:4d:42:22:30:20:
48:da:00:b6:b6:67:0b:2e:8c:e2:d1:44:b3:a2:23:
3b:3b:34:6a:f3:51:f4:ce:57:8f:2d:39:39:2a:8e:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:2A:ED:F7:D2:33:18:CB:59:C0:42:70:44:16:42:2F:71:DB:CC
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:dc:b6:fc:35:58:49:0e:59:4a:77:fd:83:5b:97:7e:49:2b:
ed:5e:b7:ee:c1:58:bc:40:75:38:7d:b2:03:25:98:6d:45:28:
65:ca:ec:8b:76:82:e1:90:80:9e:13:8f:e0:cf:83:c6:40:b8:
b8:c8:51:6d:6d:0c:cd:6e:b4:31:e8:1b:fd:fc:94:bf:c4:08:
91:c6:a0:99:d6:09:d6:8c:6a:69:71:1d:44:e4:d2:8a:5a:d3:
8c:40:af:30:5e:0b:3f:66:44:b4:2e:25:f5:d6:84:04:1e:66:
84:0a:ed:d0:c5:30:28:27:c5:5b:b4:f6:98:b1:56:2a:17:83:
9a:b1:6d:a1:e5:e1:81:45:af:41:a0:6a:65:3d:0c:ac:d5:8c:
b5:e5:e4:41:f3:c3:78:cb:fc:c3:9e:05:04:ce:51:ad:49:05:
45:99:a6:bf:21:ab:bb:a0:c3:37:f8:6d:d6:63:c6:65:b1:dd:
ab:9d:ac:e0:c8:50:5d:0c:b1:c3:f0:cd:88:04:ca:7c:c9:0f:
5c:f8:75:8e:8b:b7:a9:13:e2:55:79:6d:77:ab:28:60:ac:f9:
1a:00:28:2e:0e:c9:64:db:5b:c3:4a:48:e2:4a:ef:1d:45:ce:
6f:99:09:e6:7b:27:73:56:eb:e2:b2:07:54:e2:ec:ac:4b:a9:
a3:5d:48:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:24 2025 by rpki-client