Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
File: hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft (raw, json)
Hash identifier: rm26aJBoYJ8sMShn27w5sRlC2BsgxTmppghwl8ntjNM=
Subject key identifier: AD:CB:AC:1F:7E:8B:1B:22:4F:1E:96:C5:59:0C:6E:8D:89:8A:62:BB
Authority key identifier: 85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
Certificate issuer: /CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Certificate serial: 019768BBB9D7DD32447D56972B19F8A7A416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
Manifest number: 0323
Signing time: Fri 13 Jun 2025 10:00:22 +0000
Manifest this update: Fri 13 Jun 2025 10:00:22 +0000
Manifest next update: Sat 14 Jun 2025 10:00:22 +0000
Files and hashes: 1: hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl (hash: WUko2WCISxR/meLAmOLzq6zf/10i81tXbgVLnEL4Ing=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:b9:d7:dd:32:44:7d:56:97:2b:19:f8:a7:a4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Validity
Not Before: Jun 13 10:00:22 2025 GMT
Not After : Jun 14 10:00:22 2025 GMT
Subject: CN=adcbac1f7e8b1b224f1e96c5590c6e8d898a62bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:cf:ee:d6:ac:ac:8b:fb:10:cd:e5:8b:25:
43:31:e8:b6:ef:32:a0:e1:63:24:e8:3f:7e:95:be:
c1:bb:29:65:d5:45:91:ce:16:cb:8f:ee:4c:e7:56:
aa:fe:01:d1:0a:1f:16:02:35:bd:72:c8:b0:fe:e2:
a5:16:95:9a:81:a1:76:85:f7:4e:e6:4c:a5:eb:6a:
a6:c2:e7:3a:1a:fa:49:1a:4e:9c:c7:d1:10:7a:d8:
a0:54:84:5d:42:9a:73:f1:30:46:a5:1c:d0:d8:bf:
2b:58:4d:7f:87:8a:b9:31:a5:ee:67:22:6d:6f:35:
48:60:dd:38:3a:a2:b6:1e:7f:83:6d:7d:22:2d:7d:
3d:7d:b3:7a:e9:1f:a0:9b:69:59:f5:90:f1:1f:cf:
a2:c5:1c:98:9d:0b:91:15:48:0c:3e:45:b9:d6:ac:
29:65:e7:ce:76:38:36:a0:c3:10:c8:08:98:f5:64:
f3:99:a3:89:9a:df:bf:5a:0f:97:69:aa:ef:e7:0c:
b7:9a:9c:5d:58:d6:93:3b:d2:8b:74:aa:72:31:b8:
d6:46:e4:1a:de:7d:13:01:94:e5:26:b8:c7:d2:c0:
fb:db:1d:f5:62:5a:36:f9:b1:da:01:e2:82:4c:08:
58:56:44:d1:0f:31:f3:ef:3b:db:84:ab:b2:bb:9a:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CB:AC:1F:7E:8B:1B:22:4F:1E:96:C5:59:0C:6E:8D:89:8A:62:BB
X509v3 Authority Key Identifier:
keyid:85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:07:ec:13:45:64:0d:72:38:09:65:e9:7f:a9:0a:35:15:17:
2e:b7:54:a2:f7:2a:6f:72:f0:06:f9:b7:c0:4a:da:ec:f9:05:
13:b6:54:50:89:33:20:b0:75:9b:7a:21:8e:ba:ef:77:53:80:
3f:7b:16:a6:df:e5:08:b1:7c:46:93:61:70:4b:9f:ba:00:bd:
b7:49:16:87:de:d9:a0:87:16:06:b9:21:38:4c:76:19:6f:41:
c4:2f:b6:b7:56:e2:8a:ac:dd:69:e8:37:67:c1:a9:d1:2f:37:
b4:e9:9e:77:16:61:97:6a:dc:81:83:85:4b:79:a7:93:e6:e1:
39:7e:b6:2a:64:cc:20:49:eb:8c:46:cf:61:da:8a:83:97:b7:
f3:d1:8e:ed:89:73:b9:e9:05:b3:6f:77:e2:21:ee:cb:c9:b9:
11:54:fd:d4:5e:89:08:18:93:64:35:7b:7d:40:25:48:35:ad:
00:ae:22:2e:af:b3:cf:03:47:a1:06:fe:a9:6d:81:af:e3:bb:
20:69:84:06:4b:64:87:a3:87:80:ac:3c:84:f2:9e:2a:e7:64:
89:96:09:07:92:bc:56:21:31:aa:b4:21:0c:9c:6f:0d:40:c1:
06:79:f0:22:83:50:2f:84:9c:74:e3:9c:f8:ed:cf:e0:61:de:
0e:a2:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:18 2025 by rpki-client