Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
File: HzjUsMuomcJPTjQHOE1tP6jVGl8.mft (raw, json)
Hash identifier: s6K3p3HSWe1SImEgX+MLeTyQwpLOxoCdUTfMQttQm74=
Subject key identifier: 67:01:E9:AB:11:FD:E9:1E:86:98:6A:D4:D7:BA:7F:57:4B:A2:1F:CD
Authority key identifier: 1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
Certificate issuer: /CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Certificate serial: 01976F9A2C9867C4FECB83B037B939FEDCAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
Manifest number: 035A
Signing time: Sat 14 Jun 2025 18:01:04 +0000
Manifest this update: Sat 14 Jun 2025 18:01:04 +0000
Manifest next update: Sun 15 Jun 2025 18:01:04 +0000
Files and hashes: 1: HzjUsMuomcJPTjQHOE1tP6jVGl8.crl (hash: H6W5iYGNjkTbugXeiEXTEAdgeYhfmngb6U7GpizBqmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:2c:98:67:c4:fe:cb:83:b0:37:b9:39:fe:dc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Validity
Not Before: Jun 14 18:01:04 2025 GMT
Not After : Jun 15 18:01:04 2025 GMT
Subject: CN=6701e9ab11fde91e86986ad4d7ba7f574ba21fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b6:29:41:0a:13:5b:09:1d:f2:35:fa:96:a2:
d7:c2:2c:ba:11:0d:37:20:90:53:30:77:45:29:84:
86:1c:58:e6:77:af:30:c8:60:26:f6:f4:e1:a5:c7:
c9:5f:42:7e:63:90:d5:63:68:84:59:51:43:bd:17:
50:b7:83:a0:e9:e2:0b:a8:4d:ce:de:fc:de:a4:c2:
a9:24:71:dd:30:5b:2d:2c:17:b6:53:48:23:8f:bf:
63:c7:4e:c1:c7:40:32:65:60:02:2d:9b:9f:ae:2e:
6a:f3:20:d0:5e:74:14:b7:eb:a0:2f:7d:19:35:25:
bd:9c:c5:24:da:eb:fa:63:86:79:dd:a3:b6:d0:5d:
ed:51:23:ea:41:81:a2:7d:91:1f:15:bd:af:42:38:
47:9f:16:7c:2b:22:15:2e:3d:ab:12:51:a0:9f:d3:
9a:8d:a1:8c:af:62:da:46:f0:ee:31:f8:d3:37:47:
e8:d5:a6:32:38:e3:d1:e7:84:ce:a4:1a:24:7b:3a:
14:9e:ee:be:64:21:2a:75:7f:30:01:31:48:19:f4:
b2:c7:8c:b4:98:b9:1c:61:05:49:62:65:52:3c:d4:
db:b5:72:76:cd:76:6b:43:9c:59:26:25:c3:16:10:
8d:8e:52:81:21:06:ae:3a:4a:70:0d:9d:74:0d:69:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:01:E9:AB:11:FD:E9:1E:86:98:6A:D4:D7:BA:7F:57:4B:A2:1F:CD
X509v3 Authority Key Identifier:
keyid:1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:99:78:12:37:0e:ef:34:44:95:8c:24:90:c7:13:00:a3:f1:
3d:06:66:45:6f:e7:4e:ad:4a:7f:16:48:fa:95:b2:5c:d3:b3:
4a:2b:0f:10:16:d3:f3:85:10:eb:6a:81:ab:52:54:2d:c4:bc:
2c:ef:f8:db:1e:05:57:63:02:d6:19:d6:00:01:f5:17:36:45:
c5:97:f3:de:8b:10:02:63:5e:42:cb:03:d8:04:73:63:c2:43:
21:d0:c4:ef:63:af:40:a9:41:f1:bb:02:83:7d:e2:17:e8:a8:
28:08:3d:0c:45:09:35:87:7e:52:e2:2d:de:f7:16:d7:cc:3d:
e1:29:bc:df:a7:8c:af:e2:67:93:24:cb:1f:b0:96:a4:d2:3d:
08:7a:57:6c:e1:ec:7a:d5:95:5a:6a:a8:05:de:70:21:a1:ad:
61:31:5b:21:d8:b3:c5:53:8a:a6:d5:ed:d8:c3:04:f0:86:cd:
e3:05:ee:73:0c:24:47:55:20:f1:96:f8:98:dc:94:2c:ce:44:
9e:01:21:ea:5c:2a:4b:55:8b:a2:9d:fc:51:ea:3e:b9:7c:56:
88:cf:ab:eb:e9:75:77:d7:d9:4a:9a:f4:b7:b7:1a:30:82:b6:
63:a8:fe:b2:05:85:a1:fd:24:f9:3f:16:45:db:bc:2a:f7:a7:
2e:e9:c7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:35:45 2025 by rpki-client