Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: EN5JCncMYjz38pDXwx+ckE0GIMfVp6B1FpJr7exKvcs=
Subject key identifier: 67:0C:B9:F8:3A:A6:A0:1E:1D:E7:87:7B:BD:11:08:65:C7:4B:0E:48
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 01976DAB45BE8C86BF5303FA559377D0D53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 08D1
Signing time: Sat 14 Jun 2025 09:00:30 +0000
Manifest this update: Sat 14 Jun 2025 09:00:30 +0000
Manifest next update: Sun 15 Jun 2025 09:00:30 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: w3MiOQ/GKW721xSThwoxO7VyuX3w/jM+FxLbEsqCy00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:45:be:8c:86:bf:53:03:fa:55:93:77:d0:d5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Jun 14 09:00:30 2025 GMT
Not After : Jun 15 09:00:30 2025 GMT
Subject: CN=670cb9f83aa6a01e1de7877bbd110865c74b0e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:8d:c6:74:12:c4:2b:a3:6a:d6:6b:b4:69:
38:1d:f0:7b:37:97:de:8b:01:19:45:a6:4f:00:b1:
9e:bd:ff:12:22:1a:d5:54:96:f2:d6:fd:16:37:73:
e6:a1:3e:86:70:fe:82:dc:a7:ed:58:64:25:23:a5:
20:ca:34:2d:f7:f3:1d:30:67:93:f8:7b:47:fb:74:
81:40:c8:fb:54:45:d7:3e:41:4f:74:cf:56:cc:86:
a8:8b:b4:83:00:69:86:da:24:65:17:69:e6:14:dc:
cc:66:36:3a:fe:06:67:2a:58:a3:a4:9e:28:f0:dc:
9e:ce:3d:0b:18:b1:c4:aa:f8:9b:85:5c:0a:5a:1a:
a9:d6:65:1d:2b:00:4e:04:b3:ac:3e:6d:3a:7a:6b:
ea:15:f4:12:f3:f6:7f:1f:59:2f:f0:f1:51:fb:cc:
d6:9c:ed:a4:93:29:67:ea:f4:89:b6:0a:9e:2a:6c:
16:e9:2b:fb:5d:1a:2f:09:2a:f5:d3:56:cb:24:92:
ee:49:37:4d:09:9d:47:06:66:90:dc:cf:be:14:b1:
26:39:bc:2c:55:06:0d:e6:f4:b7:0e:4d:3c:27:ac:
ab:4f:f1:27:92:7e:e6:c5:48:87:a2:a3:cf:39:2f:
23:0a:e6:b1:97:0b:80:c1:cf:40:70:7c:cf:51:51:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:B9:F8:3A:A6:A0:1E:1D:E7:87:7B:BD:11:08:65:C7:4B:0E:48
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6a:7c:cb:69:44:43:c8:3b:34:85:e3:71:19:ab:81:92:c6:
d2:51:34:7a:2e:cb:9c:b7:1e:8a:b6:6b:ab:a6:b9:be:09:93:
ae:ab:3e:cd:44:f9:c4:e8:bf:73:5e:95:5c:dc:87:cd:f2:66:
56:94:d7:2f:90:87:7a:15:62:af:b1:aa:f8:4b:7a:83:f7:4c:
e7:f9:c5:ad:b3:df:71:7d:f5:e2:9a:b2:06:18:a9:8e:ef:c1:
7c:ff:c6:8f:44:b9:6e:db:00:51:09:fe:b4:40:ad:06:5f:23:
a3:95:91:33:e8:41:97:e1:9b:5c:a8:9d:f8:5d:55:85:df:a7:
15:4e:14:86:56:72:a3:22:ad:78:29:a3:1d:89:4b:49:69:c4:
49:95:c4:14:5e:48:96:af:bf:22:9e:6f:d9:0f:90:8f:d2:ee:
70:36:e2:df:92:51:4c:ad:19:f8:3d:2a:bd:a7:81:5d:b3:ad:
b2:7c:b7:76:7d:3b:89:63:02:59:8f:0f:ac:d9:cb:cc:43:86:
f5:fb:62:b8:67:a4:0d:f8:0e:8b:e7:86:c7:60:05:63:06:c3:
d9:f3:d9:76:bd:4a:42:1e:47:af:e6:07:e4:b9:9c:36:49:38:
45:d8:53:09:10:95:4d:3a:fe:07:72:fc:d2:a4:77:3f:96:ee:
27:c9:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:02:44 2025 by rpki-client