Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: wzZDKGhH/RrI6zCdH/jIKt1tJa5PBlxSq7uXtOZXh9Y=
Subject key identifier: CF:50:B5:A9:C9:F5:9B:29:DB:74:B2:C3:B9:21:C2:1B:FA:A9:D6:26
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 019769617481B979A18C7338FEED38E40343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 0389
Signing time: Fri 13 Jun 2025 13:01:23 +0000
Manifest this update: Fri 13 Jun 2025 13:01:23 +0000
Manifest next update: Sat 14 Jun 2025 13:01:23 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: iHDqZ385eQblfPp6R/CRdP5O6bxS98Jr9j6g3V2Cha8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:74:81:b9:79:a1:8c:73:38:fe:ed:38:e4:03:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Jun 13 13:01:23 2025 GMT
Not After : Jun 14 13:01:23 2025 GMT
Subject: CN=cf50b5a9c9f59b29db74b2c3b921c21bfaa9d626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:f2:4e:66:a6:e7:b7:a0:bf:09:95:5f:13:
96:f6:92:28:29:16:8b:a1:69:4f:6d:73:27:cf:00:
1c:8f:a0:c1:b7:52:bc:28:8b:c0:a0:13:c2:2b:ee:
46:5d:3a:59:01:a7:f5:ca:b6:39:85:b0:d5:f5:65:
3c:e7:bb:f9:6d:e8:90:8e:1c:cd:8b:aa:07:a7:16:
9a:9c:fc:b2:d2:12:4f:eb:9b:17:b3:34:2b:de:3f:
51:5f:9f:9a:30:47:50:bc:67:bb:09:42:79:29:94:
44:d0:a8:f1:e4:10:7c:42:0e:9b:bd:69:32:20:30:
0b:47:73:69:b9:fc:14:a8:e4:8d:c0:b3:56:b2:f6:
dd:e2:cd:d6:0c:22:43:45:38:1f:14:4c:1d:4e:91:
58:08:98:8d:1a:f4:30:62:cc:08:88:93:c9:d6:53:
66:b2:06:cb:8a:e0:ac:90:fe:7f:9c:bb:55:c3:d5:
92:a8:89:be:ef:e2:d7:71:5c:0d:17:64:05:c1:f7:
9f:af:3f:c9:ed:0c:58:6b:68:d3:92:ae:18:f3:b0:
7a:68:12:d1:e6:de:d8:80:29:ba:64:a7:09:2b:b1:
d4:60:2c:0f:d1:f8:fa:8d:c5:49:70:bc:d4:23:ed:
5b:19:9f:7f:b3:94:3f:56:fc:00:ea:b0:c7:a8:24:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:50:B5:A9:C9:F5:9B:29:DB:74:B2:C3:B9:21:C2:1B:FA:A9:D6:26
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:50:9b:7c:89:3d:f4:63:c9:ea:ca:47:66:1b:e8:39:ae:da:
e0:83:2f:bb:0b:aa:92:ba:ca:80:40:d1:6b:c6:3f:6c:6f:82:
bb:37:6a:27:76:60:28:5a:bd:2d:57:ba:f2:67:75:15:87:d8:
f2:d3:a9:7f:39:35:8e:be:f6:0a:16:95:25:19:98:e5:dc:ae:
19:11:4d:ac:da:f3:57:62:38:94:04:c9:12:f9:9e:e0:27:c4:
04:a2:b7:f6:06:71:cb:88:da:ad:6e:a7:76:57:18:bc:7b:81:
0a:2d:e0:e9:d4:31:85:89:96:94:86:8f:51:18:93:ca:3a:62:
d3:a0:72:c8:19:f2:c7:2e:76:cc:8e:3e:78:6d:47:56:6c:a8:
38:3e:d7:3f:a3:bb:8c:1c:30:ac:b1:88:91:21:c8:78:15:87:
16:86:15:fa:dd:23:e6:13:90:11:82:3c:9f:d9:bf:eb:05:d5:
74:49:ba:4d:53:58:69:35:5c:2e:42:af:c6:d2:07:f5:cc:5e:
c4:56:ed:d8:5c:aa:65:0a:a4:31:78:b1:da:d4:c1:4c:27:da:
ae:96:df:d6:0c:05:48:21:29:bc:a0:ba:1b:af:7c:75:88:72:
e7:9b:3d:f3:38:6a:5d:f3:01:52:1d:73:77:ff:2a:d5:84:09:
1b:5b:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:17 2025 by rpki-client