Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
File: hprNGeI6gWZEutDooSuG4SiK0zw.mft (raw, json)
Hash identifier: 4HqXSCzszNFaA+/G6YM8hoR3bUUaMlJ0ycDt+GrnCTI=
Subject key identifier: E8:11:1E:7D:7A:9F:4E:00:CD:69:22:0C:E5:2B:68:2D:D0:1E:D6:07
Authority key identifier: 86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C
Certificate issuer: /CN=869acd19e23a816644bad0e8a12b86e1288ad33c
Certificate serial: 01977AC2C471CF5130CAA2C2D0306AD83FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
Manifest number: 0F7F
Signing time: Mon 16 Jun 2025 22:01:13 +0000
Manifest this update: Mon 16 Jun 2025 22:01:13 +0000
Manifest next update: Tue 17 Jun 2025 22:01:13 +0000
Files and hashes: 1: hprNGeI6gWZEutDooSuG4SiK0zw.crl (hash: kNPZDCfBcpGZJoxmHlLMndDHvVpFlhApdyz+EVJ5/lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:c4:71:cf:51:30:ca:a2:c2:d0:30:6a:d8:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869acd19e23a816644bad0e8a12b86e1288ad33c
Validity
Not Before: Jun 16 22:01:13 2025 GMT
Not After : Jun 17 22:01:13 2025 GMT
Subject: CN=e8111e7d7a9f4e00cd69220ce52b682dd01ed607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:f8:a5:a4:d5:e7:79:47:3b:b1:b1:a9:57:
8d:4c:80:66:b9:cc:62:19:19:9d:a9:4d:39:72:7a:
9a:af:7c:da:5b:2f:0c:5c:75:69:99:e0:d5:48:0c:
6e:91:c8:e5:da:80:ea:f9:1f:fa:63:0d:0a:61:a8:
4d:cb:a4:23:d0:c3:26:13:dc:3b:77:41:71:8a:55:
89:36:e3:1e:d8:bc:2e:8e:f2:b5:79:c4:ae:4c:7c:
44:b5:bd:64:69:d9:5b:23:34:76:fe:fc:7e:f8:50:
50:2c:cf:07:96:ac:e1:44:a5:3d:d5:12:11:36:0b:
bd:5e:61:1e:49:69:c8:5e:4e:5d:4f:b3:55:25:67:
f4:95:e4:e7:0b:a7:e1:e6:50:a2:c3:00:52:55:22:
b4:e3:c2:b5:8a:e2:d4:fd:aa:f5:ae:9c:ac:64:0e:
a7:45:42:22:62:62:f6:3f:37:bd:07:90:1a:ae:38:
19:a1:84:45:2f:97:54:33:ad:2a:c2:b1:1d:47:f4:
02:6f:db:c3:57:36:bb:3a:7c:4d:ad:a6:e8:05:f9:
f5:39:37:63:4c:f1:45:b0:95:6f:20:c9:4d:5e:16:
18:c2:27:70:22:48:a6:24:5d:62:1f:7d:7c:6b:14:
c5:18:58:57:70:2a:44:0e:3f:6e:63:6a:1f:64:6e:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:11:1E:7D:7A:9F:4E:00:CD:69:22:0C:E5:2B:68:2D:D0:1E:D6:07
X509v3 Authority Key Identifier:
keyid:86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:84:0b:3d:ad:ec:86:0f:6c:30:0e:6f:29:f9:96:08:0f:8b:
0c:c7:54:23:a9:92:95:3b:07:e3:84:92:e8:6c:fc:75:76:1b:
1b:26:6d:9b:9c:47:3d:b5:41:ee:75:f5:1a:55:61:31:83:70:
5a:64:dd:f8:68:4a:d1:7f:8e:80:86:bb:44:6d:9f:ab:e1:d5:
5c:ce:12:53:ff:f3:43:b4:71:f0:e0:1c:10:dc:11:af:62:23:
3e:7d:06:81:92:72:b2:8b:ec:ef:cf:97:f9:51:2f:4d:39:02:
1c:67:38:c3:f0:85:5b:85:a5:6e:34:0e:ae:92:29:54:f1:f4:
4d:da:4f:7a:72:0c:87:9c:71:05:aa:10:75:4a:76:3b:eb:55:
76:3d:89:73:70:b7:11:b4:4e:a7:fc:bd:6b:75:24:50:f9:18:
05:19:c1:1d:0e:a2:a2:9a:91:e4:2f:0f:b3:07:16:27:bd:bb:
b1:6e:6a:6c:9e:98:a1:27:74:e3:28:84:70:7e:1a:e3:c2:a8:
70:95:a2:1b:92:1b:77:15:a6:10:64:3a:e0:00:c6:94:b9:2a:
ff:06:a2:c6:18:1c:8c:c7:c7:1e:72:94:7a:f8:a2:17:24:4c:
d3:64:26:9e:5b:fa:b2:ff:70:aa:bf:df:a8:15:6f:a3:b0:51:
1a:9e:e8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:18 2025 by rpki-client