Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: CwSsS8gJ+WeeBxqDwJHRqj7FNyufZM2CW0tIo+2vJsQ=
Subject key identifier: AC:5C:27:DF:24:8E:B1:26:A1:2F:CC:B3:CD:49:40:F2:31:58:27:04
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 01976F2C7BEA26936A226DF4E16FB27DC04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 0A85
Signing time: Sat 14 Jun 2025 16:01:15 +0000
Manifest this update: Sat 14 Jun 2025 16:01:15 +0000
Manifest next update: Sun 15 Jun 2025 16:01:15 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: RaHHzZdQBW/5WAXoQfJyrOby1bKk+CRGRIXzfBi3iIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:7b:ea:26:93:6a:22:6d:f4:e1:6f:b2:7d:c0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Jun 14 16:01:15 2025 GMT
Not After : Jun 15 16:01:15 2025 GMT
Subject: CN=ac5c27df248eb126a12fccb3cd4940f231582704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:18:eb:a9:ed:17:16:0a:be:85:fe:fe:9d:
c5:0b:87:b5:84:f6:02:c9:59:9c:17:f1:a6:8f:45:
ed:97:94:93:a8:05:4b:65:bb:ad:24:9e:9b:c8:a7:
c8:06:07:d4:c6:c7:9b:cc:a1:dc:d2:cc:51:ec:05:
b2:49:56:da:7e:a2:1b:65:9c:02:45:c9:4f:d7:fb:
c3:2a:e2:dc:a0:f3:44:06:81:fe:bc:fe:32:79:2f:
0c:4f:fe:33:91:fc:63:a8:01:2e:c0:d6:17:39:8b:
7d:e8:64:63:7b:f5:3e:dc:80:99:b8:a8:c0:87:4c:
8b:4f:69:42:26:ef:4a:30:19:62:47:23:1b:c1:25:
3d:56:14:7c:00:df:35:45:8d:8e:38:22:d0:5b:5b:
d4:66:b9:c5:d5:32:9f:b6:6a:9f:46:50:a6:61:cd:
db:df:ce:0a:48:dd:55:fa:ae:d1:d3:8c:30:a8:03:
39:91:bf:0b:08:a5:b5:69:f0:89:8f:e4:bd:2f:42:
50:a9:b5:a2:56:a1:13:80:78:f5:0d:3c:f0:2c:9e:
2c:70:33:04:f1:c8:44:76:43:5b:c5:f7:1f:37:f5:
95:0e:c5:24:50:aa:96:66:3f:27:84:23:01:20:b4:
21:9c:55:d7:8c:50:6f:94:d3:42:f7:ab:b8:38:43:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5C:27:DF:24:8E:B1:26:A1:2F:CC:B3:CD:49:40:F2:31:58:27:04
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:58:e6:78:6f:b7:03:1d:fd:05:94:29:b6:79:59:6f:68:a9:
a1:bb:91:ae:d7:5a:98:4f:db:ca:29:e8:bb:36:e1:47:35:59:
bf:53:e4:cd:bf:e4:1f:41:40:70:c2:d5:49:82:c0:0d:36:5c:
42:cb:72:73:c8:44:78:ae:42:8a:d3:9c:f1:54:c1:ad:7d:e2:
e2:10:76:ca:2f:ab:2c:f5:aa:94:0e:ac:79:da:d3:a1:1e:1f:
42:cc:e4:8d:30:2c:e9:3f:05:87:23:e7:34:85:b2:e4:1d:41:
bd:5d:a7:3a:59:97:a7:da:82:49:2b:23:50:fc:9f:88:5f:7b:
ad:51:6a:2e:91:e7:75:79:d3:04:83:e0:17:e6:32:3a:4d:ed:
80:5a:b4:4d:61:92:d5:8f:75:bb:fe:06:8c:b7:89:b2:80:21:
e1:82:8c:b1:dd:7b:97:d1:7d:b8:61:3f:7a:ba:1d:06:8d:2f:
76:9b:d8:d8:59:d9:b6:8f:7e:d4:75:dd:9f:31:78:37:11:1a:
24:51:0f:4c:b8:0d:08:b7:3d:5d:85:ea:b0:18:3d:80:79:d0:
16:72:fc:d1:d4:37:ae:ac:4b:76:1d:b5:26:e6:9c:a2:b6:b6:
d9:97:d3:66:31:fa:3f:d7:6d:0e:38:77:ab:eb:e4:4a:1d:77:
7c:93:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:24 2025 by rpki-client