Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: eNbAR254I34PFIO3OZ7ltzlg4NQSzCbvjrujHr++Uow=
Subject key identifier: 61:20:C7:C2:C2:90:D6:9B:35:F1:94:29:42:34:12:CC:46:63:A2:B2
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 019873E40E80A31B59034EBD83A0CF2DAB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 0B0C
Signing time: Mon 04 Aug 2025 07:03:02 +0000
Manifest this update: Mon 04 Aug 2025 07:03:02 +0000
Manifest next update: Tue 05 Aug 2025 07:03:02 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: NMchHlosyzNPurE/Ij+2akNTyN3VyUJcfoKiIZorPd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:0e:80:a3:1b:59:03:4e:bd:83:a0:cf:2d:ab:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Aug 4 07:03:02 2025 GMT
Not After : Aug 5 07:03:02 2025 GMT
Subject: CN=6120c7c2c290d69b35f19429423412cc4663a2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:91:36:af:7d:5d:fb:33:08:90:6b:83:d7:
41:26:9b:8f:93:6c:0e:1a:49:c6:7e:66:fe:06:5b:
49:1d:28:ec:d5:65:29:4f:21:1a:d4:fd:3f:c9:d2:
6c:01:dc:55:a4:2a:a8:57:9f:9f:6e:4f:60:05:b1:
16:0f:6c:c0:8d:9c:be:0a:f4:94:93:01:c6:de:a9:
e4:1e:1f:7f:09:09:cb:86:2f:fe:d0:30:16:55:78:
ba:4d:98:dc:1e:06:2f:1a:af:50:ba:b0:47:7f:f7:
3a:8c:4b:cc:29:30:eb:84:b9:b9:0f:09:61:7d:50:
86:bf:84:43:ab:a6:de:19:0e:85:0c:7c:54:aa:22:
8a:a4:63:85:b8:9f:ae:96:05:0e:3a:a6:0c:65:62:
b4:f4:41:80:39:a8:f0:cc:55:03:1a:73:db:d2:ea:
b0:eb:f4:9a:42:a6:ae:f8:59:b1:6b:e3:e6:2d:32:
78:ad:41:af:e2:84:7f:c2:4a:a4:4d:07:12:11:2e:
c1:da:f9:78:28:c6:aa:3d:04:af:6c:85:a7:b7:c6:
60:03:b3:38:08:9b:c3:df:5b:59:5c:4c:32:6c:3c:
25:e6:bc:5b:55:94:3e:cc:9f:6e:af:d2:6f:e3:28:
a5:39:48:1d:40:38:59:86:07:ca:ae:08:f8:c1:c2:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:C7:C2:C2:90:D6:9B:35:F1:94:29:42:34:12:CC:46:63:A2:B2
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1c:cf:79:65:5b:f1:74:2e:3c:38:f0:2a:0a:84:b8:54:3f:
ac:b2:41:54:43:a7:28:64:d4:b9:02:27:3a:a3:b1:7c:2b:b1:
65:39:71:ea:7d:38:c0:34:ec:5e:31:1b:d8:16:56:6b:8d:90:
ce:4f:1f:fc:bd:32:79:2d:36:a3:25:04:72:a4:31:96:44:79:
a0:98:59:e2:20:86:55:fb:d5:a9:b9:68:71:0b:86:78:5c:9b:
ec:7a:45:86:8c:9f:80:67:47:2d:23:73:0f:e0:37:01:ed:77:
4a:17:97:88:8e:12:b8:bc:63:e9:a2:6a:ba:7c:95:cc:d9:5f:
7f:bd:1b:89:40:90:8f:93:0e:b4:63:8e:0c:9a:8a:51:ec:7a:
6b:4d:f1:de:25:50:93:da:e9:bc:bc:2d:6d:02:f0:2b:a1:63:
b2:a4:61:0e:91:bd:68:fd:f8:a1:db:3f:cc:22:58:5a:46:71:
0c:27:d6:b6:c2:af:c2:b6:00:14:80:08:18:31:58:c3:97:47:
c9:ba:54:4c:7f:e9:4c:3f:40:eb:5b:a2:8b:37:e1:1d:d4:fb:
df:fd:61:ca:03:ad:2f:01:c9:76:f5:31:40:84:2f:4b:f1:97:
d8:6e:cf:c7:53:b9:07:a1:94:80:3a:6f:40:74:6c:2f:33:0b:
e6:0e:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:24 2025 by rpki-client