Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier: shQa+4aZDZBxBswztQIXN2idLLtYg/FJ7lCLbIF3Lpo=
Subject key identifier: 7B:C5:4A:E3:DA:76:C5:0C:B3:F7:A4:9F:DB:22:1F:EA:E6:00:B4:21
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 01976D3DED4FBBC30B40FE4D8AA689AB59B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number: 0ED4
Signing time: Sat 14 Jun 2025 07:01:04 +0000
Manifest this update: Sat 14 Jun 2025 07:01:04 +0000
Manifest next update: Sun 15 Jun 2025 07:01:04 +0000
Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: 9eZv0Bni7xTmdMoBTzjckhJn7tfg5uQeACw8gidldvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:ed:4f:bb:c3:0b:40:fe:4d:8a:a6:89:ab:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Jun 14 07:01:04 2025 GMT
Not After : Jun 15 07:01:04 2025 GMT
Subject: CN=7bc54ae3da76c50cb3f7a49fdb221feae600b421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:04:7a:04:3e:32:d3:37:5e:e1:21:ba:01:
4a:92:5b:ec:1c:63:ab:77:fa:23:ce:47:4b:e9:88:
9f:53:de:85:ce:74:c1:fa:93:16:41:b4:32:22:0d:
94:01:ec:0a:4b:d3:d8:80:e9:ba:67:e0:12:34:bc:
d5:1c:d9:a9:c1:9d:69:4c:ea:a8:a9:5a:7f:48:4b:
8b:ec:de:6e:c6:55:18:ad:42:b6:46:87:f8:e8:6f:
57:05:4b:26:75:79:5d:7f:69:34:23:bd:80:73:1d:
89:31:f8:cf:81:42:a7:5e:19:63:a6:80:c3:98:48:
3a:93:f5:b4:19:40:8f:e4:07:23:33:8e:9c:ce:9c:
30:89:c1:dc:69:0b:33:8b:a1:95:f3:7e:d2:1b:40:
e7:58:4d:74:b8:67:2f:6c:df:fc:61:67:0d:b3:2f:
5b:83:2f:13:24:d8:fa:35:74:97:21:07:a0:c6:0c:
c7:d0:76:7d:75:de:fb:35:0c:73:bf:3c:b8:31:05:
6b:d5:4b:df:77:7c:63:81:e6:50:ab:26:cb:5b:7a:
9c:48:a6:6e:a5:9c:f9:10:a5:c5:0b:2b:79:d0:63:
91:20:42:47:e7:a5:55:d3:be:3c:40:c5:7d:22:2b:
a0:08:24:bc:9d:c7:fe:a7:d5:17:57:bb:7a:b1:5b:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:4A:E3:DA:76:C5:0C:B3:F7:A4:9F:DB:22:1F:EA:E6:00:B4:21
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:00:3d:c5:50:36:cb:93:36:c7:3d:e6:0d:81:ae:87:e1:60:
68:8c:56:ff:1b:60:06:49:24:30:06:b1:1d:9a:6c:dc:8e:f4:
ec:9b:3e:e7:cb:f0:0a:36:be:fc:d1:66:24:77:dc:a8:97:79:
1c:48:65:6b:0f:64:f0:fa:26:82:3b:f2:8a:11:fe:35:fe:17:
8f:c2:b2:55:a8:bf:48:46:ec:1a:4e:a1:a0:5d:2d:26:e1:43:
ba:9b:1e:92:8a:00:38:2c:14:81:b1:d0:7c:22:fc:9b:32:8c:
07:0d:3a:34:1a:eb:01:06:25:e7:5f:62:47:01:b3:a4:fd:dc:
1a:9f:91:8f:f1:49:d0:69:16:f9:9b:46:72:af:17:81:0d:52:
0e:17:c0:3f:dc:39:98:c5:e2:84:9b:a5:11:08:97:a0:ca:b2:
ab:71:25:30:d7:f8:81:d5:c2:a3:c7:df:ad:3e:45:6d:56:e3:
7e:cd:f0:7a:f4:cd:f7:a9:13:cc:c0:38:ea:a8:c4:a8:6f:c6:
a7:c1:f6:ae:0c:77:3a:7e:41:5c:b8:f1:63:26:bf:81:e2:19:
00:53:35:3f:5c:10:0d:ea:10:c9:76:5b:75:c2:58:0b:41:22:
41:47:ff:c1:be:72:4d:8b:32:27:60:9e:23:12:2f:86:d8:17:
b0:5e:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:11 2025 by rpki-client