Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: ZwOYo12bFChg/Cgb/TGDl281QQKtCtfmgF8KDYofiY8=
Subject key identifier: B4:E6:51:BB:2E:0F:0B:D6:CE:69:9D:05:21:9E:F2:5F:E3:EF:D8:C4
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 0197711ACB1857A999D131114C996C5C323A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 158D
Signing time: Sun 15 Jun 2025 01:01:10 +0000
Manifest this update: Sun 15 Jun 2025 01:01:10 +0000
Manifest next update: Mon 16 Jun 2025 01:01:10 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: WZam2v1HSqllQPV4uff5sqMjwOrrDa4zoBqjAU6rc0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:cb:18:57:a9:99:d1:31:11:4c:99:6c:5c:32:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Jun 15 01:01:10 2025 GMT
Not After : Jun 16 01:01:10 2025 GMT
Subject: CN=b4e651bb2e0f0bd6ce699d05219ef25fe3efd8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:34:e3:06:37:65:3a:e9:a7:79:24:c6:b2:
40:88:c1:b6:db:e0:0f:a6:b6:f4:c1:c5:30:8c:87:
d1:e4:ef:12:1e:26:84:7c:13:36:2a:e3:38:72:bc:
06:93:ed:25:70:a8:2d:98:f8:18:0b:fa:9a:de:73:
60:6f:b4:72:e3:00:b6:a8:02:7c:dd:f8:be:df:a1:
bc:cf:83:2d:5c:ac:b7:e8:6f:8f:44:0e:e9:9e:ce:
87:d0:fa:59:6a:fa:eb:ee:fa:08:92:52:e0:b4:1e:
a3:61:7c:73:93:79:3a:a6:49:59:ee:d9:40:8a:4d:
1a:07:31:ea:c0:e5:d4:6c:5e:16:d0:95:60:de:5a:
10:a4:1f:16:e7:9c:0f:cd:ef:3c:81:fb:21:5c:96:
81:47:8f:ec:15:c5:ad:37:08:9e:3e:c5:11:8e:5c:
b9:a6:62:e3:a0:d6:e1:38:4d:18:5c:59:c2:4a:31:
9e:1a:b3:22:73:a9:cb:b2:58:a5:39:12:f4:01:7e:
05:fc:78:27:37:f1:ed:8b:c3:ab:15:02:e9:54:5d:
ef:0d:c3:15:cb:ba:04:6a:ae:23:77:ab:fd:36:6c:
93:12:a2:30:a0:b1:f7:8b:e0:13:6d:46:02:32:ac:
5f:60:17:3c:c5:46:cb:69:9b:e4:00:3b:1a:dc:3b:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:51:BB:2E:0F:0B:D6:CE:69:9D:05:21:9E:F2:5F:E3:EF:D8:C4
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:3a:d4:2b:d8:7b:05:1f:3f:0c:21:35:5b:b6:d8:2e:d6:
e4:56:bf:1e:0e:b1:70:c6:be:79:c3:80:93:45:5b:16:cd:b4:
f1:f1:84:ae:68:dc:c7:b7:5f:62:66:06:d5:5a:05:51:63:b6:
4b:19:14:9d:e5:3a:0e:a3:83:ce:51:92:19:b5:e8:80:d1:1e:
65:da:e6:e5:e6:6f:5e:0f:f5:9f:2d:b8:7a:c5:7b:cf:8f:09:
61:ac:9b:b8:dd:ba:20:fa:ef:1e:61:53:af:37:58:73:7a:67:
81:42:e3:c9:04:81:e9:3e:8b:81:e3:b0:aa:e8:03:6c:f0:62:
d6:85:07:ec:06:50:0f:25:9a:b2:5f:47:c9:bb:d1:30:1f:16:
e9:a3:13:1b:f7:fc:43:cf:1e:b6:1e:68:c3:e7:cf:8b:a0:86:
4e:2c:8c:81:7c:4f:58:07:8b:57:88:37:e4:d0:24:52:98:03:
3d:89:a8:64:9f:0a:bb:04:c1:e7:27:81:a0:24:30:43:89:fc:
70:d7:eb:51:e8:97:37:e4:97:ce:90:d4:ca:e5:8d:30:62:cb:
7d:df:ec:62:d2:27:5e:72:7a:5e:42:cd:6a:1b:30:29:9b:6a:
be:00:d6:57:ed:cf:46:df:46:8c:00:b7:e4:47:b3:49:93:7b:
44:7e:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:26 2025 by rpki-client