Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
File: a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json)
Hash identifier: xwSX/w1JWU1QB2D5+qY5nECibuuLvmZ8aLk5nfsmn1Y=
Subject key identifier: 45:B5:22:D5:C3:5F:30:12:D1:8C:8C:06:CC:AF:87:55:A7:0F:94:0F
Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
Certificate issuer: /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Certificate serial: 0198526817EF53C94CC02EC0C38BED96B5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
Manifest number: 0C9C
Signing time: Mon 28 Jul 2025 19:00:10 +0000
Manifest this update: Mon 28 Jul 2025 19:00:10 +0000
Manifest next update: Tue 29 Jul 2025 19:00:10 +0000
Files and hashes: 1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: Hkm0F7VdGb/5KjpaNek9JWoqceKYLQiu0RD/QmrYXXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:17:ef:53:c9:4c:c0:2e:c0:c3:8b:ed:96:b5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Validity
Not Before: Jul 28 19:00:10 2025 GMT
Not After : Jul 29 19:00:10 2025 GMT
Subject: CN=45b522d5c35f3012d18c8c06ccaf8755a70f940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:d4:3e:c9:c6:5a:e8:68:26:2a:23:58:83:
78:37:97:54:da:86:0d:23:65:e5:18:32:7b:87:2c:
b7:aa:9c:12:a4:82:e8:20:50:30:25:3a:aa:a6:0c:
e3:8b:8e:1a:2e:64:fd:94:d6:22:01:a4:37:87:ae:
6a:43:55:37:31:77:e1:a7:0b:0c:bf:b3:23:32:49:
5c:08:eb:35:b4:fb:ab:7e:2f:b0:23:1b:01:7e:47:
35:b7:94:3f:1d:6e:87:bd:5b:f7:1a:90:ba:e9:46:
3e:67:98:46:67:17:89:a0:e0:25:79:b0:0d:3f:f3:
df:10:97:8e:57:36:f2:1f:1f:04:f5:a1:8b:61:f9:
42:3c:66:d7:0d:7a:49:3a:5e:b9:87:e2:7a:be:68:
29:4d:c2:f8:9d:7e:64:32:45:82:a1:ff:1b:be:c2:
fe:eb:5d:a7:5c:fa:7e:6d:9a:d9:5b:86:cb:56:ce:
01:de:f4:44:11:a8:b9:8c:36:5b:dc:92:89:e1:9b:
ed:80:ad:43:53:7d:0f:b1:38:40:89:1c:37:00:db:
c6:73:3a:4f:60:06:4f:42:f3:5b:21:a5:a0:6d:bd:
a3:e4:7f:e7:55:d6:0d:be:74:98:77:7d:e1:d6:ce:
e1:c6:7a:d9:0f:c3:70:5c:04:93:3a:49:68:fe:6f:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B5:22:D5:C3:5F:30:12:D1:8C:8C:06:CC:AF:87:55:A7:0F:94:0F
X509v3 Authority Key Identifier:
keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8d:ca:3d:57:0b:6e:24:51:b1:18:e6:06:d6:21:74:73:79:
24:f6:e4:05:03:16:d6:bb:96:8b:75:4e:cc:df:fd:9f:55:0d:
7a:85:53:a6:9c:35:55:95:85:98:e7:8b:39:21:e5:16:66:41:
08:16:a5:2b:a3:d7:71:7f:3f:dc:70:ad:22:f8:50:91:67:38:
ef:5f:76:3b:5a:40:39:84:ae:d8:ed:35:f2:3d:74:04:df:a4:
45:72:9d:ff:22:92:cd:a1:80:71:88:0d:b1:ce:21:f4:84:84:
3c:5e:09:db:6b:44:66:9e:1c:0b:f1:83:8f:fb:a4:9a:1d:9c:
ca:3a:dd:dc:b7:d9:5c:42:66:a8:3b:df:51:08:4a:d8:97:5f:
5d:b6:2c:9c:49:c0:b5:ef:e8:58:c8:aa:3f:e1:ad:19:c1:95:
8a:88:14:a5:38:3c:bf:b6:d5:f1:4f:db:7c:66:62:a4:e1:40:
8a:fe:21:d3:96:e7:6e:b8:3f:b4:3f:ec:b8:3c:d8:2d:38:0b:
38:7b:a7:c5:31:cd:8b:c3:e3:bc:99:6e:23:0f:37:f3:2d:43:
f3:38:43:05:a6:85:89:d1:9e:f5:fd:8f:83:59:bf:90:c5:a2:
4a:83:8b:98:a2:27:20:6e:ca:35:e6:17:d4:99:49:a5:05:8f:
1f:33:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:50:11 2025 by rpki-client