Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
File: hkCo0qJ0maklfW7UZjoLMNob_jM.mft (raw, json)
Hash identifier: 5O0dLG6FYrQboOIm01YvfD83P6lQxyTwapxTUtP4LWs=
Subject key identifier: B9:EA:35:E0:1C:89:09:D9:A1:31:A9:30:2D:A8:4E:08:CC:CA:58:96
Authority key identifier: 86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33
Certificate issuer: /CN=8640a8d2a27499a9257d6ed4663a0b30da1bfe33
Certificate serial: 019847E4F36E7B34BD58C50375622FDB79C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
Manifest number: 09A7
Signing time: Sat 26 Jul 2025 18:00:43 +0000
Manifest this update: Sat 26 Jul 2025 18:00:43 +0000
Manifest next update: Sun 27 Jul 2025 18:00:43 +0000
Files and hashes: 1: hkCo0qJ0maklfW7UZjoLMNob_jM.crl (hash: pBt3CNcorG584CPwmTz3Hr5CcHHDVU4vASM+n94tokM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:f3:6e:7b:34:bd:58:c5:03:75:62:2f:db:79:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8640a8d2a27499a9257d6ed4663a0b30da1bfe33
Validity
Not Before: Jul 26 18:00:43 2025 GMT
Not After : Jul 27 18:00:43 2025 GMT
Subject: CN=b9ea35e01c8909d9a131a9302da84e08ccca5896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:1b:82:66:61:66:c8:82:eb:d8:92:f1:e2:
a1:79:ee:b0:34:73:8e:0a:b5:ba:7a:74:88:45:ca:
f9:4f:38:6b:5e:15:3a:d7:9e:56:4a:24:b4:c0:00:
28:24:5c:63:79:db:4b:4a:1d:39:8a:02:71:7d:c0:
e4:3a:40:7c:4e:3b:54:0d:c5:8a:b5:43:3a:26:48:
b3:cc:f3:67:6b:32:26:e3:05:cd:eb:13:5a:53:65:
3c:62:b6:f0:05:ba:59:ae:bc:71:45:50:6a:45:35:
fa:a9:a9:14:74:e9:1a:b9:3f:51:08:71:e1:fa:4e:
5a:71:d2:65:e1:a3:78:1a:b1:96:8b:a7:f7:d1:0f:
44:41:74:5e:16:bf:98:3f:97:a7:43:97:8d:5c:76:
83:65:86:07:01:3d:e7:4c:c1:5c:95:4f:c9:b4:85:
7c:6c:26:25:2e:02:28:e4:7d:1d:ea:d4:7c:71:f3:
5c:64:53:30:a7:b5:d2:97:c1:5f:9c:ee:59:36:8c:
25:f5:59:a3:fe:bf:86:de:de:ac:29:ce:4d:8d:91:
ba:62:65:78:b3:a0:35:78:1e:77:0d:77:40:34:f5:
1c:dd:af:22:a4:f7:3a:b2:9a:f0:91:85:38:ee:6e:
be:c1:8b:62:95:13:4b:83:b9:70:5e:03:a9:b8:4d:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EA:35:E0:1C:89:09:D9:A1:31:A9:30:2D:A8:4E:08:CC:CA:58:96
X509v3 Authority Key Identifier:
keyid:86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:59:b1:ac:df:67:b2:f7:88:95:98:88:c0:ba:72:eb:22:
58:d2:bd:88:73:62:cf:55:71:de:3c:4e:0f:aa:7d:ce:89:b2:
60:70:e2:c6:db:e4:8d:53:4d:d4:1b:20:33:27:a2:bb:b5:c1:
ed:57:7f:a4:39:55:34:f6:48:2c:8d:e2:47:04:ec:ba:d2:a1:
52:28:01:6f:e6:e9:75:25:d7:15:40:c0:46:a3:3c:6d:e5:0a:
2d:70:a9:e7:b7:81:ef:96:e9:51:f7:dc:ce:e9:8c:05:5e:86:
76:77:63:57:bb:3b:ef:35:d0:6a:55:d9:69:50:7f:c3:3f:a7:
62:bb:6c:07:a3:89:dc:cb:74:9c:8d:64:66:f1:1d:fb:b1:69:
59:5d:16:a2:e4:fd:11:85:11:00:5a:b6:c3:13:7e:5b:cf:76:
f2:06:7b:b2:2f:41:49:8c:f0:b6:2e:f4:4f:f8:93:b0:fd:7d:
2d:61:69:cf:aa:b6:95:f8:64:ab:88:a3:0e:89:5f:eb:2b:35:
4a:44:4c:a8:8c:75:98:1e:69:3d:a2:6d:b1:19:63:d5:ec:cf:
f6:2e:f2:d2:d1:ae:3c:41:4f:b4:45:06:14:5f:29:82:93:f7:
3d:e2:73:23:9a:6d:ee:98:f4:fc:d4:00:0b:51:15:6e:25:7d:
5f:41:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:45:32 2025 by rpki-client