Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: pPoPG26Tadhy1W+ktmG/mF6Rw04LRFSqLgu1gOFHhkE=
Subject key identifier: 0B:59:F6:E5:B8:2C:15:0B:E0:23:1E:8C:B2:52:00:5F:D6:7C:A6:46
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 0198530EEC941334E4674D9FF9D04D804A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 1602
Signing time: Mon 28 Jul 2025 22:02:23 +0000
Manifest this update: Mon 28 Jul 2025 22:02:23 +0000
Manifest next update: Tue 29 Jul 2025 22:02:23 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: PHcWVd48yky8g4LhVPlDkLtP8BfoVvjK02JX8WB3ESE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:ec:94:13:34:e4:67:4d:9f:f9:d0:4d:80:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Jul 28 22:02:23 2025 GMT
Not After : Jul 29 22:02:23 2025 GMT
Subject: CN=0b59f6e5b82c150be0231e8cb252005fd67ca646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:ee:3d:5d:b6:bd:bd:c8:b3:02:5b:53:28:
b2:c1:18:ab:02:b6:07:d9:03:33:e6:60:c3:ce:21:
02:3d:d9:51:89:19:07:5a:93:86:64:0c:eb:f2:6b:
93:c7:2f:c0:82:fa:c4:54:bf:f7:26:e6:fc:c1:03:
c0:95:b4:cc:61:8e:42:70:2a:5b:aa:fe:0b:22:39:
79:99:72:cd:4d:ce:ff:12:9c:3f:f3:3f:76:58:c8:
60:9b:07:7f:be:88:f8:90:16:15:de:91:ce:e4:f8:
0f:df:63:a9:84:8b:45:83:7c:53:7a:a7:52:17:63:
16:61:80:f2:8e:f3:67:89:39:7d:ea:6c:8c:38:da:
05:e3:42:fd:1f:97:9c:1b:d4:2e:3a:56:9c:9a:e5:
95:10:58:b6:25:56:12:d2:43:c6:65:13:22:d4:33:
3f:cb:30:65:b2:57:5c:ef:9c:d0:fa:03:a6:a0:c2:
0e:4b:4d:fc:c2:5e:cd:4e:e1:77:b6:78:8e:68:f5:
3b:7d:ea:e2:5f:15:82:7e:90:32:5f:c0:a8:d7:91:
f3:a4:a2:b1:4b:06:1b:0f:84:0c:fd:8a:8f:91:e2:
1c:ce:03:3a:4a:a3:9d:2c:32:0d:13:24:1b:90:2a:
c0:47:2e:c5:37:fc:36:6d:13:59:07:13:eb:1f:92:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:59:F6:E5:B8:2C:15:0B:E0:23:1E:8C:B2:52:00:5F:D6:7C:A6:46
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1e:f4:69:38:cd:02:ff:53:00:b7:10:8e:94:36:10:08:20:
88:10:03:8d:5c:a4:f6:15:42:6a:ad:59:c4:39:6d:ce:eb:96:
fb:da:47:93:30:e5:07:69:2f:66:98:33:df:30:65:ab:8d:80:
2f:e9:ab:cc:4d:fc:c5:e9:c3:2e:24:ff:47:be:58:15:85:35:
b8:34:dc:f8:36:7d:6f:24:e0:17:0a:30:23:a1:8f:1c:58:a5:
7a:c0:41:d0:9a:e4:d9:c5:54:79:10:33:84:d1:09:83:cd:db:
3c:45:1c:22:11:f8:f2:38:12:3c:48:3c:3c:bd:9a:a7:83:34:
8a:e3:a8:d6:91:41:50:ff:7f:86:49:25:7b:a6:3a:34:84:53:
da:38:43:98:fc:94:75:f1:44:ed:89:13:3e:3e:6a:5a:d4:c9:
2e:d6:65:20:ca:49:92:48:df:01:eb:95:34:ac:7a:e3:07:7f:
6f:71:12:04:6c:c9:0e:d1:54:af:1a:05:bb:2e:2e:e4:21:4c:
b9:10:00:5a:69:3a:52:de:c8:9c:7a:58:0e:5e:3d:38:7b:af:
9e:8f:c1:88:33:ff:9e:f7:31:1b:41:45:71:be:79:ca:0b:e0:
03:6e:c5:d1:b4:00:21:bf:c8:9e:35:eb:37:5c:c3:41:44:58:
fb:37:0f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:56 2025 by rpki-client