Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: kTt7dJWrZtNmhKxRDN5mJ97dKQA3JbUf8ooazdoV4sQ=
Subject key identifier: 5E:CB:A0:D8:5F:66:C1:73:0C:BD:87:1E:BC:25:36:36:BE:AE:E6:29
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 019849650E0FDAE4EBA7A71891F8DA1BB823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 1233
Signing time: Sun 27 Jul 2025 01:00:16 +0000
Manifest this update: Sun 27 Jul 2025 01:00:16 +0000
Manifest next update: Mon 28 Jul 2025 01:00:16 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: FyauFg2obGtB5Oh2HIoYBN3R8VUGniwi5I5KwD1OYYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:0e:0f:da:e4:eb:a7:a7:18:91:f8:da:1b:b8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: Jul 27 01:00:16 2025 GMT
Not After : Jul 28 01:00:16 2025 GMT
Subject: CN=5ecba0d85f66c1730cbd871ebc253636beaee629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bc:46:45:ab:39:94:aa:4f:51:17:15:75:0d:
7f:6e:5d:6b:e6:1d:35:cb:63:db:69:7d:60:52:24:
87:71:4c:a5:22:ab:33:4a:7f:d2:53:b6:ef:90:5f:
11:98:d4:98:d3:ca:de:1a:19:c4:75:81:c0:e2:a1:
79:9e:6b:fd:6f:08:74:eb:b7:5d:53:7f:55:2d:57:
7d:6f:5e:19:ef:55:ad:ec:0e:f5:5b:ca:f9:e6:e5:
71:46:9f:ed:36:69:db:fb:e9:c9:30:81:a0:22:69:
7c:fd:4a:5c:cc:b8:b8:dd:d3:22:8d:d0:5b:85:f0:
6d:02:b7:7b:3d:af:b6:ba:8b:93:47:4b:c5:0a:bd:
17:bf:5b:74:af:ec:67:ee:e1:20:f2:fa:11:42:28:
16:99:b0:20:aa:e5:96:4d:e5:bf:29:67:07:5e:ad:
ec:61:89:38:74:62:83:4d:99:85:cb:4e:79:d3:f7:
f2:48:10:76:a1:8a:1f:37:6f:25:87:a7:d5:84:fb:
da:b9:82:35:76:a4:4b:7c:f2:80:91:1c:04:17:62:
71:6f:bf:f0:8a:60:42:3f:ae:fc:7a:4f:7a:1b:3d:
6f:bf:d3:f9:84:b8:07:a0:c9:e5:5f:bc:1c:a7:08:
88:b0:0f:62:b6:43:8d:16:ee:ea:de:6c:1a:c4:15:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:A0:D8:5F:66:C1:73:0C:BD:87:1E:BC:25:36:36:BE:AE:E6:29
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:50:42:09:34:ed:95:b7:a5:9b:0b:88:a1:f6:6f:ce:c2:b6:
52:c6:23:f3:d1:8f:a8:bd:b9:26:72:81:c4:c0:24:5f:09:2a:
c2:28:63:0d:a2:71:67:17:3f:45:ff:40:19:30:69:e4:c5:a6:
a4:59:ba:20:26:bd:e3:8e:34:34:b8:b5:48:a1:e4:e6:bc:c5:
2d:20:3d:09:c6:37:70:07:dd:07:d5:0e:60:4e:92:06:b9:92:
bd:c9:12:08:6b:fa:50:4b:11:df:ac:a7:e8:16:fa:64:b9:ad:
29:18:d0:70:6b:b5:71:63:d2:7c:a1:16:8f:c0:76:92:2d:a6:
57:64:3a:00:b9:ae:6a:61:b5:33:09:f0:d8:16:19:30:ab:e5:
92:9c:cf:02:15:55:b6:cd:48:40:ff:1e:1f:a3:da:ab:79:a0:
52:e2:f3:74:bd:98:4e:0f:5c:aa:4c:ee:ff:a1:01:1e:f2:2f:
67:57:64:3d:67:27:62:2a:1f:69:ce:82:19:09:40:4c:94:b8:
42:10:3c:f3:96:08:be:ff:b6:29:9d:70:3f:11:0a:d3:68:d3:
e1:ef:51:a8:10:39:5c:53:ae:ac:10:0f:13:da:04:76:e8:d5:
20:e5:b0:19:05:06:8b:35:4e:5a:4b:2f:45:67:d6:00:79:b2:
24:06:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:43 2025 by rpki-client