Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
File: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft (raw, json)
Hash identifier: fNbclMIlL91ho6ruF7Fp1IJTJBeO1W6RHZ9NVsY69AY=
Subject key identifier: 1B:45:93:CE:6A:AD:F3:B8:73:EA:E2:DC:A6:37:23:43:F6:31:DC:69
Authority key identifier: 1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
Certificate issuer: /CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Certificate serial: 019848C0A27267EE483F47077918EE4B7AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 22:00:40 +0000
Manifest this update: Sat 26 Jul 2025 22:00:40 +0000
Manifest next update: Sun 27 Jul 2025 22:00:40 +0000
Files and hashes: 1: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl (hash: pFZ99vh3wXQ3kZSPI5ITlndJcsAJ0ZIzR+L05gp7T0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:a2:72:67:ee:48:3f:47:07:79:18:ee:4b:7a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Validity
Not Before: Jul 26 22:00:40 2025 GMT
Not After : Jul 27 22:00:40 2025 GMT
Subject: CN=1b4593ce6aadf3b873eae2dca6372343f631dc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:6a:20:15:e3:a3:d7:58:fe:8b:43:e3:9e:
b7:c2:35:c8:15:d3:27:7d:aa:65:db:aa:bd:b9:4b:
96:1d:44:17:cd:5d:ab:bf:dd:6c:92:a4:90:21:05:
67:85:ef:89:4b:df:5c:45:6f:53:5f:7e:a9:95:d7:
b7:a3:a2:ca:fc:82:a8:c8:66:05:f3:e7:15:5c:11:
21:c7:45:50:54:c2:c7:3e:71:6c:af:c4:06:ac:3a:
74:41:ec:4e:23:9d:2a:a7:14:4a:aa:5c:96:43:9a:
0d:7d:b6:af:35:c4:e8:93:9b:f4:96:b8:df:2b:ee:
74:89:ec:4c:c5:4d:3a:63:13:16:40:97:29:af:39:
23:54:39:33:e6:ea:e7:b6:39:88:5b:9f:a2:18:7f:
97:c2:51:7d:f2:b6:c7:54:d5:36:bf:7d:76:61:ad:
d2:1f:f9:ed:6d:76:a3:23:3f:c7:d8:f8:4b:99:e0:
9c:49:ae:c4:cf:5b:a7:69:e6:12:f6:98:a8:09:72:
f0:d3:69:92:6d:70:5e:f6:e4:2b:f4:f0:14:4f:21:
dc:01:cb:81:23:88:bc:6c:90:5d:00:30:e9:85:12:
55:09:b1:f4:40:d9:39:8d:b6:a7:36:81:c5:c6:6f:
97:9d:35:37:3f:e2:14:16:0a:b1:99:c4:c5:bf:ff:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:93:CE:6A:AD:F3:B8:73:EA:E2:DC:A6:37:23:43:F6:31:DC:69
X509v3 Authority Key Identifier:
keyid:1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2f:dd:e8:eb:65:44:fe:15:1c:06:d8:f5:33:25:3c:de:10:
56:bc:70:ff:eb:47:23:40:50:d2:88:56:9d:12:c1:46:52:b9:
5c:80:ca:92:0b:3c:68:fe:bc:69:e0:be:3e:0c:0d:1d:b8:ec:
78:e0:e5:35:07:ce:14:44:d2:5e:0a:20:c5:bd:aa:d9:ca:6b:
dc:a8:49:ed:a4:65:40:4e:be:19:37:c0:f1:fd:42:79:ba:c1:
18:37:70:01:b1:93:b7:d9:69:9a:44:2d:e2:33:e4:26:d0:42:
32:a7:e3:12:ae:bb:c2:7b:76:c0:d5:f0:63:ea:82:74:61:aa:
8d:ed:10:7a:74:ac:10:8e:30:53:b5:92:3d:81:46:a4:84:27:
ff:da:55:2f:f1:43:28:00:1a:ef:d2:8f:d4:bd:6f:78:9d:2b:
73:6a:ae:9d:5a:26:8c:23:82:32:cc:ac:6b:e4:7d:52:84:c6:
99:6a:c9:ff:ca:e9:c5:58:80:42:98:c8:7f:c8:05:ce:e6:e5:
1b:3d:b1:15:fd:92:35:5f:df:2f:dd:ee:e0:66:47:52:a8:22:
d8:2b:0f:24:44:5a:de:53:5a:c9:08:32:c7:35:a7:df:93:e3:
e7:86:40:5a:e1:e2:b2:8b:56:6f:f0:90:4a:10:e3:c4:1f:98:
68:35:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:53:13 2025 by rpki-client