Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
File: hFNK68PtnHkETCI8iyXgEdq_L98.mft (raw, json)
Hash identifier: iVGtA4w66uKWmvn/BEc9ogJ4RE/afkBwlQwDkYxbXaE=
Subject key identifier: 18:69:CE:88:8A:70:33:41:0C:9A:AF:5B:1B:63:67:DC:76:77:B9:D4
Authority key identifier: 84:53:4A:EB:C3:ED:9C:79:04:4C:22:3C:8B:25:E0:11:DA:BF:2F:DF
Certificate issuer: /CN=84534aebc3ed9c79044c223c8b25e011dabf2fdf
Certificate serial: 01984A0A0BBEE7823DF3BD242A58254AE0D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFNK68PtnHkETCI8iyXgEdq_L98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
Manifest number: 06E6
Signing time: Sun 27 Jul 2025 04:00:28 +0000
Manifest this update: Sun 27 Jul 2025 04:00:28 +0000
Manifest next update: Mon 28 Jul 2025 04:00:28 +0000
Files and hashes: 1: hFNK68PtnHkETCI8iyXgEdq_L98.crl (hash: 7wVkKova5ZtQNas5TmBNMgEwgplYL4RqMfO9/iX84as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFNK68PtnHkETCI8iyXgEdq_L98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0b:be:e7:82:3d:f3:bd:24:2a:58:25:4a:e0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84534aebc3ed9c79044c223c8b25e011dabf2fdf
Validity
Not Before: Jul 27 04:00:28 2025 GMT
Not After : Jul 28 04:00:28 2025 GMT
Subject: CN=1869ce888a7033410c9aaf5b1b6367dc7677b9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:f9:32:1d:9c:50:35:b6:be:ba:1f:5f:9b:
c8:20:5c:d2:4c:f5:e2:75:ee:eb:d1:3c:3c:e3:89:
4d:00:52:b9:a1:4b:ca:94:75:21:ab:54:1b:43:cf:
85:94:4d:82:0e:bb:88:d6:b6:bb:19:7a:2f:49:5b:
e8:4f:68:c3:68:51:e3:fe:51:88:5f:d3:a3:a1:52:
e5:a9:7c:2a:6f:19:e3:c1:e5:f3:a2:ed:7a:59:fc:
20:da:ba:f4:55:34:70:df:3c:d8:2c:6b:99:fd:46:
62:3d:f3:0f:cb:6a:82:21:31:dd:ea:92:8c:87:69:
22:d6:0e:62:d3:15:a7:d7:53:e8:e5:b0:22:58:59:
39:c1:69:07:4a:d4:1e:a8:b7:0e:13:62:8b:7f:7d:
20:0e:bf:6f:89:5c:9c:52:44:19:38:54:d7:af:30:
28:01:d6:74:7f:f6:17:8f:2f:2d:fa:d9:9c:46:df:
78:87:c3:5a:d8:52:0d:28:7b:15:b9:e6:18:f8:42:
ea:66:03:15:60:9b:0d:c9:fa:48:fa:a7:fe:12:94:
ae:1d:37:ee:cb:f3:97:16:cb:c5:a2:7c:7e:0b:67:
b8:5b:63:ab:70:3b:1d:fb:a9:d2:bc:4b:5f:0a:f1:
da:2e:fc:72:e4:48:4d:b1:23:b0:4b:58:15:7c:4d:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:CE:88:8A:70:33:41:0C:9A:AF:5B:1B:63:67:DC:76:77:B9:D4
X509v3 Authority Key Identifier:
keyid:84:53:4A:EB:C3:ED:9C:79:04:4C:22:3C:8B:25:E0:11:DA:BF:2F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFNK68PtnHkETCI8iyXgEdq_L98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:66:ec:92:0a:90:c1:23:0a:34:c8:47:9a:e7:14:ac:ee:1c:
99:e8:41:ab:1a:31:7f:f3:3e:d6:fd:f7:57:78:73:d5:80:08:
bc:02:59:37:87:3c:53:bd:58:3e:3d:75:10:5d:62:0c:7e:0d:
62:f8:9b:9f:ad:71:cc:5c:5d:89:0b:a3:2c:dd:02:05:4a:75:
a0:cf:94:60:c4:f5:ae:18:cc:04:9d:6e:17:a6:e5:81:4a:27:
f8:12:4e:08:f8:77:a9:9d:f0:47:ff:d9:65:c8:4f:14:d2:00:
74:a6:39:a6:24:e4:8c:8a:d0:e9:52:3d:40:1a:f5:94:6c:c6:
13:f1:f9:b5:5e:a7:c9:e8:95:27:4a:96:a2:6d:c5:fb:da:12:
04:50:db:9e:b7:5c:41:f3:c7:08:3a:19:fa:4c:c2:f9:40:09:
a6:e7:92:88:76:02:55:89:d1:57:a4:ef:54:2d:99:23:64:78:
87:9e:65:2f:09:ce:77:e6:13:29:c8:f3:a4:f3:54:7a:fb:5a:
b2:e9:87:65:cd:d0:1f:b8:3a:71:9e:80:fd:17:9a:27:13:24:
35:08:9a:e8:26:88:ed:65:55:ce:fb:24:ef:b1:1a:8e:b4:12:
1a:45:d3:0d:38:84:ca:aa:15:a6:5c:69:27:04:e9:9e:49:dd:
4d:f2:34:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:17 2025 by rpki-client