Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
File: hprNGeI6gWZEutDooSuG4SiK0zw.mft (raw, json)
Hash identifier: rNs15agnnJAbSS2rkkF8rHdgwir+Y+DrNrG35sxJ8ek=
Subject key identifier: 36:A2:D8:E7:F3:A5:CF:FC:6F:F9:40:C7:D0:07:DE:38:CC:F6:64:FE
Authority key identifier: 86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C
Certificate issuer: /CN=869acd19e23a816644bad0e8a12b86e1288ad33c
Certificate serial: 01984B5530548EA6A2A0D104A9CEAD091923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
Manifest number: 0FEB
Signing time: Sun 27 Jul 2025 10:02:10 +0000
Manifest this update: Sun 27 Jul 2025 10:02:10 +0000
Manifest next update: Mon 28 Jul 2025 10:02:10 +0000
Files and hashes: 1: hprNGeI6gWZEutDooSuG4SiK0zw.crl (hash: Q0d8w0imbyWtMJ9zTw1qmS7Kh477f+C7nD4gYEx1mbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:30:54:8e:a6:a2:a0:d1:04:a9:ce:ad:09:19:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869acd19e23a816644bad0e8a12b86e1288ad33c
Validity
Not Before: Jul 27 10:02:10 2025 GMT
Not After : Jul 28 10:02:10 2025 GMT
Subject: CN=36a2d8e7f3a5cffc6ff940c7d007de38ccf664fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:22:a4:ca:f7:5d:7e:fe:af:68:74:75:ba:
5d:1b:c0:45:eb:c2:0c:7b:17:69:3b:f5:eb:6e:b0:
93:73:80:87:f5:03:c4:35:3b:bf:d0:4e:b1:37:af:
d8:f6:bb:ce:73:eb:c2:62:d9:d5:8b:83:ec:5f:67:
5f:d5:78:45:4b:65:a1:61:20:e4:16:3b:5c:60:5b:
f9:1d:fb:46:be:34:7d:74:da:6b:be:9c:9a:76:03:
90:77:d2:3c:24:05:b9:2b:7d:17:b1:9a:0b:2d:e5:
74:11:3d:26:cc:ae:06:20:40:0a:64:db:f7:60:65:
ec:37:21:fd:8f:83:1c:e3:bf:08:ff:be:c0:7f:e8:
97:f9:3d:bf:33:d8:6c:29:48:ff:47:a7:10:bf:bb:
94:0d:c9:e3:65:92:a0:cf:20:1c:c1:d4:1a:37:72:
ef:dd:c6:99:d0:cd:ec:83:46:ea:f1:8f:fb:e0:82:
cf:af:00:bb:fc:15:80:fc:53:4e:24:2f:86:f2:b3:
97:51:d4:de:5d:f9:9d:2a:0c:83:71:61:97:c7:4c:
a0:d9:41:c2:d1:e7:14:d3:5b:db:46:21:2e:10:5c:
9a:1e:e6:85:01:73:fb:5b:b3:4a:bf:76:e1:ca:bc:
73:70:56:6a:b1:a6:fb:3a:cb:7c:84:5f:f8:8b:8d:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A2:D8:E7:F3:A5:CF:FC:6F:F9:40:C7:D0:07:DE:38:CC:F6:64:FE
X509v3 Authority Key Identifier:
keyid:86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9f:7d:81:78:be:c1:90:ea:38:4d:66:0b:9d:d6:b1:28:79:
45:7f:d3:6f:b3:91:ca:a7:b6:d2:6e:61:f4:b7:5e:ca:76:fd:
bb:3d:c5:2b:85:60:df:8c:26:e2:56:e7:27:fd:19:b8:5a:97:
2e:52:59:b0:5c:af:06:63:fc:c1:6e:f4:27:69:22:2f:d0:7d:
04:83:aa:9c:f5:a6:f5:f0:78:9f:54:48:a3:7a:03:1b:bf:e1:
f7:b7:bd:94:94:a1:95:b2:29:67:5f:06:33:7f:0b:d7:4c:e6:
83:ae:c8:fb:08:5f:22:63:9f:5a:b0:5e:be:a6:05:8b:4c:13:
d3:2e:60:7f:9b:b9:d8:ea:5a:91:4a:49:06:81:80:a3:64:0a:
28:10:cf:fb:d3:39:76:0c:95:c8:c3:be:88:27:33:7d:e6:85:
c8:70:28:89:5f:2d:64:01:35:02:b1:85:f4:7a:8e:53:82:69:
b4:a9:fd:de:17:2c:ce:c9:48:74:56:e3:22:c1:f1:42:6f:70:
6b:7e:ef:ab:ea:47:6e:57:15:c4:c5:83:98:0f:a9:92:e2:30:
8c:91:12:fa:39:6e:b3:31:2a:66:23:f8:14:5c:64:19:95:f8:
1a:14:83:d0:e9:f0:05:3f:6c:f9:40:8f:52:9e:12:50:b8:19:
05:60:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:49:48 2025 by rpki-client