Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: 10ZrlzBXFrsdqnbbUlg1JmsHXf60dezo01hx7yPBIZU=
Subject key identifier: 38:7B:8A:EF:42:D9:46:49:B0:46:7B:57:79:D2:0F:A0:C2:51:99:1F
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 0198496608176FC8682A6EBB5E95BB85A1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 0ED1
Signing time: Sun 27 Jul 2025 01:01:20 +0000
Manifest this update: Sun 27 Jul 2025 01:01:20 +0000
Manifest next update: Mon 28 Jul 2025 01:01:20 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: SjqhZ2U7SB9exkAYoIcEy/KFwKBw17rokpOkbI4FONg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:08:17:6f:c8:68:2a:6e:bb:5e:95:bb:85:a1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Jul 27 01:01:20 2025 GMT
Not After : Jul 28 01:01:20 2025 GMT
Subject: CN=387b8aef42d94649b0467b5779d20fa0c251991f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:bb:26:62:c0:f5:04:a3:78:2c:2d:c1:a6:
bb:f8:1d:b4:7e:1b:73:47:09:93:b4:58:8a:e7:10:
83:2f:6a:4b:d5:6f:fa:4a:8e:4d:3a:c8:df:7d:b0:
8b:a6:d3:12:5d:40:2b:40:fa:5d:bc:7f:2f:34:76:
4d:3b:ea:98:bc:98:95:1b:86:78:e1:3f:38:e9:1c:
cf:cf:9d:dd:a5:c6:cd:fa:cb:61:6e:a2:b4:0e:b1:
2c:a7:0d:33:bf:bb:9c:b8:fe:df:23:47:ec:4e:b4:
1d:c9:8b:70:f0:11:66:32:94:1e:35:9c:1f:51:3c:
28:6d:a5:3b:4d:35:9b:29:e0:28:ff:ba:72:60:18:
0e:be:1f:7d:7b:bc:00:d3:28:7f:c4:7a:b6:10:d2:
29:c7:fb:44:fa:ef:22:02:7c:a1:cd:f4:93:a9:ae:
04:e5:9c:4e:45:99:fc:d4:05:5b:f6:7d:23:06:b9:
0c:53:2f:2e:b2:d3:97:be:f7:51:9a:c2:eb:cd:ee:
99:84:17:2f:09:54:5a:bb:09:78:6c:9d:cc:15:9f:
5c:02:47:44:04:6a:25:69:31:30:19:40:b9:5d:37:
61:3d:5a:2f:52:0f:ed:c1:53:3a:14:f4:0b:90:02:
50:2d:5b:d7:47:5a:81:36:98:6c:28:65:90:e3:89:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7B:8A:EF:42:D9:46:49:B0:46:7B:57:79:D2:0F:A0:C2:51:99:1F
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d6:bc:19:a3:6a:de:13:e7:90:6c:af:a2:16:42:98:c3:a2:
52:ff:56:82:53:0b:57:39:c8:1a:ca:a6:fa:b9:6f:44:b9:83:
24:7c:4a:b7:d6:e2:11:cc:2f:9c:91:e9:1f:19:49:d0:7c:eb:
61:29:59:0b:3d:b0:1b:18:05:e3:a6:8a:b4:89:eb:e6:5a:3b:
76:67:e5:24:d7:e9:d8:6c:69:50:12:a5:ea:7c:95:ee:03:2e:
e5:f9:80:c4:8b:dc:7a:58:00:3c:73:51:ca:5c:c4:be:c8:49:
7a:9d:a3:8e:e5:20:ba:20:f6:f4:89:a5:dd:39:f9:a9:75:8e:
f9:e4:df:84:f4:d2:17:1c:99:31:64:cd:49:32:a8:45:50:e6:
44:c3:63:c4:5c:55:6a:8d:da:4d:b6:de:71:46:23:c2:27:c8:
4c:86:82:61:55:d4:d2:0c:47:bf:c5:eb:50:40:30:f9:a1:f0:
22:6f:fe:95:53:7c:c3:da:ce:c8:92:29:a6:c1:cc:1d:06:05:
0f:32:87:9b:d7:d0:6d:d5:0b:49:40:69:66:f0:e3:fc:05:42:
9e:a9:40:ba:6b:0f:78:9a:f6:11:d4:ad:38:3f:7b:3e:f7:84:
9d:00:8f:62:b3:b5:26:28:73:c9:98:0a:a7:ef:bb:85:77:1f:
7f:88:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:12:50 2025 by rpki-client