Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
File: hgLiX_EiDtSqju94wzpyKrWIP40.mft (raw, json)
Hash identifier: dNiA3MfCFRWMG9SusOCqa1XH4+opMlMkk78q74QF90Y=
Subject key identifier: 7D:4C:6D:13:3F:96:AC:05:34:22:B5:E9:EF:A6:01:E8:96:A8:9B:85
Authority key identifier: 86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
Certificate issuer: /CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Certificate serial: 01974E20274070C63EB06487531CE4FCD879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
Manifest number: 33
Signing time: Sun 08 Jun 2025 06:00:19 +0000
Manifest this update: Sun 08 Jun 2025 06:00:19 +0000
Manifest next update: Mon 09 Jun 2025 06:00:19 +0000
Files and hashes: 1: hgLiX_EiDtSqju94wzpyKrWIP40.crl (hash: JEEW1oZCOZbZ1S4wgy8z8yEOWePIxck+9Rjj9I2Stng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:27:40:70:c6:3e:b0:64:87:53:1c:e4:fc:d8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8602e25ff1220ed4aa8eef78c33a722ab5883f8d
Validity
Not Before: Jun 8 06:00:19 2025 GMT
Not After : Jun 9 06:00:19 2025 GMT
Subject: CN=7d4c6d133f96ac053422b5e9efa601e896a89b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:5b:8f:3f:a0:d9:d6:ba:29:fd:89:54:ab:
10:63:5e:75:6e:99:13:29:91:90:ba:17:b1:31:29:
e8:3b:00:10:bb:59:5d:26:aa:d3:5e:b2:73:38:53:
25:1f:9d:21:f0:f2:54:6c:d7:ab:a0:f1:63:b7:98:
5e:85:62:92:86:d4:d7:b7:e2:21:90:99:ca:31:97:
5a:10:25:d5:e9:e2:c3:b9:ea:3c:0b:0c:32:b1:f3:
2f:43:1f:0b:67:8b:47:bb:ef:38:ed:4e:3e:28:52:
00:69:7c:41:b0:3b:2c:2d:26:5c:af:03:26:66:11:
7f:78:0a:e9:44:db:15:0d:cc:0b:f7:59:b8:da:17:
39:7e:4a:7c:d9:f2:3a:7e:ce:4a:70:e7:64:7b:27:
ac:dc:b6:03:6d:fc:2f:c0:8e:db:24:82:6e:f4:1b:
fc:d5:e5:aa:98:96:ec:fe:69:af:09:15:5c:23:83:
c7:f9:3a:96:25:7d:2a:9e:c7:78:27:19:e7:07:6c:
d4:72:ad:50:9a:f0:37:27:7f:2f:cd:3e:10:d0:9e:
e1:a8:d9:ec:17:44:51:40:ce:a9:aa:2d:c2:a6:23:
1d:33:c6:98:17:23:c3:3a:ce:d3:15:6d:f5:5d:8e:
2d:a0:8c:a8:c2:d5:55:c4:47:4c:f3:aa:fa:ed:b4:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4C:6D:13:3F:96:AC:05:34:22:B5:E9:EF:A6:01:E8:96:A8:9B:85
X509v3 Authority Key Identifier:
keyid:86:02:E2:5F:F1:22:0E:D4:AA:8E:EF:78:C3:3A:72:2A:B5:88:3F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgLiX_EiDtSqju94wzpyKrWIP40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e380-f955-4feb-9ef8-481f457e1b89/1/hgLiX_EiDtSqju94wzpyKrWIP40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:15:04:25:4c:be:76:48:62:66:56:bb:92:91:1e:b0:dd:8e:
c8:e3:62:29:e0:fc:02:b2:09:c5:7b:85:34:5f:2e:19:d3:61:
dc:e2:dc:f8:1d:45:6b:7f:5a:e6:df:b0:10:52:fc:0c:cb:7a:
04:ba:b8:52:9b:08:a6:fa:e6:d1:98:d2:31:47:55:f8:88:ce:
eb:97:97:ce:c9:14:d2:97:4f:44:d5:10:25:55:d3:7c:76:c3:
1b:39:b8:dc:80:1c:ed:a3:d6:25:f5:1f:e6:44:bc:39:e7:89:
2d:ba:95:6b:f1:75:32:b6:16:b3:43:a4:57:a8:2f:e3:ad:da:
b1:8f:5e:4a:bb:77:06:a0:ce:30:2c:32:6a:09:bf:05:11:08:
d7:40:a8:94:e5:01:f2:27:4a:4f:d5:a3:45:18:38:7e:67:48:
71:20:dc:12:d9:93:ee:0f:a8:bc:9d:65:ab:81:fb:f1:2f:48:
b6:7b:9e:e1:be:32:53:2a:fa:8b:c4:73:82:c1:e2:24:85:d0:
85:12:1f:26:c6:a4:8b:12:58:68:a8:6b:cb:29:53:42:a2:97:
71:d3:d5:16:39:e9:1e:3b:38:f7:9b:8b:fe:d1:67:56:ac:08:
61:78:e5:ee:69:fb:ae:8c:8a:44:24:17:80:d7:c7:77:67:3a:
ef:cd:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:26:37 2025 by rpki-client