Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: xxCaR1YCYuuP3sKAXDR6UZMckR81NOwTy2BefaRg3r4=
Subject key identifier: B2:B1:D7:34:70:93:80:7E:7C:21:E9:12:4B:87:CD:F9:8C:8A:EB:BE
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 0197481E701A46B97A1AEAE70C8507F1BACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 12BC
Signing time: Sat 07 Jun 2025 02:00:43 +0000
Manifest this update: Sat 07 Jun 2025 02:00:43 +0000
Manifest next update: Sun 08 Jun 2025 02:00:43 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: 3TQz6CE6FW6J0QPlMStrOyGjvK6PNQV+YNVDOPzOY3M=)
2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:70:1a:46:b9:7a:1a:ea:e7:0c:85:07:f1:ba:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Jun 7 02:00:43 2025 GMT
Not After : Jun 8 02:00:43 2025 GMT
Subject: CN=b2b1d7347093807e7c21e9124b87cdf98c8aebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:0f:f1:c8:de:a0:28:23:08:f7:8e:06:b7:
14:3f:0f:27:aa:0b:c5:b6:7b:fd:a5:0a:11:dd:89:
03:2e:40:44:db:91:f9:78:a8:de:a8:ab:c8:26:ec:
42:f6:fa:39:b0:84:86:82:1e:25:3a:94:3b:ef:8a:
52:16:c4:4d:19:45:22:d2:1c:85:23:b7:fe:14:41:
26:99:ec:c3:03:c6:dc:70:d6:3e:ce:b4:e1:e6:fd:
e7:82:22:fb:11:6a:24:fa:65:94:da:cd:31:b6:73:
ac:d8:bc:a8:72:31:b8:af:63:d3:b1:e1:b6:83:1b:
c9:ad:47:ca:8b:1c:db:0f:9d:c8:cc:51:0d:1b:1b:
47:2b:aa:6e:fc:f9:91:a2:b1:e8:af:75:ae:c8:48:
fd:7a:1b:2e:7d:e4:a0:22:53:c6:f9:fa:10:d3:22:
52:2b:d5:ee:59:57:a2:04:38:b7:ed:0c:c4:2d:91:
b3:28:31:c9:37:8a:bb:20:c5:91:92:df:d5:b2:bf:
06:92:c1:d3:0a:41:55:95:c8:69:9c:92:1d:88:8d:
bf:05:68:21:3d:7b:99:f3:d4:7d:c8:6e:e4:db:91:
b5:5d:aa:46:c6:33:00:5d:f3:ef:f0:17:0f:df:d1:
b4:7a:5c:50:fb:88:ff:51:5f:5a:c3:44:c8:be:15:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B1:D7:34:70:93:80:7E:7C:21:E9:12:4B:87:CD:F9:8C:8A:EB:BE
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e3:c5:a2:8f:63:03:89:42:63:59:47:6f:8e:2a:af:a7:4e:
24:17:ac:73:36:48:30:20:22:e6:d7:ee:e6:29:1e:dd:3a:06:
11:50:b3:02:79:7f:f4:97:bc:4e:cc:b9:9f:99:48:dc:d5:47:
1d:22:f7:7b:26:0f:76:a0:1a:d4:af:e1:e0:b8:74:01:3f:5d:
5c:73:f4:1e:cc:51:1c:4b:0c:30:7f:17:7b:bf:14:81:e6:87:
43:3a:52:45:03:b4:2e:6a:41:26:eb:53:9c:9d:af:cc:11:ff:
07:5d:5b:43:e2:20:ed:6f:d0:30:38:8b:cb:38:59:5b:88:ac:
90:23:f6:62:62:f9:57:21:34:bc:ae:49:86:7d:7a:17:5e:6f:
c9:7d:92:1e:dd:7f:e8:53:a4:af:91:ff:02:f5:46:2d:ac:09:
5c:03:a4:b8:2f:43:c2:16:3f:04:8f:e1:81:0e:b8:bf:ca:d6:
85:31:34:cb:3b:25:73:f9:be:59:e1:bc:41:18:8b:73:6a:ee:
29:9f:e9:92:ed:dd:a3:d7:a3:74:19:4e:89:ab:53:c8:da:38:
6f:49:25:e0:4a:ea:03:76:5c:c3:4c:56:e4:54:0f:7f:9d:8a:
e8:d5:63:24:e1:0c:ed:c3:a0:6b:50:c7:e8:60:ce:e9:78:d9:
a9:46:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:35:27 2025 by rpki-client