Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: PyJW/Jrkz32idHXTF1wFBtdZY5a+ZPnGcZRnrID1VLY=
Subject key identifier: FA:56:49:BE:70:8B:49:37:03:2C:4F:15:47:52:F6:FF:06:A8:6C:43
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 01974FD7FFFEF0DD9C52996CC96B53B05572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 1310
Signing time: Sun 08 Jun 2025 14:00:45 +0000
Manifest this update: Sun 08 Jun 2025 14:00:45 +0000
Manifest next update: Mon 09 Jun 2025 14:00:45 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: k8oNKIocmoQNEDsfQF9XrtQDDi10USQlMJkKiquEOuc=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:ff:fe:f0:dd:9c:52:99:6c:c9:6b:53:b0:55:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Jun 8 14:00:45 2025 GMT
Not After : Jun 9 14:00:45 2025 GMT
Subject: CN=fa5649be708b4937032c4f154752f6ff06a86c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cf:50:1e:2e:eb:f0:80:71:51:76:9d:ca:f8:
7f:26:f2:41:f4:ee:c6:d5:e4:6a:7d:31:f4:04:7b:
35:ab:39:27:55:7a:09:f9:5f:75:05:f2:6a:bf:6c:
fc:73:5e:08:03:e7:cb:e9:45:c3:c6:58:73:fb:97:
24:4e:86:07:ee:5b:39:32:62:93:bf:00:02:e4:72:
84:01:0e:11:af:98:f4:8f:c6:4d:35:04:b8:0d:62:
04:17:23:80:e7:be:97:66:6a:a1:74:cc:db:f4:1a:
6f:94:d4:58:b2:fb:72:3d:47:ef:4d:45:75:20:d0:
9c:a7:41:a6:c2:31:9b:73:5d:00:8a:6e:1e:87:76:
d5:26:20:9f:8f:f1:a2:0d:2a:ea:b8:4a:65:c3:d6:
cf:ef:d4:1f:71:8d:f5:7a:a2:92:52:66:bd:a9:57:
08:72:eb:3d:12:1c:c9:66:4a:22:d7:91:aa:52:24:
d6:b4:7a:2d:07:d9:be:fe:ea:7d:3d:a8:43:3e:4b:
2c:09:34:4b:23:53:ae:b5:a4:48:5e:5f:bd:8a:ab:
8b:e6:72:1e:95:62:e6:91:4c:d4:07:a6:e1:e9:5f:
bc:40:5a:b3:51:77:c3:6d:ee:3b:a9:0c:65:03:ac:
03:70:5f:a5:9a:40:7d:de:cc:5a:ec:81:55:96:da:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:56:49:BE:70:8B:49:37:03:2C:4F:15:47:52:F6:FF:06:A8:6C:43
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:10:28:d4:6d:3a:02:11:99:ff:ad:e3:ea:b8:b7:82:e9:44:
92:dd:1c:18:84:db:b6:0c:d0:80:59:ca:05:83:23:6e:15:8e:
f7:c1:14:3a:d5:f0:1f:f6:2a:d9:62:c8:eb:b6:7d:1c:fa:c2:
69:f7:64:16:c5:80:90:13:28:de:87:c8:9a:c8:32:53:c5:10:
8a:0e:43:91:ac:bd:20:31:be:77:ee:39:35:0a:96:79:3c:fd:
ee:6a:4f:ad:b0:eb:c8:88:a5:86:70:9f:0a:7f:e7:8b:a4:f4:
c7:2a:33:4c:5d:c4:77:11:26:67:86:3f:27:f5:6c:db:23:42:
c5:b3:40:52:f1:30:23:d3:da:4c:7f:16:07:31:67:6c:4b:76:
4f:b0:5c:e6:fa:4f:7f:04:35:c9:15:57:b0:70:19:a0:08:c5:
05:af:c6:6d:78:07:88:3e:44:dd:f7:ca:f2:9f:75:3a:4f:58:
8e:8f:17:51:a0:71:e6:d2:5b:97:e5:2d:e1:73:14:60:2f:ca:
79:ff:70:14:f4:6f:17:0f:7a:13:11:87:a7:ac:e7:b3:12:80:
1f:7e:5e:2a:b6:30:ec:cd:eb:19:e3:dc:93:9f:d8:d2:8c:c4:
8b:29:44:b1:8c:a1:00:03:a3:9b:59:52:18:10:11:a2:62:71:
4f:5b:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:21:15 2025 by rpki-client