Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
File: HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json)
Hash identifier: t3yCfwRNDcdmiq6BYPOkI8rnrDAQAjmvg/n3kSciBEM=
Subject key identifier: C7:5A:20:EA:2D:FD:B1:13:0D:93:2A:6B:41:69:1D:11:71:07:64:2D
Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Certificate issuer: /CN=1f1523928d8e8e54be467976331a0121d42a0067
Certificate serial: 01974E5826E0C3A1A12F7F59B69FC0370324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 07:01:29 +0000
Manifest this update: Sun 08 Jun 2025 07:01:29 +0000
Manifest next update: Mon 09 Jun 2025 07:01:29 +0000
Files and hashes: 1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: 2evtcVKVp9HObq7Ty+kQmRU0Nkvn3GoLN+ABkCqUetE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:26:e0:c3:a1:a1:2f:7f:59:b6:9f:c0:37:03:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067
Validity
Not Before: Jun 8 07:01:29 2025 GMT
Not After : Jun 9 07:01:29 2025 GMT
Subject: CN=c75a20ea2dfdb1130d932a6b41691d117107642d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:c5:95:54:a2:c7:e9:24:d7:1a:cf:bd:1d:
91:89:bd:6a:cd:1e:40:e2:8d:f2:a4:7a:fe:bb:a7:
65:4a:f6:22:7a:fd:67:54:ab:1e:c2:0f:c7:5f:32:
d2:d1:25:d8:73:2e:7d:c8:5b:f1:a2:d0:f8:30:9d:
ba:ab:75:a2:83:d3:e9:90:38:53:37:f7:c1:3e:f4:
71:4b:8f:0f:a0:39:db:c8:6f:5e:14:1e:15:cf:14:
e8:f1:6b:6b:01:6a:fc:c8:d5:1d:ec:08:35:67:27:
92:42:e9:3a:dc:89:de:fd:c7:a1:71:fa:bf:d1:42:
d0:3f:e3:74:27:06:a1:c2:a8:b5:c0:b4:5d:a1:84:
be:c6:f1:91:59:da:40:a5:27:1c:f0:bc:29:1f:d2:
c7:10:2b:98:24:4e:b0:0b:ac:19:8b:43:95:4d:4c:
d4:1c:c7:f9:91:b4:95:7a:3a:f7:7e:da:fb:2c:63:
52:d8:d7:cb:50:16:1f:1e:b4:5b:61:49:e3:c3:b7:
24:84:8c:df:6b:6f:9a:02:db:a0:e6:a1:26:36:4c:
29:82:94:83:81:74:18:29:fc:d3:ff:db:df:45:6a:
dd:4a:af:54:90:34:ef:40:0e:d5:13:47:bb:3f:4e:
e7:86:30:cc:ca:d2:82:e9:6b:a7:6b:1e:f6:9c:14:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:20:EA:2D:FD:B1:13:0D:93:2A:6B:41:69:1D:11:71:07:64:2D
X509v3 Authority Key Identifier:
keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dd:8c:13:22:84:89:6a:3f:1d:b4:97:79:33:3f:ba:fe:27:
a0:b5:df:cb:4f:b6:a4:1b:80:43:e7:1a:31:7f:43:5d:6f:2c:
7b:5e:3f:90:ed:76:f2:2b:d5:e0:90:16:d3:64:2a:75:61:63:
2b:48:fb:68:5f:af:cd:ba:fa:d9:b8:03:e9:8a:7c:a2:b0:88:
00:c1:b2:63:f8:45:fe:c8:a1:00:25:bd:3f:32:c8:fe:e6:7d:
8e:8b:12:f8:7b:fe:db:6e:b9:f6:64:52:e8:f1:58:2c:8f:dd:
ce:55:94:8a:7c:76:6e:b6:0e:cb:ff:7d:43:e5:30:f4:28:ba:
dc:e6:50:47:a4:2b:5c:7b:c7:29:e7:a7:56:aa:31:61:9c:2d:
0e:fe:e1:9e:31:34:57:55:f0:b8:c8:84:34:4b:ef:52:99:ab:
8f:3e:74:8c:71:3f:32:a8:a4:31:dc:92:89:da:fb:0d:2c:d3:
19:17:67:a8:70:ae:23:22:0a:af:56:27:f6:45:13:b7:78:29:
09:a0:b8:d6:52:88:4f:2f:09:07:33:3e:da:59:1f:3c:f0:49:
d0:36:ed:c7:1f:13:e6:3b:f8:35:63:54:6a:4b:1f:26:83:b5:
4e:e4:d9:57:e1:a3:a0:ff:29:7b:0a:58:01:b8:48:8b:44:af:
9e:89:6f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:52:43 2025 by rpki-client