Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
File: hUYNJS18tlxJNM6stG-pbctrVws.mft (raw, json)
Hash identifier: YG+qGXFVf762BZHTzscpajqaQ8yZFeWHXeOUcQUc3MU=
Subject key identifier: 6C:E8:BF:BC:85:75:7C:90:2E:B3:44:07:9A:80:BC:59:B7:B6:D7:C7
Authority key identifier: 85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
Certificate issuer: /CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Certificate serial: 0197CB030BEE5E8BB075BDC56F074817FE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
Manifest number: 06EE
Signing time: Wed 02 Jul 2025 12:01:03 +0000
Manifest this update: Wed 02 Jul 2025 12:01:03 +0000
Manifest next update: Thu 03 Jul 2025 12:01:03 +0000
Files and hashes: 1: hUYNJS18tlxJNM6stG-pbctrVws.crl (hash: P2VSpDMQpMRyxkYZZSo0dkZFPwUcKh60KAWCYr4hu+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:0b:ee:5e:8b:b0:75:bd:c5:6f:07:48:17:fe:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85460d252d7cb65c4934ceacb46fa96dcb6b570b
Validity
Not Before: Jul 2 12:01:03 2025 GMT
Not After : Jul 3 12:01:03 2025 GMT
Subject: CN=6ce8bfbc85757c902eb344079a80bc59b7b6d7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:0c:f1:17:f3:bf:84:62:bb:78:91:70:86:
e3:c2:84:20:30:3e:4b:26:9f:39:5e:bf:46:db:c3:
0c:29:1b:25:7f:4b:39:a9:b6:da:62:49:40:55:5a:
a6:fb:67:df:e4:95:b5:07:1d:be:a3:0c:23:2b:62:
dc:e7:fd:e2:86:f3:ae:bf:6b:3c:03:f8:7e:d3:33:
fb:72:0c:90:f7:5c:98:e5:68:8f:57:ec:aa:13:2b:
e5:7d:5b:9b:56:70:6d:e5:a5:b9:c4:95:72:4f:0f:
4a:b4:e0:a7:81:0c:3b:b6:9d:56:2e:96:82:ef:5c:
84:63:4d:7f:d6:7d:cf:f2:e2:7f:d7:cf:87:ec:99:
16:db:84:09:f5:4c:7c:dd:1d:f3:d8:24:c4:26:7e:
de:ae:86:60:04:e0:58:bb:20:ab:0a:06:57:c1:83:
76:12:7c:0b:9e:96:c2:81:a4:d4:7b:b8:90:44:e7:
07:a3:32:5c:72:0c:cf:79:e1:2b:94:73:38:05:37:
64:52:2c:24:42:56:1b:5d:d8:55:6d:32:d9:48:bf:
91:79:ea:30:52:cf:8e:e1:ff:b9:03:e9:1f:fc:2e:
0c:ac:a2:c9:3a:ca:ce:62:6a:e1:c9:d7:e4:5d:b5:
c0:50:bf:a1:e0:66:b0:28:c9:d9:e8:94:bb:33:0b:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:BF:BC:85:75:7C:90:2E:B3:44:07:9A:80:BC:59:B7:B6:D7:C7
X509v3 Authority Key Identifier:
keyid:85:46:0D:25:2D:7C:B6:5C:49:34:CE:AC:B4:6F:A9:6D:CB:6B:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUYNJS18tlxJNM6stG-pbctrVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ac3b4f-4fe9-442f-8bcd-926a0b2d57ad/1/hUYNJS18tlxJNM6stG-pbctrVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:df:a6:05:41:2e:80:24:31:83:4f:08:27:38:fb:ba:2f:29:
42:0e:e4:f8:e5:63:ef:17:0e:d5:4a:84:1b:8f:d2:03:c6:e8:
f8:d5:52:13:96:78:be:c2:76:ff:82:1d:a6:58:e6:11:7e:a3:
a7:be:5f:c2:b5:12:e5:2a:6f:3c:60:0c:8e:aa:9d:a4:b0:d9:
4f:a0:a8:4c:52:3d:de:cc:c3:1c:99:c1:6b:c6:27:b5:81:b9:
14:f4:30:a6:35:28:e6:bc:ca:a5:26:ce:15:e6:57:15:44:05:
19:d1:33:5a:cd:ff:9b:dd:ab:be:f3:d9:ac:2b:51:1e:b8:c5:
fd:16:16:f1:b3:d0:d0:d9:e1:0d:0d:a9:41:a9:a4:8a:f4:5f:
8a:93:84:a7:e5:06:a5:c9:cc:68:03:bc:c6:a6:2e:1a:0c:d5:
bb:2a:e7:a2:30:dd:10:09:92:44:28:ef:e6:0e:dc:35:32:ee:
c7:4e:59:0d:b2:f7:17:93:e6:8c:f3:c5:3f:e6:56:b8:c7:5c:
74:5c:dc:38:bb:00:fc:70:3a:e8:a7:17:67:46:25:35:62:1f:
55:46:e8:53:f2:ee:48:fb:a0:8c:0d:37:29:3e:7b:69:97:9c:
ed:5f:81:e4:c1:f3:ec:d8:ea:50:a8:91:bd:ce:5e:d9:a2:49:
85:8f:36:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:41:09 2025 by rpki-client