Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: xx1PcTn46XibX67u1bctZZ7sMwEJwCX+qJB9H6cp1pg=
Subject key identifier: 46:ED:7F:BF:87:09:FE:C9:34:54:F0:58:25:CD:24:24:9E:B0:FF:38
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 01974A7AA1C121CC78D464C6287292C82591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:00:40 +0000
Manifest this update: Sat 07 Jun 2025 13:00:40 +0000
Manifest next update: Sun 08 Jun 2025 13:00:40 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: qxdFLUysGaXBrz3AUpBerbBjE4FX2ZUd1CGRYEILj50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a1:c1:21:cc:78:d4:64:c6:28:72:92:c8:25:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Jun 7 13:00:40 2025 GMT
Not After : Jun 8 13:00:40 2025 GMT
Subject: CN=46ed7fbf8709fec93454f05825cd24249eb0ff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:08:50:1f:75:75:b4:0e:9f:a1:e7:b9:83:
f0:71:9a:3a:35:39:cc:d5:2f:4d:e3:1d:7b:18:27:
0e:24:6a:48:fd:e1:d1:fa:9a:7b:6a:22:d3:e9:96:
57:31:5b:79:c6:8c:22:55:a6:59:90:5c:9f:1a:58:
9e:59:7c:a4:4c:88:83:97:57:ce:6f:cf:94:ac:dd:
e9:65:94:6b:0e:d0:a3:3d:ee:8f:a9:dc:cb:17:82:
18:bc:98:79:ef:1c:85:ad:f3:e1:5e:ca:54:c1:43:
a5:8f:14:77:fa:41:50:83:56:ee:78:be:f3:ff:e0:
aa:a0:ee:2c:93:9c:d8:1a:ff:32:30:c2:85:c3:03:
c6:ea:4c:b9:91:89:20:ab:a9:1f:35:fe:5e:c7:1f:
85:9f:3f:8b:52:4e:26:01:c5:d3:10:b5:35:e0:f5:
dc:59:75:75:0b:d5:39:e7:00:9e:77:79:01:7b:3e:
ff:73:0a:8d:de:8b:fb:8c:be:df:1d:58:58:39:17:
55:2c:fe:09:be:f8:c5:43:d4:0a:02:ce:27:41:2b:
bf:b2:a9:85:33:2d:ba:91:6e:b9:71:cb:d4:78:4a:
50:7f:33:67:79:4e:93:ed:c3:3d:6c:40:58:85:94:
86:92:13:13:4b:f7:1b:10:ad:bb:78:bb:d2:b9:5b:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:ED:7F:BF:87:09:FE:C9:34:54:F0:58:25:CD:24:24:9E:B0:FF:38
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2e:ae:60:e3:93:0d:4a:58:58:27:d8:a8:47:92:b7:0e:02:
8a:49:74:ee:a6:df:26:22:07:58:b2:3c:7a:1f:19:b9:36:4f:
6f:b4:49:05:81:6a:29:8e:43:93:9a:d0:5c:55:04:92:da:62:
da:84:fe:1f:33:67:a2:50:a3:91:2b:54:6c:84:e1:52:2b:98:
06:5c:82:d1:46:80:27:bd:7b:42:c7:f8:e5:02:03:ff:54:dc:
62:d3:e0:da:f6:04:a2:52:03:13:19:ca:f6:c4:93:6c:91:35:
ee:45:74:88:c9:ea:8b:02:86:b2:18:3b:2d:5e:73:11:26:93:
e9:58:d2:41:f1:75:5e:d8:e0:e7:6c:84:67:74:0e:f9:d2:66:
4f:00:15:51:53:da:ad:31:0d:c7:fc:0a:93:71:8c:4f:99:6b:
e0:0c:12:57:87:59:9c:0f:4f:bb:ce:c3:97:61:00:b9:b3:33:
5f:ba:24:55:d5:1b:3b:7d:34:98:81:fc:80:f5:13:f2:c8:7e:
54:c3:82:a4:a7:db:14:b1:9f:01:4e:f4:c6:b8:3e:9c:b1:f3:
0b:a7:ab:0e:ad:51:97:b7:61:2a:39:59:4a:51:d1:02:a6:1f:
80:db:c0:27:b0:07:74:a9:07:74:df:ff:b4:9c:09:92:96:35:
6f:41:31:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeqHBIcx41GTGKHKSyCWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Y2Y5MTBhOTQ0NDllYTIzYWFjNmM0MDlhMDU4NDliZWRh
NWUyNGEwHhcNMjUwNjA3MTMwMDQwWhcNMjUwNjA4MTMwMDQwWjAzMTEwLwYDVQQD
Eyg0NmVkN2ZiZjg3MDlmZWM5MzQ1NGYwNTgyNWNkMjQyNDllYjBmZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkQIUB91dbQOn6HnuYPwcZo6NTnM
1S9N4x17GCcOJGpI/eHR+pp7aiLT6ZZXMVt5xowiVaZZkFyfGlieWXykTIiDl1fO
b8+UrN3pZZRrDtCjPe6PqdzLF4IYvJh57xyFrfPhXspUwUOljxR3+kFQg1bueL7z
/+CqoO4sk5zYGv8yMMKFwwPG6ky5kYkgq6kfNf5exx+Fnz+LUk4mAcXTELU14PXc
WXV1C9U55wCed3kBez7/cwqN3ov7jL7fHVhYORdVLP4JvvjFQ9QKAs4nQSu/sqmF
My26kW65ccvUeEpQfzNneU6T7cM9bEBYhZSGkhMTS/cbEK27eLvSuVsRRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbtf7+HCf7JNFTwWCXNJCSesP84MB8GA1UdIwQY
MBaAFIXPkQqURJ6iOqxsQJoFhJvtpeJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjIt
NTUyZjAyY2JjMDBlLzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjItNTUyZjAyY2JjMDBl
LzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS6uYOOT
DUpYWCfYqEeStw4Cikl07qbfJiIHWLI8eh8ZuTZPb7RJBYFqKY5Dk5rQXFUEktpi
2oT+HzNnolCjkStUbIThUiuYBlyC0UaAJ717Qsf45QID/1TcYtPg2vYEolIDExnK
9sSTbJE17kV0iMnqiwKGshg7LV5zESaT6VjSQfF1Xtjg52yEZ3QO+dJmTwAVUVPa
rTENx/wKk3GMT5lr4AwSV4dZnA9Pu87Dl2EAubMzX7okVdUbO300mIH8gPUT8sh+
VMOCpKfbFLGfAU70xrg+nLHzC6erDq1Rl7dhKjlZSlHRAqYfgNvAJ7AHdKkHdN//
tJwJkpY1b0ExqA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:10 2025 by rpki-client