Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: BHi4jRxRum+0MHshnLHs9Q5lRvOgbOW9oNFmaNliYJc=
Subject key identifier: DA:D6:54:72:57:39:C5:C5:7A:8C:88:1E:F8:33:41:F2:2C:E0:C5:C1
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 01974A7AD2D914791B9CB92A4CDE9A06DFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:00:52 +0000
Manifest this update: Sat 07 Jun 2025 13:00:52 +0000
Manifest next update: Sun 08 Jun 2025 13:00:52 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: 71HirlT/ENemu4tt2eUKi0x5XOtQSqxF0sgUOr+Ye5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:d2:d9:14:79:1b:9c:b9:2a:4c:de:9a:06:df:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: Jun 7 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=dad654725739c5c57a8c881ef83341f22ce0c5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:a8:0a:13:93:b0:7b:fe:e2:a2:17:73:ab:
68:cd:73:0f:7b:49:c5:5e:50:5a:ad:6a:43:2d:53:
1f:87:80:c4:28:28:64:ea:f7:84:f0:c1:9b:90:81:
4f:c1:c0:3c:d2:f9:cc:72:d8:80:e7:b6:6f:f2:e9:
35:33:af:8f:ae:20:24:3f:10:96:f4:67:41:a7:ae:
e0:ce:cc:07:9b:75:75:f2:5c:0f:fb:0d:c0:87:89:
de:5d:9c:63:90:0c:2e:f6:b2:55:8f:74:db:4b:ae:
09:04:b8:d1:f1:62:4f:82:ee:65:07:7c:25:d6:1b:
e7:1f:82:a6:14:c9:99:a6:c2:26:3b:ae:4f:7d:52:
aa:58:41:d5:66:2b:a9:d3:28:fa:ee:35:0e:d0:42:
42:7b:73:c7:3e:7d:73:c0:4b:da:1b:7a:3c:fd:53:
a5:bc:11:76:e6:d9:bf:96:6d:78:8e:f7:6a:c6:e9:
a7:9c:d0:94:94:bb:a1:24:93:76:f8:60:2e:f1:c3:
02:63:f5:83:04:13:73:b3:b6:78:e7:fd:a3:38:32:
b5:cd:c3:40:9c:1f:d1:21:47:8b:e9:68:65:01:7b:
35:b5:e8:76:d9:3c:bf:bd:24:87:96:5a:57:3a:56:
c0:11:93:d5:e5:2d:11:ee:38:f5:47:46:e9:1e:25:
af:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D6:54:72:57:39:C5:C5:7A:8C:88:1E:F8:33:41:F2:2C:E0:C5:C1
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b2:4e:7d:55:eb:8b:ca:5f:4f:90:6b:66:03:6f:e2:b2:85:
f6:e7:41:48:67:0c:3b:03:e3:83:3a:bb:08:59:18:9d:d0:37:
d9:c1:57:a8:11:c5:71:14:bc:69:05:b7:19:96:d5:6b:de:c5:
e5:81:f1:0f:fa:c4:71:5b:b8:ce:7c:9a:c0:f0:e8:f5:1b:bd:
b8:c4:f1:c9:17:5c:d9:be:20:dd:57:ee:56:b9:bc:b9:cc:1b:
9a:46:cd:a7:7d:46:1c:38:0a:2d:e8:0b:46:46:a2:cf:65:0d:
57:58:87:2a:83:82:0b:07:d9:9a:f9:e8:df:8b:00:32:96:04:
99:bf:c3:75:1c:ac:a3:b1:de:14:bb:90:eb:81:35:5f:a4:13:
8e:a9:ef:25:d2:76:e9:6e:b1:73:8b:07:f3:0b:e3:97:7e:77:
92:0b:99:06:cc:7e:06:46:9e:f3:ea:67:59:52:41:04:ae:a5:
81:68:f6:0c:ef:2c:d1:34:37:bc:a8:04:6b:50:4a:02:58:68:
29:09:14:38:2e:8a:b4:f1:1b:53:75:78:73:ed:b3:ed:5e:cf:
97:86:ad:90:c9:ee:93:51:fe:e1:c5:76:06:b6:f3:7c:30:ab:
b3:1e:86:f8:97:56:f6:e4:e5:5c:55:a1:0f:e2:4d:c9:97:1d:
db:c9:ef:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:17 2025 by rpki-client