Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: mmFOlvnkiNecoucZ4ls28e/Jrw4ORmiYAGPOMiJqwZY=
Subject key identifier: 74:E2:4F:7A:C2:6E:F7:BB:B7:2E:78:78:4E:23:40:5B:4B:45:E7:73
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 019750458D45533B24AB9FE7874C7BE8226E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 11B2
Signing time: Sun 08 Jun 2025 16:00:24 +0000
Manifest this update: Sun 08 Jun 2025 16:00:24 +0000
Manifest next update: Mon 09 Jun 2025 16:00:24 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: jjQAKbvPp1frkGCU4MpSjOvKFI8zggm3Nng0uXQMwac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:8d:45:53:3b:24:ab:9f:e7:87:4c:7b:e8:22:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: Jun 8 16:00:24 2025 GMT
Not After : Jun 9 16:00:24 2025 GMT
Subject: CN=74e24f7ac26ef7bbb72e78784e23405b4b45e773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:24:c1:fc:60:6d:f1:5f:d5:2e:84:88:19:
d9:d9:7f:90:15:3f:e1:a9:1d:a2:66:e5:b0:cc:36:
d1:6c:79:f1:37:95:4a:2f:43:04:f4:f9:54:0d:d5:
5a:af:60:fc:04:3a:53:ae:65:67:16:ae:4c:e3:9e:
ea:d1:16:40:f7:ce:02:68:fe:c5:66:40:21:23:56:
b2:c5:35:25:8e:34:5d:a7:ef:40:ba:16:cd:80:2c:
95:11:71:35:34:8f:f8:ba:98:f0:5c:9c:45:c7:c4:
47:cb:da:83:fd:1d:3a:fe:61:45:46:55:97:c4:74:
f1:f6:ba:b0:01:8c:eb:7e:e6:01:01:ef:f3:a5:ea:
52:9e:d8:40:3a:42:a3:29:e0:b3:03:ad:4f:5b:2b:
01:3a:c5:12:34:58:f1:3b:8c:c9:d3:45:cd:9e:83:
88:9a:14:81:59:5f:5d:39:5d:ec:04:0d:9c:a8:f6:
92:0f:42:42:3d:6e:36:2e:3d:dd:bc:6b:53:a4:51:
5e:c3:0e:aa:21:ca:e4:1a:6b:38:ff:5f:c3:78:c0:
b1:35:e4:c6:a2:e1:f8:82:24:79:3d:82:70:34:11:
23:f9:55:57:10:b8:b0:7e:a8:97:5b:dc:5e:f4:46:
21:b4:2e:44:fd:62:7e:ac:c5:f4:19:fb:49:9e:32:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:4F:7A:C2:6E:F7:BB:B7:2E:78:78:4E:23:40:5B:4B:45:E7:73
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:14:a1:46:1a:22:b6:9e:d7:23:23:93:0a:25:f4:ad:66:8d:
06:6c:df:a5:ff:a6:c9:4f:c0:cf:d0:69:4c:f2:97:02:1c:f6:
88:a5:95:b3:14:d4:35:d5:5a:0d:f9:25:96:17:89:95:e7:d5:
9e:f7:45:be:56:7c:fe:ef:b9:0d:22:d2:23:c5:d6:ca:db:81:
e1:39:3a:5f:a0:75:a1:a5:cf:cb:2c:c9:09:1b:06:5b:62:9f:
e7:70:89:de:ef:6d:0b:1a:8d:f2:19:b4:fa:11:65:55:6f:91:
44:21:bb:19:28:6c:03:11:c0:3c:d8:ac:b5:80:49:2b:9e:90:
e2:16:a6:65:1a:d8:bd:a6:ec:3c:c9:0d:c2:e8:01:64:f0:bf:
ac:da:16:c8:f3:8d:5f:af:74:1a:b0:c9:43:2a:65:78:b4:82:
b8:f5:52:a9:be:c5:88:ed:a1:0f:c8:08:91:31:41:d8:85:85:
7d:9a:d2:7a:a8:29:33:5b:dc:6a:70:d0:3e:79:c1:a6:9b:97:
89:57:94:2e:75:01:87:b6:b6:92:df:9a:10:32:ff:3f:84:df:
ae:0b:02:39:bb:51:1b:b7:4c:62:79:76:73:6d:a0:83:0b:f8:
9d:37:f0:77:08:6b:e9:4c:07:0f:00:1b:76:b7:84:7d:69:28:
96:87:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:26 2025 by rpki-client