Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
File: hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft (raw, json)
Hash identifier: G3m55kZSymp6ROVVTNZbaTN4y4wJ1ST/yLVpu/uE8w4=
Subject key identifier: BA:01:EC:DE:08:C4:6D:26:23:35:AC:B6:22:A0:77:AE:60:E8:9A:62
Authority key identifier: 86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
Certificate issuer: /CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Certificate serial: 01974A43ECFEBC8E9E68C356EAF7AD63CB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
Manifest number: 096D
Signing time: Sat 07 Jun 2025 12:00:54 +0000
Manifest this update: Sat 07 Jun 2025 12:00:54 +0000
Manifest next update: Sun 08 Jun 2025 12:00:54 +0000
Files and hashes: 1: hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl (hash: /gDJMPP38gmnujAcInzBoE1BiAnbzCrU78AIUOBtpi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ec:fe:bc:8e:9e:68:c3:56:ea:f7:ad:63:cb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Validity
Not Before: Jun 7 12:00:54 2025 GMT
Not After : Jun 8 12:00:54 2025 GMT
Subject: CN=ba01ecde08c46d262335acb622a077ae60e89a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:3e:ba:65:03:43:4a:52:5c:38:a5:24:bc:
d0:b5:84:95:17:e7:08:e6:9c:75:20:2b:78:f4:4b:
81:5a:c2:d3:2f:95:f0:03:3e:8e:05:fb:81:a0:6c:
d3:3e:c6:e4:32:3c:da:f5:93:07:b7:47:f1:df:23:
64:3c:0c:4f:65:eb:af:50:14:5b:cb:ab:c5:ac:37:
8a:94:d5:40:e1:d6:eb:21:4c:d4:95:97:7e:07:1b:
7f:58:4a:79:53:87:cd:1b:a5:e6:11:e9:01:a5:61:
e0:8e:ee:2e:6f:49:f0:20:91:59:29:80:42:d4:7f:
8e:b5:f3:8c:fd:28:67:93:27:ab:00:d8:68:af:5a:
27:8c:94:51:ff:73:40:8f:ad:1f:8a:25:0c:e6:2f:
3c:cd:f6:94:c0:e2:e7:d8:66:d8:e4:30:1c:6c:0f:
b6:8e:3c:13:5a:d7:a7:6b:66:55:7f:34:3b:ee:20:
be:b3:59:47:93:4c:25:88:b1:61:e5:af:f6:b1:03:
db:fd:c2:55:29:b7:1e:dc:9f:d7:0b:ec:82:e2:f2:
18:17:ac:a2:93:d8:26:4e:45:98:5d:9b:bc:33:62:
b7:8e:96:89:cf:35:06:f5:3a:22:8f:7e:67:9f:d3:
d0:0b:b2:24:97:ac:d6:d6:2f:9d:01:cd:88:3e:ac:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:01:EC:DE:08:C4:6D:26:23:35:AC:B6:22:A0:77:AE:60:E8:9A:62
X509v3 Authority Key Identifier:
keyid:86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:75:7a:41:af:d9:73:74:50:1c:26:7d:39:65:d3:d3:8e:58:
44:b2:82:a4:74:23:7f:f5:4f:5f:fe:8f:7a:3f:1d:b3:d4:56:
88:b4:62:d7:a9:66:e8:c0:e0:e9:1e:54:76:a6:34:db:12:36:
35:14:39:31:3f:4c:26:99:a0:f3:b0:8d:9d:a2:e9:04:71:8f:
e5:84:69:f3:ab:13:55:c6:27:b4:72:57:89:f5:12:29:20:36:
d1:5a:76:e8:95:8e:0d:39:f4:bd:df:5c:0b:ed:f2:3e:44:9d:
bf:a3:18:70:c7:58:da:82:15:c5:3f:b8:b3:38:87:f9:89:c3:
42:57:a2:86:80:cb:ea:e5:c2:9e:4e:43:b1:29:56:71:fc:73:
cc:cd:53:5f:01:60:d4:82:f4:d9:be:a8:38:ed:2c:82:66:b5:
0d:c0:b5:c1:d8:87:fb:0e:4f:d3:3c:b4:fb:a6:56:c2:cc:1c:
a5:6c:87:a9:07:9e:3f:71:b4:24:c2:3e:d8:5c:03:96:8f:93:
c1:d0:42:72:0f:28:09:70:58:26:79:37:b6:29:96:f8:95:4d:
76:0b:dc:c6:56:a0:00:09:79:73:50:ee:ca:44:f9:d7:8b:d2:
7c:84:82:dc:7b:46:63:5b:f6:18:30:0f:42:1a:a7:9c:4c:03:
c7:89:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:43:22 2025 by rpki-client