Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
File: HTJVXGHT0inixKIzfXX6U_bysrw.mft (raw, json)
Hash identifier: zOxCXIOvvYjW8xd+5SFRHRc5ia480gq/+bOIzSZqRE4=
Subject key identifier: 9F:AF:1F:B1:51:12:E2:AE:E7:8B:BB:1C:AE:5B:57:C3:89:77:FE:45
Authority key identifier: 1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
Certificate issuer: /CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Certificate serial: 0197488C95EFB97183F6A1F8BB84FD2DC2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
Manifest number: 045B
Signing time: Sat 07 Jun 2025 04:01:02 +0000
Manifest this update: Sat 07 Jun 2025 04:01:02 +0000
Manifest next update: Sun 08 Jun 2025 04:01:02 +0000
Files and hashes: 1: HTJVXGHT0inixKIzfXX6U_bysrw.crl (hash: 3qO7KrwoLOcbj2pC07sW1Tqv1FIHb0Ofu8bJXbD4msY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:95:ef:b9:71:83:f6:a1:f8:bb:84:fd:2d:c2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d32555c61d3d229e2c4a2337d75fa53f6f2b2bc
Validity
Not Before: Jun 7 04:01:02 2025 GMT
Not After : Jun 8 04:01:02 2025 GMT
Subject: CN=9faf1fb15112e2aee78bbb1cae5b57c38977fe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:2d:e4:44:d3:16:b1:a8:6b:d7:ae:e1:fe:
9a:bd:81:42:b3:f6:8c:f4:42:a7:96:f0:54:2e:19:
4a:c6:c3:73:b7:0e:4a:1b:29:10:5c:00:cb:d1:f2:
11:67:d6:23:3f:26:4a:3c:66:c0:f7:7c:57:aa:89:
08:1e:3b:ff:47:7e:77:f1:d7:ad:2f:69:d3:cb:8b:
ea:c8:6b:aa:44:e6:a4:03:55:d2:3a:b7:63:19:61:
59:2c:46:b1:8e:c5:10:7d:47:74:65:d0:fe:34:f8:
11:c3:bb:a4:82:b3:52:4a:cd:ac:20:ea:fd:45:67:
26:ad:70:8c:e9:3c:92:a2:ac:4d:cb:b4:37:6d:62:
45:f1:c9:0a:24:c2:ad:33:26:32:ac:ef:73:ef:50:
aa:19:17:fc:46:eb:ab:67:0f:f2:ae:6f:f6:c5:df:
f5:ef:e3:08:14:45:33:ed:81:43:24:ef:04:c5:19:
15:bb:79:75:8f:6e:8f:65:34:58:17:5e:5f:96:80:
85:2a:63:db:44:ef:d8:e8:eb:55:b4:3d:77:f6:d3:
0f:dd:db:c3:93:e5:49:7b:7b:99:ca:8c:35:cf:16:
81:25:71:d9:cb:8c:e9:da:e7:50:02:43:92:f2:79:
56:35:0e:7b:ed:40:85:b3:56:bb:15:fb:ca:cd:80:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:1F:B1:51:12:E2:AE:E7:8B:BB:1C:AE:5B:57:C3:89:77:FE:45
X509v3 Authority Key Identifier:
keyid:1D:32:55:5C:61:D3:D2:29:E2:C4:A2:33:7D:75:FA:53:F6:F2:B2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTJVXGHT0inixKIzfXX6U_bysrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7461d2-376a-4420-a920-a79f9feef00a/1/HTJVXGHT0inixKIzfXX6U_bysrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:6d:01:11:c6:19:9e:46:74:45:5d:86:28:6e:40:80:69:
0e:1a:11:d8:bc:16:4e:e0:43:38:7f:51:38:17:f5:d7:ac:f6:
2a:e2:38:f8:39:db:46:33:82:3e:02:c7:53:18:df:ae:fa:3a:
55:27:2b:94:70:2c:01:44:20:64:ee:c9:29:72:ca:0e:dd:37:
6d:bd:8f:c4:f6:d5:25:04:2d:5c:a1:65:26:6b:fc:7f:a5:f6:
f0:59:c5:f4:10:ac:ab:81:d1:72:b8:47:d3:a0:6d:33:fb:c3:
a1:eb:73:bb:f7:10:8f:1f:b5:7d:ba:4a:27:fa:36:c1:79:35:
18:c6:9c:cf:ed:4e:85:f1:c7:82:55:28:40:48:6e:ab:a2:d6:
d1:32:7c:fc:d3:4c:d9:b6:60:45:50:ae:95:d8:9b:ac:b7:cb:
a7:49:bb:04:f0:bb:e4:02:eb:4a:c0:4b:a0:00:a4:0a:c6:ee:
da:8b:4c:8f:85:87:9e:2e:fc:e1:89:30:b6:4b:87:ae:c1:68:
6c:e3:18:ea:6c:b8:66:35:9d:dc:d4:19:2a:b1:54:c8:1c:e4:
f4:78:37:d1:ba:dd:b7:65:5c:e0:bc:a7:79:15:88:2d:a8:17:
d6:a6:18:67:c6:98:48:62:7c:90:7b:8b:32:c7:89:f5:cb:37:
ba:59:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:38 2025 by rpki-client