Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.mft
File: hPIXCGwc0XI9dXsvlZcA4GntHYY.mft (raw, json)
Hash identifier: xqAnsNX4B0sZEh60vWPwX6ytfwFcXV6832II+AD3lJs=
Subject key identifier: 3E:7B:6D:9C:F3:AE:86:F7:C8:D1:B8:B0:AB:2E:D8:3C:1F:44:07:3F
Authority key identifier: 84:F2:17:08:6C:1C:D1:72:3D:75:7B:2F:95:97:00:E0:69:ED:1D:86
Certificate issuer: /CN=84f217086c1cd1723d757b2f959700e069ed1d86
Certificate serial: 01974C6A10F159B2CE77F80DBD2DDC3EBE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPIXCGwc0XI9dXsvlZcA4GntHYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.mft
Manifest number: 0876
Signing time: Sat 07 Jun 2025 22:01:48 +0000
Manifest this update: Sat 07 Jun 2025 22:01:48 +0000
Manifest next update: Sun 08 Jun 2025 22:01:48 +0000
Files and hashes: 1: hPIXCGwc0XI9dXsvlZcA4GntHYY.crl (hash: 263oOonWuksz1OPsWDHCVAd5Wi+YrY+j+Ahe8LNGOHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPIXCGwc0XI9dXsvlZcA4GntHYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:6a:10:f1:59:b2:ce:77:f8:0d:bd:2d:dc:3e:be:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f217086c1cd1723d757b2f959700e069ed1d86
Validity
Not Before: Jun 7 22:01:48 2025 GMT
Not After : Jun 8 22:01:48 2025 GMT
Subject: CN=3e7b6d9cf3ae86f7c8d1b8b0ab2ed83c1f44073f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:83:17:72:47:8e:27:70:f4:83:f7:43:a6:
1b:ff:1a:a8:74:64:c5:ad:3b:3a:0b:ac:8e:70:82:
ad:a1:a3:d9:8b:a9:1a:a4:5b:d2:01:69:71:c2:dd:
b2:dc:22:85:1c:d6:69:35:a1:a1:21:67:f4:60:17:
04:e5:d9:05:55:27:a4:62:b1:79:25:a2:19:4e:cb:
09:90:8d:22:5c:76:27:20:29:13:e2:5f:54:8e:2b:
6f:de:40:f8:ab:7a:99:ac:bf:eb:9f:13:97:58:b2:
f3:e2:30:0e:56:68:7d:44:dc:d9:97:e1:b1:fe:08:
5e:7e:a8:8a:df:1b:e1:67:c8:eb:35:84:44:28:32:
21:f9:73:82:bb:4d:f9:80:53:48:14:fb:ba:a7:59:
cf:fb:75:1e:2d:85:56:d8:dc:04:b6:1b:1a:e1:18:
7a:a1:c5:61:d7:d1:23:1b:7f:2f:dd:ce:b6:1a:11:
cd:3b:cf:49:08:ee:79:9b:a0:ae:f7:31:e3:e7:46:
09:48:bb:7e:d3:07:e3:20:dc:2e:c4:6d:ae:72:44:
1f:51:17:dc:12:b1:60:15:9e:6f:cc:69:23:68:55:
e3:dd:59:10:af:17:37:18:98:d0:72:50:67:1e:a2:
16:83:99:88:15:db:f4:54:c2:fa:cb:32:32:55:5e:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7B:6D:9C:F3:AE:86:F7:C8:D1:B8:B0:AB:2E:D8:3C:1F:44:07:3F
X509v3 Authority Key Identifier:
keyid:84:F2:17:08:6C:1C:D1:72:3D:75:7B:2F:95:97:00:E0:69:ED:1D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPIXCGwc0XI9dXsvlZcA4GntHYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a0:10:fb:9e:2e:01:b7:54:0d:45:b3:2a:9a:0a:ad:85:35:
fb:c6:7f:30:c5:77:0f:e1:77:d9:5c:1e:22:b3:78:e7:02:2f:
cd:24:e4:98:61:81:ee:d3:e7:34:da:6b:7f:40:c9:8b:b3:55:
a8:ef:08:da:eb:0c:91:41:38:9a:2e:98:6f:2b:51:83:07:c3:
d7:f5:51:90:a7:b4:7d:c4:bc:19:07:6d:33:04:ba:79:f5:b4:
cf:39:8e:46:d0:fc:39:9f:d4:27:db:4b:3a:ce:d1:88:bd:83:
92:aa:2e:f8:06:6a:5b:18:f4:15:0f:ab:59:8f:38:16:52:ed:
ba:fb:02:5b:61:5c:33:ed:8a:59:a1:e0:6b:05:0a:06:4c:50:
97:b7:18:a5:f1:6c:0f:7a:e2:ef:66:dd:56:1d:56:07:dd:82:
4b:1b:10:31:af:d7:2a:e6:5a:aa:1f:b7:fd:b4:d3:d3:1e:77:
1a:38:22:58:4e:76:e2:65:09:19:40:07:3a:03:d9:b1:74:5e:
e6:73:0b:2b:51:ae:1e:14:a6:85:35:e4:c5:b6:09:16:34:97:
d7:96:d3:9e:63:61:6f:1e:1a:85:3c:c7:9a:6f:bf:ed:48:1f:
f7:1d:25:23:62:0f:e3:bf:28:0f:80:ae:67:4b:81:c3:4d:19:
28:53:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:57 2025 by rpki-client