
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier: VaMQjcm3Bk0nJnabOazU7sJgtgnmKgK+MJpLjFCts2o=
Subject key identifier: 2E:EF:E5:2A:81:44:6B:D7:30:4F:BB:4C:D0:2E:A1:67:A8:69:F2:69
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 019745F9133F6A6C7B7EE4BC0C5A77909F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number: 107A
Signing time: Fri 06 Jun 2025 16:00:40 +0000
Manifest this update: Fri 06 Jun 2025 16:00:40 +0000
Manifest next update: Sat 07 Jun 2025 16:00:40 +0000
Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: o7TAHA8ff2vhA13+YElyx07EtrGBPNQVDltNAVnhsSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:13:3f:6a:6c:7b:7e:e4:bc:0c:5a:77:90:9f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Jun 6 16:00:40 2025 GMT
Not After : Jun 7 16:00:40 2025 GMT
Subject: CN=2eefe52a81446bd7304fbb4cd02ea167a869f269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:73:ed:c6:f3:9c:48:ab:02:12:84:a2:39:
42:22:6b:8e:ee:dd:09:0c:dd:b1:70:ff:59:b9:8e:
86:19:7d:c3:2f:ec:12:f0:90:21:59:f6:6c:06:96:
10:8c:b1:90:fb:1c:00:f4:57:ee:d3:d3:80:58:0f:
05:6d:74:31:a8:c2:35:99:38:7b:95:7b:cb:4b:8a:
cd:b8:64:06:e8:82:13:1f:56:1b:7d:43:a3:3d:69:
84:5e:1f:7e:05:21:92:d3:02:40:0d:11:f3:9b:c1:
82:69:c2:5d:8c:8b:df:2f:e7:40:f9:5a:62:41:db:
8a:36:87:d1:9c:4b:a9:17:5a:0a:b5:f5:de:43:56:
7b:41:33:04:33:d4:6c:b0:ad:25:89:ff:41:c1:31:
19:18:78:eb:27:87:21:d5:8a:29:78:3e:ef:4b:d3:
e5:c2:5f:7a:af:75:73:0c:27:ed:3d:49:2b:f3:24:
41:43:6b:73:a6:10:7e:ed:81:bc:b1:c9:fd:ba:74:
c3:7f:79:e8:26:f5:65:28:e5:00:ec:de:35:83:f1:
62:a1:bb:0c:42:7b:a9:ac:8e:e6:0b:69:91:f2:49:
d5:d7:0a:ac:af:3d:e2:9c:ea:c5:15:65:00:d3:4d:
d9:05:d6:34:5b:4c:1b:c2:a0:8d:27:70:db:ec:c2:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:E5:2A:81:44:6B:D7:30:4F:BB:4C:D0:2E:A1:67:A8:69:F2:69
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bf:3f:9a:9e:d2:79:0c:40:c9:d0:85:4d:87:a8:8e:9f:77:
02:d4:b5:e2:de:db:12:05:a4:ce:86:7c:f5:fc:8a:02:ac:46:
31:08:37:2b:02:8f:ea:39:9a:9a:0b:63:e7:d9:e5:1e:21:a6:
54:d4:6a:ce:d5:15:ef:4f:b2:bb:a4:d4:c0:ad:16:57:99:ab:
e1:4f:57:3f:00:57:1d:7c:e1:51:e4:58:9f:45:e8:33:0f:bd:
28:ec:0b:fe:1f:d1:43:8c:0f:73:af:ec:c4:9d:e4:2e:99:c0:
bf:12:a7:0b:63:ea:80:e7:5a:b1:7b:1a:dd:f0:e0:40:c8:a1:
be:bb:03:c5:96:9b:7e:3c:cb:a0:f3:74:d4:47:f7:7e:34:b3:
d8:c7:ad:3c:32:aa:d0:29:7d:d2:22:a0:45:e3:12:91:28:0e:
60:d6:95:31:94:11:46:04:e4:46:de:5c:5f:e4:03:c3:50:ec:
7a:60:00:40:d5:48:5d:e2:c9:03:87:28:e4:77:3c:f0:ac:69:
7f:f9:c5:4d:e9:0d:31:3b:ff:c2:02:c4:a0:0e:1a:a1:67:91:
bf:ae:a8:9a:a2:ee:e8:1e:b1:c0:06:98:10:4c:cd:41:d4:b2:
44:b7:66:d6:a3:b4:9c:a4:c5:b7:d7:bf:84:f9:24:9b:bd:3b:
14:f4:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:44 2025 by rpki-client