Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
File: hGy8NY5qqP7tbgMmoECJt-XyqYk.mft (raw, json)
Hash identifier: spGTSgGroxauI5y2/B2QyQsPggIhWs4q813nahxMRhc=
Subject key identifier: 73:F6:8C:82:FF:25:F0:C0:87:B9:C2:C8:9C:BC:CD:72:80:56:1E:31
Authority key identifier: 84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
Certificate issuer: /CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Certificate serial: 01974A7AE0F26A03A55529221842D6040FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
Manifest number: 09DE
Signing time: Sat 07 Jun 2025 13:00:56 +0000
Manifest this update: Sat 07 Jun 2025 13:00:56 +0000
Manifest next update: Sun 08 Jun 2025 13:00:56 +0000
Files and hashes: 1: hGy8NY5qqP7tbgMmoECJt-XyqYk.crl (hash: JsuobaMkN+12NptxW2OdlFUuCneIoGN5xYjHM3iGBNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e0:f2:6a:03:a5:55:29:22:18:42:d6:04:0f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Validity
Not Before: Jun 7 13:00:56 2025 GMT
Not After : Jun 8 13:00:56 2025 GMT
Subject: CN=73f68c82ff25f0c087b9c2c89cbccd7280561e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:b1:3a:16:52:a4:cb:cf:c1:78:91:f4:cb:
d3:56:5f:81:5b:79:a2:05:12:88:8c:de:c9:e3:9f:
d7:e7:be:e2:51:8b:87:97:56:a7:09:5b:14:09:d0:
11:47:34:8f:dc:3b:47:53:d7:d3:2c:f0:dd:b3:86:
e6:de:5e:8a:8b:c7:63:48:58:fa:79:31:73:94:2c:
05:79:67:05:6b:66:58:04:b2:c7:05:44:03:c7:af:
06:d5:89:d3:44:7d:8b:b5:75:b2:0b:12:ea:2d:6d:
8c:21:f8:20:8d:65:c2:4c:87:77:8a:1b:ee:8d:63:
fb:0d:d9:ff:69:aa:c0:0f:72:da:a4:4f:d3:04:11:
8d:56:cb:d0:24:5f:bf:f1:50:69:56:54:62:9f:4b:
6b:f7:b7:18:28:35:3b:dd:30:fd:15:b5:e6:5c:36:
bc:86:18:6c:86:51:b9:81:79:c9:be:b5:b5:7e:86:
8c:8a:04:c5:6f:e3:33:d5:e1:00:42:8a:3c:6a:09:
32:16:14:55:98:09:07:e6:34:eb:4e:32:ae:c2:b2:
18:33:ff:7e:33:56:95:fc:cf:7a:61:33:23:c1:f1:
de:83:d4:ac:5d:fa:62:c4:e2:48:5f:7b:36:f6:66:
54:8d:b9:91:5e:db:b2:1f:68:bc:6d:5f:cd:cf:cf:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:8C:82:FF:25:F0:C0:87:B9:C2:C8:9C:BC:CD:72:80:56:1E:31
X509v3 Authority Key Identifier:
keyid:84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e5:ad:ba:f4:95:b7:de:a5:3b:e5:4a:34:5c:0c:ee:56:7b:
66:7e:b4:c1:31:4e:63:ad:48:9d:61:ef:60:0d:df:1d:4e:4c:
d6:d0:05:ab:86:00:4f:ad:c0:07:10:e7:f8:c7:a1:0f:68:27:
71:9f:ea:7b:92:08:d4:c3:99:64:49:8f:8a:cf:11:76:0d:4a:
67:2b:53:13:da:35:17:cc:6d:bc:50:d3:f4:9d:82:db:3a:96:
57:ba:95:0a:b1:49:47:ee:bd:3f:28:b8:5d:b6:0b:e3:fa:97:
28:a9:e2:40:dd:ed:30:1d:d5:e8:e3:39:be:9b:3d:8f:67:cf:
37:55:e2:dc:d8:18:3f:c7:c5:3b:13:74:00:3e:49:fe:57:1f:
26:4b:92:f7:6e:83:9a:c5:09:d9:8c:e6:b3:50:a5:86:ae:5b:
19:50:aa:3c:40:07:b2:a5:5d:27:b4:6d:e1:b9:04:a8:75:a2:
4c:3a:e3:a5:e3:aa:d0:47:f8:8d:61:e1:4d:d2:a8:0c:31:39:
5e:27:9c:de:a0:d9:ba:2f:1c:01:6d:a5:0e:35:17:24:17:28:
3a:58:59:3e:c1:13:55:33:88:2c:dd:f7:87:6c:31:ff:0e:03:
83:4f:ea:60:d0:b3:d6:67:f0:48:eb:31:6f:0e:33:00:d1:9b:
06:96:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:23:40 2025 by rpki-client