Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: L6fARfHGkxLQ3OdESk0Y/zT5tfm1JL2EJaGEf+WgFVc=
Subject key identifier: 9D:5A:FF:C5:67:75:9F:BD:7E:E1:74:6D:53:18:BA:B5:FB:45:CB:DF
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 0197470C14DE833E79F8956E147571668671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 08BD
Signing time: Fri 06 Jun 2025 21:01:03 +0000
Manifest this update: Fri 06 Jun 2025 21:01:03 +0000
Manifest next update: Sat 07 Jun 2025 21:01:03 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: 46hr41b9Ma+wfHiuCiMf4ur2VdQxerUu5WvddrQ7J5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:14:de:83:3e:79:f8:95:6e:14:75:71:66:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Jun 6 21:01:03 2025 GMT
Not After : Jun 7 21:01:03 2025 GMT
Subject: CN=9d5affc567759fbd7ee1746d5318bab5fb45cbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:92:07:62:f5:31:06:82:ce:7f:07:bd:b0:
fb:58:9c:ce:0e:cf:56:ee:f0:60:1e:00:8b:38:c7:
d8:6b:7d:55:9a:dc:1b:b1:2f:f7:58:89:c6:a3:55:
f5:a1:04:03:cf:fe:55:bc:08:5f:c3:e2:92:d2:5a:
36:f3:65:0f:af:bd:4f:2a:81:ce:01:60:b0:bd:52:
45:c5:7f:3c:f3:2b:6e:15:48:4f:55:a9:d2:df:8f:
dc:c2:c6:c7:f0:b2:60:77:f8:4f:1a:8e:64:c4:be:
18:a3:9c:c7:d6:6f:8e:06:04:9c:3c:6e:cb:48:45:
89:f5:72:29:14:37:c4:ca:82:35:e6:39:3d:33:85:
c3:10:b3:6a:6e:25:01:63:f7:54:41:93:30:ee:3a:
80:96:02:44:d6:37:eb:e0:c6:74:c1:83:16:46:d3:
93:d0:ae:6c:72:5e:a1:dc:6b:7a:79:a9:ac:4e:51:
67:78:4e:21:85:5f:db:27:5e:a8:50:06:f8:aa:e9:
f2:0a:e5:14:41:50:8b:38:fb:db:1b:f9:57:90:e9:
65:04:a6:92:da:13:db:57:46:8b:d7:7d:e8:d6:de:
fd:0f:1b:1a:77:29:16:76:d6:19:8b:2f:4d:b5:81:
ec:7d:f5:a8:6a:05:68:3d:22:2a:dc:5c:99:ec:98:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5A:FF:C5:67:75:9F:BD:7E:E1:74:6D:53:18:BA:B5:FB:45:CB:DF
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:90:2a:fd:f0:79:cb:ae:8c:5a:d9:a1:da:49:dd:13:bc:15:
c0:2b:3a:4e:0b:3e:bf:41:27:1e:6c:17:07:84:07:9c:5f:23:
ed:bc:42:85:59:02:af:a2:d3:1a:a2:6e:ab:28:47:eb:9a:24:
55:cf:46:cf:10:e9:29:03:6b:f0:2e:3e:0d:fb:83:df:0d:7c:
14:66:31:98:23:5f:56:62:d2:dc:cd:b0:52:bc:d3:08:58:d4:
cb:68:db:f0:e6:0d:d0:51:45:60:b9:11:d4:f8:1f:cc:b5:aa:
73:77:80:c8:c8:38:0c:46:53:8e:48:04:e2:1a:df:64:f2:39:
fa:45:cc:61:37:f9:12:37:42:2e:1f:75:7f:15:ad:d5:87:12:
27:0b:09:21:9a:71:01:8c:d4:f0:a7:82:fd:c0:f6:89:8c:1e:
22:46:7a:12:b3:4c:42:d7:5f:ea:a3:fc:14:25:30:c2:d5:6a:
03:aa:7f:60:89:e0:7f:72:7e:0b:fc:90:95:e1:5d:ab:f4:a9:
b8:a8:3e:40:f3:15:0a:77:5f:1b:94:5a:5f:b7:32:e0:0c:40:
98:5b:c5:a2:5b:8a:e3:21:e7:ee:08:a4:52:55:5d:07:f8:0a:
43:e8:4d:b0:0c:5c:3b:e9:0d:b4:b5:68:14:69:85:78:44:0e:
ae:96:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:45 2025 by rpki-client