Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: n67gOOdcBXaeynQhVtaJf0zZ51adqR5ssCFsvq9457k=
Subject key identifier: 25:6D:0D:63:35:16:37:1B:1C:EA:E3:A3:D2:FE:54:C7:1D:9A:57:D4
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 01974E5734D77BED07059C57251FF34A699E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 037B
Signing time: Sun 08 Jun 2025 07:00:27 +0000
Manifest this update: Sun 08 Jun 2025 07:00:27 +0000
Manifest next update: Mon 09 Jun 2025 07:00:27 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: DZxJJU7u8F3DpPOUODtKYXrN447JD9rmRwxgCIBuN0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:34:d7:7b:ed:07:05:9c:57:25:1f:f3:4a:69:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Jun 8 07:00:27 2025 GMT
Not After : Jun 9 07:00:27 2025 GMT
Subject: CN=256d0d633516371b1ceae3a3d2fe54c71d9a57d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:f6:85:b2:9e:db:50:a5:e0:41:a2:05:d5:
e1:34:81:51:5e:95:70:5d:ad:b5:19:3f:22:5e:1b:
ba:44:22:3a:2c:eb:e8:d6:59:0a:46:86:8e:54:31:
d9:58:2a:38:67:9b:47:48:b2:be:33:d0:b8:fa:2c:
c5:e9:83:dd:1d:38:c9:3f:78:e5:c6:ab:5b:4f:f7:
2f:03:5c:79:f4:ec:9a:e4:93:2c:51:0b:bc:c7:05:
21:3c:3c:59:8d:df:1a:d9:b7:ed:19:18:14:56:13:
75:7b:1c:ad:7f:d0:03:b2:38:71:3c:a4:a7:9e:32:
19:23:68:46:20:fd:64:96:75:44:c9:d8:de:61:67:
31:a7:3a:05:f4:f5:e1:40:40:f9:d9:f5:6f:07:bb:
4c:4c:21:f5:74:cd:28:bd:c7:3d:03:52:d3:0f:c6:
63:82:17:63:50:a4:dd:10:be:60:65:57:3a:4a:a5:
0a:96:dd:96:61:4f:f2:1a:85:57:dd:cd:12:43:12:
db:59:9d:94:98:d4:7f:0c:ed:b7:1f:80:8e:65:d0:
14:0a:e2:b9:b4:ad:39:16:83:e1:a6:7d:89:d1:71:
0e:fe:c5:7f:5b:9a:65:11:da:a7:b3:6d:15:9c:f4:
7a:a8:75:47:2e:ed:0c:f9:2f:9c:71:4a:56:f2:23:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:0D:63:35:16:37:1B:1C:EA:E3:A3:D2:FE:54:C7:1D:9A:57:D4
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b4:2f:32:c0:ea:d9:64:2a:18:88:ad:b0:2a:78:a8:4b:70:
01:6c:4f:9e:5b:58:fc:a9:84:c2:e9:77:6c:4c:1c:55:55:38:
b2:7a:3d:2d:a4:80:35:3a:55:e9:0f:4a:48:3c:be:e8:ee:ab:
51:e9:bf:cc:56:83:07:bb:27:72:42:20:fb:5c:77:7e:6f:72:
a4:83:0a:1e:7e:08:fa:81:9d:23:62:ef:4a:3b:3b:05:d7:c3:
1c:3e:37:da:1c:5a:69:a1:05:61:33:b7:61:74:0d:2e:6c:80:
db:92:06:25:82:d2:06:cc:f0:90:a9:38:4a:f6:7c:6e:08:ee:
ca:da:e7:b2:3b:a3:d5:1a:6b:81:1d:24:30:60:be:8a:48:49:
ce:a8:30:2a:b6:30:3f:56:2f:34:0b:bd:40:cc:49:84:3d:8f:
12:d4:4f:27:df:90:0e:e7:9d:fa:6b:23:53:2d:1a:6d:b6:68:
ab:0b:a2:c1:91:26:19:93:38:3c:9a:03:fe:c8:6b:1d:3a:24:
4c:27:02:78:44:b7:fd:35:60:ea:58:8b:67:67:19:f7:d7:5c:
bf:1c:3c:bd:e7:51:1e:f3:8b:9a:af:68:9b:26:bd:24:37:88:
af:76:4b:57:d5:f2:44:89:7e:e2:54:87:cd:1d:2c:42:50:aa:
dd:fb:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:09:44 2025 by rpki-client