Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: OLQZphZfTVlcB5mvnBldOjvEy2PIuUgVTwB+1FSQZC8=
Subject key identifier: 87:8E:3A:9A:EB:B1:74:98:F3:DF:C7:E8:F2:E9:98:FC:65:B9:57:4D
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 01974FA12BE59D728A58E2D911BE76AB5EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0AA5
Signing time: Sun 08 Jun 2025 13:00:51 +0000
Manifest this update: Sun 08 Jun 2025 13:00:51 +0000
Manifest next update: Mon 09 Jun 2025 13:00:51 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: hEq1ZJU5FZpbQuJ5oG4c/aLVE08bv38tAaDm3CYGfJw=)
2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:2b:e5:9d:72:8a:58:e2:d9:11:be:76:ab:5e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Jun 8 13:00:51 2025 GMT
Not After : Jun 9 13:00:51 2025 GMT
Subject: CN=878e3a9aebb17498f3dfc7e8f2e998fc65b9574d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:77:cb:a0:13:f1:79:31:c6:ca:89:26:3f:3c:
07:96:3d:78:1f:83:67:4a:01:fc:07:e8:23:03:62:
7b:bf:66:ec:77:d9:9f:33:a4:39:53:b7:ad:31:da:
a1:a5:a1:9b:43:e5:b9:5d:99:57:56:5b:a2:60:f4:
7a:24:31:fd:4c:fe:24:ca:18:08:25:0b:c0:11:cc:
07:ca:ba:61:d8:a5:ff:e5:dc:50:13:f9:b8:78:8f:
85:06:e1:3f:6b:9f:8d:f3:13:51:6e:f9:f3:0a:e3:
ce:89:c7:a5:d2:b2:f9:ac:0a:5c:49:cd:7c:06:bc:
3c:7f:46:57:36:9f:ec:00:25:91:34:93:29:04:c1:
9b:66:9b:14:1c:4b:a3:b7:3d:c6:e7:66:10:64:76:
21:7b:6c:26:98:ac:00:eb:14:23:bb:7b:52:1d:c4:
25:16:41:cf:4c:de:c1:68:46:33:09:0a:6e:af:51:
99:93:9d:59:4a:ae:20:68:96:f5:62:ee:d0:0c:1c:
50:22:58:7c:0b:71:52:de:bf:0b:35:ab:6e:b1:3c:
16:3c:e6:65:bd:74:1a:05:06:8c:6c:cf:41:b0:47:
31:1c:c2:d2:45:53:1d:07:50:1b:b2:03:19:ff:7f:
0f:a7:54:58:cc:33:a7:6b:34:6c:9b:9d:30:1f:46:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:3A:9A:EB:B1:74:98:F3:DF:C7:E8:F2:E9:98:FC:65:B9:57:4D
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:4a:f7:5a:c1:b5:46:00:fb:c3:47:33:63:91:85:6a:70:
f8:f6:87:f0:9b:5c:78:f0:4b:59:2a:4f:df:84:d8:e6:d8:5e:
95:95:38:d8:49:18:5c:84:49:3e:19:ca:86:18:5d:a7:ae:c7:
d3:9b:89:ee:2f:19:95:3a:0d:da:fe:91:56:61:5f:d6:a6:43:
83:8e:e6:d8:8a:66:5d:6d:48:50:ea:d0:61:fd:ab:5c:db:7c:
1d:ea:2b:b2:6b:ac:42:06:93:4e:68:81:4f:6d:f3:c9:56:d5:
ab:3c:6c:59:8b:3f:4b:df:3a:d5:6e:31:79:6a:7f:ff:bf:de:
2f:0a:4e:3e:a2:22:b6:7e:e2:df:ab:0d:8a:ef:8d:5b:27:cd:
3f:8e:37:e3:e0:9e:08:2f:9f:0e:14:ae:9f:cd:64:6e:4d:8a:
5f:ee:88:5a:8a:21:df:c8:50:23:93:ac:c0:4e:c9:ad:28:49:
0b:38:7c:78:f9:8d:ce:8a:03:0b:03:9c:6a:e9:3e:a6:12:ca:
42:db:30:28:fe:b3:73:40:ad:ca:44:e8:df:99:d2:d9:cd:82:
81:ee:db:54:7f:0c:c4:e9:97:51:b8:70:38:fb:5f:f5:c3:dd:
07:d2:f3:a1:81:aa:d8:a8:0f:b0:74:32:3d:a6:84:88:bf:64:
cc:f4:9f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:48:19 2025 by rpki-client