Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
File: HzJorQbzq480bQ3jm9SuqztlhNk.mft (raw, json)
Hash identifier: u//VqWSd78vyJD23t8in+YQOgSY433rhh5xZY6xCMhM=
Subject key identifier: DD:2D:7D:D4:AE:5D:94:6D:A1:93:66:40:B1:6A:27:7F:FE:74:63:59
Authority key identifier: 1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9
Certificate issuer: /CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
Certificate serial: 01976D3E3AF0F1CED52FD5F1A365E3DF6956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
Manifest number: 0789
Signing time: Sat 14 Jun 2025 07:01:24 +0000
Manifest this update: Sat 14 Jun 2025 07:01:24 +0000
Manifest next update: Sun 15 Jun 2025 07:01:24 +0000
Files and hashes: 1: HzJorQbzq480bQ3jm9SuqztlhNk.crl (hash: +XJl+VcbTAC2J6QfGL0QNkz4SVzxPTO7I9HDMxi/Ad4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:3a:f0:f1:ce:d5:2f:d5:f1:a3:65:e3:df:69:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
Validity
Not Before: Jun 14 07:01:24 2025 GMT
Not After : Jun 15 07:01:24 2025 GMT
Subject: CN=dd2d7dd4ae5d946da1936640b16a277ffe746359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:b1:c5:7c:b5:be:cf:9b:06:d6:f3:74:1f:
14:90:d4:35:1e:80:26:7a:d6:d8:14:00:9b:de:9b:
a6:94:ec:32:9c:07:9f:c8:4e:ea:ad:aa:e5:d3:52:
5f:6f:a1:70:65:d5:b4:0d:ec:55:1d:34:18:9d:ce:
b7:35:b4:c7:0b:bc:49:4c:7e:04:10:8e:13:13:e6:
ac:0b:17:74:3e:e9:51:26:8e:43:5a:9e:6f:2f:be:
3d:31:cd:3f:dc:f6:e8:ae:94:11:4b:25:c9:5c:25:
dd:12:4e:29:30:bf:e1:00:4d:03:85:db:0c:d4:7d:
b9:cd:49:b0:d3:88:8c:9c:7a:cc:d8:c0:ae:f2:39:
83:95:a8:51:32:f7:ec:69:40:c6:e8:98:d3:db:76:
fa:6a:a5:e2:f7:39:fe:a5:a7:cb:2d:0f:17:c2:a5:
11:8e:9a:ff:77:b5:64:f8:89:74:a9:40:20:c9:fd:
63:d3:f2:bd:4e:9e:51:68:8b:a4:41:cc:51:d6:c0:
5a:dd:4c:94:51:f5:63:f9:bd:2c:df:9e:ab:eb:02:
3b:7e:ec:c9:9a:21:ad:52:58:cb:6d:9b:30:b3:07:
39:9b:8d:90:3b:28:b2:af:2c:66:01:1c:a6:75:1b:
57:a9:31:30:5e:0b:4e:65:db:33:8e:49:91:87:e0:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:7D:D4:AE:5D:94:6D:A1:93:66:40:B1:6A:27:7F:FE:74:63:59
X509v3 Authority Key Identifier:
keyid:1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:01:e9:6b:85:78:ff:67:6c:a8:22:61:25:af:a9:e8:f8:54:
92:74:ce:58:0a:78:9c:79:b1:3a:d7:d0:da:26:29:eb:07:54:
e8:8b:29:2f:0d:0f:03:b4:60:f5:d0:a5:4b:ed:9b:87:f7:c4:
f7:e4:6f:74:8b:d0:a7:74:01:f2:2e:9c:7c:68:51:a3:33:20:
98:91:dc:3a:71:e4:8b:8f:6f:5e:20:ab:ef:3b:f8:5a:f1:ba:
ee:b9:ff:90:f2:b4:3a:fd:15:cb:96:ff:f7:81:d1:0b:47:42:
40:8e:5c:71:db:97:e5:7e:3c:db:d3:5e:77:21:e9:34:cc:fb:
60:b0:62:ae:9c:82:11:d7:fd:b3:97:86:34:f2:fb:6b:1b:2b:
39:ee:17:18:75:31:f2:d1:1b:c6:b5:ef:86:fe:da:cd:68:a5:
e3:23:24:04:0a:c3:c4:8a:97:30:0d:c7:d3:dc:c2:d4:52:b1:
0c:47:d8:57:53:12:39:b9:31:ae:d4:41:90:b6:08:ea:a0:f2:
cd:13:ca:48:77:06:50:aa:50:1c:8f:08:49:0a:61:eb:2b:97:
e7:6a:8f:4a:7b:df:1a:d0:3e:07:03:33:b1:2b:3e:8e:75:b8:
84:29:4d:f7:3d:5b:73:f7:84:ea:64:bd:6b:28:68:58:01:35:
a6:94:65:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:28 2025 by rpki-client