
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File: HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier: kujINxGw4TSA5mQNnpFMWtrAXX9HyF3e4pnH8a7ogWs=
Subject key identifier: 4D:2F:99:09:D6:25:F8:1E:B4:11:C8:AB:22:79:DD:5A:1E:46:F2:6C
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer: /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial: 01974A7A71E23E923E8A54D335875AB4F07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number: 0C10
Signing time: Sat 07 Jun 2025 13:00:27 +0000
Manifest this update: Sat 07 Jun 2025 13:00:27 +0000
Manifest next update: Sun 08 Jun 2025 13:00:27 +0000
Files and hashes: 1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: 1RaAUwQ9J5ouVrLACcn38K8fK2ZL5F+/Bx6K0u5NVuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:71:e2:3e:92:3e:8a:54:d3:35:87:5a:b4:f0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Validity
Not Before: Jun 7 13:00:27 2025 GMT
Not After : Jun 8 13:00:27 2025 GMT
Subject: CN=4d2f9909d625f81eb411c8ab2279dd5a1e46f26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:30:8b:32:ac:2f:a9:99:f2:84:57:8b:dd:
71:57:56:be:bd:15:2a:d1:51:d7:4d:6c:38:a1:48:
e5:59:c0:91:f2:a3:ad:e5:dd:7e:d8:51:d2:bb:0f:
00:f4:66:c3:69:b0:87:81:67:35:79:bb:c4:b1:4f:
31:8d:51:79:96:64:3e:6d:89:fd:53:6d:a0:e2:63:
fc:db:a8:ca:1b:08:81:c1:b9:39:fe:76:d8:7b:73:
8b:4f:f7:6e:1f:4f:c0:5d:26:d4:b1:c4:d8:b8:a6:
75:25:36:ad:9d:30:e4:b5:f9:9c:1d:87:d1:0b:39:
1b:3a:89:47:32:bc:33:63:ea:7d:3c:ba:6d:8d:cf:
06:c8:50:14:a2:f1:ce:61:c9:ce:b8:92:0a:e2:1c:
50:92:79:bb:69:d7:c1:05:f0:c0:28:d8:98:d5:81:
72:75:b7:ed:04:22:8f:bd:31:f9:18:41:1d:57:6f:
02:05:a8:9a:eb:17:b7:cb:a6:61:6e:be:e1:58:02:
a9:ac:21:d7:14:f4:05:43:2d:14:97:9c:e1:0b:6d:
d1:6f:57:b5:37:cb:f1:86:2e:69:84:9f:50:6a:a4:
8f:b9:52:7b:52:56:85:5a:fa:97:9f:5f:20:dc:27:
71:91:73:01:43:ee:9a:2a:24:9a:d0:2c:b4:7e:e6:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:99:09:D6:25:F8:1E:B4:11:C8:AB:22:79:DD:5A:1E:46:F2:6C
X509v3 Authority Key Identifier:
keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:63:a1:ef:75:63:a2:09:7d:04:a2:38:47:04:19:c1:c5:
44:2b:19:26:5b:9c:02:2e:ae:33:91:83:39:c1:95:d7:88:70:
0f:f5:81:8d:2b:4c:0f:e3:9e:b7:e0:c6:a1:1b:28:35:a6:9f:
f8:53:bb:e2:dc:7b:94:01:be:2c:c2:b2:a1:34:5c:29:2f:da:
85:3d:74:47:c2:21:05:85:8d:20:1f:f9:01:35:0b:22:0a:48:
13:79:0a:bc:ae:1b:7d:73:bc:1c:a9:60:a4:f8:45:9d:e7:0f:
40:a9:cf:32:02:b4:6f:38:c2:76:12:65:1f:57:8e:03:55:48:
50:4e:c6:42:f5:9c:e7:69:3e:91:6c:5f:62:5a:94:26:57:48:
a7:54:e1:eb:39:64:d5:4f:8b:41:b8:1e:15:bf:b3:49:5e:23:
91:be:75:6e:fc:ba:fd:23:75:01:fe:ce:47:ca:20:5b:8b:7a:
8e:27:bf:f9:45:67:57:a2:90:0d:cb:7e:77:d7:24:b3:a5:99:
df:46:16:52:0d:6d:c5:d4:71:8d:4c:49:04:c2:11:10:35:b1:
fc:10:84:77:61:23:0f:2d:34:c1:e4:56:d9:c0:4a:32:6b:4c:
ef:b6:68:86:7d:c8:f6:37:8b:66:95:79:c7:2a:67:1b:75:3b:
67:64:28:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:11:38 2025 by rpki-client