Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier: yvrACjTaEwr+B+nGrW/GOuXxT+dOM6O/oZq1C/wMypM=
Subject key identifier: 38:D6:28:C8:92:6E:FB:62:C4:10:4D:D3:6E:E0:6A:74:B9:63:D0:FA
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 01975046426D81558AC9484524FB53A61F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number: D4
Signing time: Sun 08 Jun 2025 16:01:10 +0000
Manifest this update: Sun 08 Jun 2025 16:01:10 +0000
Manifest next update: Mon 09 Jun 2025 16:01:10 +0000
Files and hashes: 1: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: jKp60GMplCxOgXNAehEzqTeMVHaOuh1P5Ln7lHnLrFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:42:6d:81:55:8a:c9:48:45:24:fb:53:a6:1f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: Jun 8 16:01:10 2025 GMT
Not After : Jun 9 16:01:10 2025 GMT
Subject: CN=38d628c8926efb62c4104dd36ee06a74b963d0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:89:de:f2:4b:a8:ab:84:0a:07:49:93:6f:
4b:d7:1b:6c:96:1d:c4:a6:c4:5f:7b:af:68:30:9e:
41:3b:4c:da:b6:58:64:c2:fa:48:53:bc:77:03:21:
02:02:a8:18:a4:e3:57:15:d6:83:01:6f:05:ea:aa:
15:e4:ac:e2:21:77:bd:27:6e:d5:67:3c:55:7c:ff:
e4:93:ee:ff:b4:96:78:f9:25:e0:56:1e:1e:c8:8e:
c0:e6:68:87:5f:d0:3a:f6:7c:f3:a6:49:5b:16:c7:
be:33:87:13:a3:67:4c:60:cf:49:92:2a:e9:73:71:
9c:8a:d1:1e:b7:d0:dc:ee:e5:04:d2:e0:19:87:12:
05:2e:5c:af:d9:4f:6f:67:66:1c:d1:96:16:1b:a6:
58:c8:a6:ef:32:52:4a:30:ac:9b:e7:4d:39:c5:1d:
1f:26:94:0b:1f:97:4f:83:5c:54:74:e6:60:2a:f9:
2b:b8:b2:a3:7b:9c:a5:34:c5:e8:82:a6:23:94:81:
a7:19:66:51:66:55:ae:06:f7:83:ae:73:18:94:83:
3c:70:d6:c9:a6:a5:80:9b:5c:30:2c:9b:15:d4:a0:
cc:e1:94:58:d1:90:d1:d6:ac:52:fe:57:d1:b1:13:
01:2b:10:eb:32:dd:f8:b3:3e:65:0c:37:36:49:99:
5b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D6:28:C8:92:6E:FB:62:C4:10:4D:D3:6E:E0:6A:74:B9:63:D0:FA
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:68:49:b0:9b:6f:41:08:70:c7:1f:6f:e8:c6:8a:3f:58:d4:
04:47:3b:5d:a1:7f:b1:d7:d2:51:ef:41:f8:dc:76:ff:e8:dc:
af:ef:ea:77:f6:40:03:21:57:1d:97:68:f7:fd:7e:05:39:c5:
6e:48:0f:72:7c:fc:24:02:1d:ea:1f:53:68:e4:38:10:d4:0b:
07:9f:c7:ab:a0:6b:7a:ae:98:4e:92:33:ed:91:57:90:44:bb:
2b:04:0e:77:1f:df:e7:53:a3:7c:4d:cd:5d:06:e1:6e:7e:85:
15:98:9a:18:e6:1c:46:87:a5:08:20:3e:7e:ba:26:31:a3:f6:
10:07:db:c1:3f:9d:31:4d:88:ee:18:cc:50:ec:62:f9:d5:63:
47:04:27:da:70:96:6e:a1:e8:f2:b4:a3:99:9d:be:2c:24:fd:
8b:f9:5a:72:75:c0:24:60:4d:bc:d7:bb:b7:11:00:88:b9:73:
83:72:d7:f9:47:23:cf:31:4c:24:e0:31:b0:81:ca:7d:73:08:
1a:f3:f4:b0:71:fd:a8:89:2a:c1:42:59:47:b0:22:26:c5:40:
c6:77:66:c0:78:60:5b:18:29:43:ab:d2:9b:49:77:0c:7d:de:
5c:cc:a5:d1:52:bf:6c:7b:af:42:c2:5f:5b:b4:6f:07:fb:d9:
7b:5d:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:19:09 2025 by rpki-client