Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: Hf6L75ceGjmivKOOGUUN1wT/CHCcwjZEvI7lywl63Gs=
Subject key identifier: EF:D2:96:04:4F:BF:00:67:F2:80:BE:EB:67:EC:F8:75:0A:10:73:CB
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 01974A7AB8B6AA6D28E042138F301DEC4936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:00:46 +0000
Manifest this update: Sat 07 Jun 2025 13:00:46 +0000
Manifest next update: Sun 08 Jun 2025 13:00:46 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: mvinUKN75blWucIZXCAwS1Xm/kbgjqBA2yrNQK1wB7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:b8:b6:aa:6d:28:e0:42:13:8f:30:1d:ec:49:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Jun 7 13:00:46 2025 GMT
Not After : Jun 8 13:00:46 2025 GMT
Subject: CN=efd296044fbf0067f280beeb67ecf8750a1073cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:97:b2:e4:74:ca:ad:8c:90:6b:aa:92:76:
e1:15:1f:8a:f2:fb:9e:96:ff:cb:94:47:d8:ac:0e:
5e:36:ca:7f:4f:f3:fb:49:e2:ce:6c:00:5b:17:ac:
d3:3f:ce:94:a4:01:fd:b1:f7:60:d4:13:f4:6a:6c:
27:94:d3:67:84:2f:83:1b:93:8b:b6:b8:c8:d5:de:
69:ec:15:78:4c:2b:53:92:97:4a:fb:2d:1a:09:eb:
c4:7c:58:50:34:54:e3:bf:31:00:c6:85:e1:2a:19:
8e:f7:0d:40:4b:a3:2b:ee:3c:8f:e6:f5:27:91:73:
89:56:93:ef:e3:94:25:2e:5d:b0:2e:ac:a2:e0:62:
19:0f:80:5b:5a:5e:a0:39:11:92:f0:6c:dd:e0:56:
31:91:7e:ec:b9:06:de:a7:16:bd:01:88:d4:66:15:
a7:06:5b:70:0b:be:1d:d7:5e:67:9c:5b:c5:83:7e:
2c:73:1c:1d:d9:24:50:f2:35:3c:ee:9d:65:74:32:
bd:e2:42:a2:8d:a4:1d:b6:32:f0:d8:6d:7c:97:0e:
e7:7f:f4:46:7d:43:6c:9c:a3:eb:45:1b:51:4a:3a:
55:44:d5:42:70:33:70:5c:59:8b:4d:00:5a:63:14:
e9:05:35:75:02:bb:5d:4d:76:52:fe:1b:b0:fb:5a:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D2:96:04:4F:BF:00:67:F2:80:BE:EB:67:EC:F8:75:0A:10:73:CB
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:82:4a:db:75:55:73:87:98:3d:79:2e:07:0e:73:e6:84:2d:
55:9e:f8:9f:95:54:06:65:63:e2:5d:e0:6a:2f:55:42:9e:31:
59:bd:b4:82:54:d5:67:a1:c9:e5:95:16:08:53:bc:f3:a9:f6:
08:86:8f:08:cb:dc:1d:b6:bd:36:24:26:fa:b9:59:63:af:d0:
a0:f7:41:42:86:6c:4d:15:38:bf:24:79:78:a1:1f:dc:8c:94:
00:eb:1f:a8:ff:48:e4:d0:01:40:95:f5:46:75:e0:d5:3b:09:
cc:20:81:bb:34:ba:b1:ae:30:d2:73:bd:a2:a2:70:62:15:b7:
7c:a4:bb:9e:9b:a9:0f:85:00:e8:00:40:35:cb:1b:f8:d3:7b:
1a:63:8f:58:f6:92:4f:bb:1e:b2:89:73:b6:8a:9f:b7:fb:bf:
13:37:10:de:f0:d4:6b:47:5e:14:46:b8:83:f9:47:e4:82:7c:
76:4b:81:15:a0:69:e1:89:70:90:a0:b4:4a:52:84:62:24:ea:
c3:d1:a6:be:70:61:19:d9:98:32:1e:39:9d:15:e0:c1:34:8e:
60:ee:66:ff:cc:fb:48:4c:8b:12:3f:0a:37:f3:6a:e9:21:a4:
41:12:eb:13:a9:c2:ae:14:df:74:c8:58:53:f9:5b:29:fe:8f:
d8:cd:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:14:00 2025 by rpki-client