Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier: dyw532iGwswUhESQzUIMC/EAsYcNX53Ohser3KgEY68=
Subject key identifier: EB:76:E2:A7:3A:C8:4A:B2:5A:E8:CE:F8:4E:21:2D:0E:CC:BE:61:CE
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial: 0197BC6D70F116885156F5E80938C8D921F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 16:02:58 +0000
Manifest this update: Sun 29 Jun 2025 16:02:58 +0000
Manifest next update: Mon 30 Jun 2025 16:02:58 +0000
Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: gBmaFJVQCi3koEV4KV3D/XaAN2Y6yKOT2cHNA7bkPPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6d:70:f1:16:88:51:56:f5:e8:09:38:c8:d9:21:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Validity
Not Before: Jun 29 16:02:58 2025 GMT
Not After : Jun 30 16:02:58 2025 GMT
Subject: CN=eb76e2a73ac84ab25ae8cef84e212d0eccbe61ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:46:8f:16:2a:50:5a:f2:50:5f:81:ab:50:
44:06:23:20:b1:40:8e:1e:ab:d6:61:8e:3f:da:49:
d7:65:ee:ae:ff:42:ea:90:7c:d7:7c:ca:5c:e5:3c:
a5:f4:ce:8b:e5:70:88:26:d2:98:04:4b:f0:05:8c:
69:a7:f1:24:ac:b6:a4:33:b1:e2:c6:03:1d:2a:cf:
31:03:18:09:d1:55:b7:66:56:cb:e1:94:36:92:0f:
15:ab:5f:c8:51:c7:62:d7:a2:2d:0e:82:d4:e5:c4:
c9:cf:b3:82:0c:58:82:c7:a8:07:70:8a:99:11:9e:
bc:3f:1e:74:5d:71:71:7b:14:e2:80:c3:1c:44:ee:
0a:c7:52:44:20:ea:16:b8:64:b8:d9:6a:ac:b8:d5:
8d:5b:4a:a0:20:40:95:ac:60:c8:6c:b6:6e:06:2f:
e7:5d:f0:37:10:36:24:88:33:19:d5:92:ff:88:5d:
7e:6b:44:72:f3:d7:8e:cf:ed:33:bb:43:c9:4e:f4:
99:0c:28:0e:9e:66:b5:2a:00:07:d1:50:63:1f:78:
61:d8:dc:a5:47:6d:b6:6b:2e:41:08:d4:d5:ee:6d:
ad:cb:62:d7:14:8f:fc:18:b8:66:77:2c:44:c8:0d:
89:4f:ba:9d:19:80:ba:17:91:13:03:5c:d3:e5:e5:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:76:E2:A7:3A:C8:4A:B2:5A:E8:CE:F8:4E:21:2D:0E:CC:BE:61:CE
X509v3 Authority Key Identifier:
keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:64:44:ea:78:dd:74:f7:7b:91:4c:33:ff:de:0d:35:c2:de:
59:cc:e8:40:42:df:43:a8:6b:68:d3:7c:88:3f:21:ce:22:d0:
c2:15:d5:5f:39:08:98:b8:34:9d:8c:e8:65:ac:3a:73:51:ce:
43:a4:ec:0c:2d:a3:43:22:cd:2e:b4:78:ef:63:8c:1b:66:6f:
eb:a7:ce:d3:52:5e:c7:a4:b4:53:4f:75:06:0d:54:eb:36:ed:
f5:a0:7f:6b:5a:7f:33:24:79:ff:9b:c9:b4:85:b0:0e:58:6f:
31:4b:0f:30:bd:d2:f6:ad:79:7e:93:6b:cb:09:f9:b8:04:b5:
d0:5b:4a:59:a6:78:5a:57:77:54:70:d9:9c:ba:a9:05:8f:88:
e3:9e:37:dc:4a:9f:d0:b8:cf:92:1a:02:20:b0:c0:f4:1e:80:
44:2b:b4:6e:3c:ea:0f:4e:58:b5:0b:a4:d5:80:bc:99:83:fa:
74:cc:b6:6b:04:c9:23:59:a4:f5:d6:92:aa:80:1c:f9:00:91:
47:d3:d6:03:84:a2:9a:2b:7b:da:8f:1f:d4:0a:7d:10:93:a9:
fa:02:7d:52:f8:1a:51:07:f8:93:9c:4a:c6:03:51:42:e1:53:
86:39:69:43:bb:48:70:4c:7c:2c:c9:fb:b5:03:77:e3:c1:3e:
c2:26:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:06:44 2025 by rpki-client