Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json)
Hash identifier: NEBG32S7iPEgUSYbQKkszmujWd3L7TQthXxcvbHFSWM=
Subject key identifier: 4F:79:AE:20:20:11:FD:0C:CC:23:1C:3D:C3:35:26:4D:5B:B6:17:BD
Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Certificate serial: 0197B821343145BC2ED072867EA8E8D02E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
Manifest number: 1346
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: rRtoDPbrXXfSS5KrwNe/W/gZD99Ei3+LtWsjQ2/rXO8=)
2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:34:31:45:bc:2e:d0:72:86:7e:a8:e8:d0:2e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=4f79ae202011fd0ccc231c3dc335264d5bb617bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:70:4d:0e:f2:4a:4f:7e:2a:e4:ec:42:d3:
0e:9d:af:af:1e:7a:fc:d8:d6:20:1a:8b:ed:48:7d:
1a:72:5d:0b:bd:0e:ba:a5:51:ef:e0:d5:90:34:6f:
56:5b:25:f2:88:f4:18:b3:73:c1:21:8b:08:05:85:
a6:45:0d:83:57:a9:ff:21:96:b6:62:dc:02:6e:e3:
46:2d:3f:5c:59:d0:32:4d:cd:53:1e:a2:8d:f3:a0:
1c:60:aa:94:04:dd:6d:c3:13:02:62:43:e6:9f:ae:
51:73:1e:3a:f9:10:4e:bd:59:ad:d2:ce:35:4b:11:
11:df:23:15:a0:1c:64:ab:76:85:15:d1:e5:88:89:
33:8d:3f:54:04:60:c9:9b:cb:7d:49:d5:80:83:aa:
51:36:f7:5e:c5:28:97:b1:ac:68:b5:cf:6e:24:46:
bd:a6:e1:af:6b:16:31:3b:f6:e6:2c:24:05:81:3a:
d9:a3:02:ea:71:cc:1d:fe:55:55:ba:d1:6c:0f:2f:
b6:f5:a1:0c:8d:64:10:2a:6e:63:58:14:d5:a9:6d:
d6:c0:5d:8e:d6:fd:e6:a7:37:a4:76:82:bc:94:46:
bd:54:51:90:d7:ea:9c:37:58:f4:03:56:d2:76:c3:
2f:2e:cb:ea:de:c4:8c:d2:4d:23:b1:f0:60:9a:d2:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:79:AE:20:20:11:FD:0C:CC:23:1C:3D:C3:35:26:4D:5B:B6:17:BD
X509v3 Authority Key Identifier:
keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:07:fd:22:7e:e1:72:9a:48:24:c4:cf:99:93:71:9b:9c:
7e:75:dc:cd:b6:af:ea:6f:bf:ec:57:d3:4e:09:27:c5:5c:63:
ba:4d:38:69:56:00:b4:b3:b2:77:9c:79:e2:60:0d:3c:1f:9c:
6c:15:8b:a0:64:7f:8c:c0:7e:7e:12:13:03:d5:ea:1e:11:4d:
74:03:7b:e6:0b:8b:18:cd:c2:4e:51:8b:4a:2d:4b:e2:fc:97:
86:df:59:78:9f:40:2a:cf:dc:1e:e5:50:22:0f:8d:a0:cd:f2:
ee:b7:9e:42:fe:be:d5:ce:e1:49:7d:7d:f1:1a:ba:c6:06:fe:
0c:02:2e:2c:84:d1:b7:96:e0:c2:90:99:94:c8:dc:ee:03:11:
57:9f:19:88:a2:c0:51:52:29:0e:60:68:36:e1:0a:99:16:4b:
e2:c6:85:92:2e:a1:69:85:fe:35:66:29:0f:a3:e9:0a:7a:53:
1d:a0:45:81:bb:fe:e0:ce:0d:11:ed:f7:be:2b:32:f0:2e:69:
18:d7:b1:ae:a1:fe:6f:5e:49:fa:94:74:a1:f5:b5:a8:4b:a6:
ab:93:24:63:77:23:6e:50:2b:3f:31:da:d2:06:3f:12:73:7b:
71:94:7b:0a:61:e0:2f:52:30:2a:5a:5d:3c:8f:4b:1c:00:93:
39:fb:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:35 2025 by rpki-client