Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json)
Hash identifier: Zwj+bMUrEAzxMPbP7vm32BhLZenQirPfx1ul0IjMHqY=
Subject key identifier: 47:13:72:55:E0:A7:D1:5F:E9:2B:72:BE:AC:78:FE:6A:C5:52:02:6E
Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Certificate serial: 0197B70EDAB62C0ED72157D0EF42332A6E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
Manifest number: 0BE3
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: maNEQ6/VyuzraFBQqFwKrJRd0YIr0n5EZDvCoy5piTg=)
2: oaQkn5zr2sFy17og-aVMkuLXdds.roa (hash: VtZ3pTO5W1yzA+ps5HMSQhypm611YNtn0vckyLuCUAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:da:b6:2c:0e:d7:21:57:d0:ef:42:33:2a:6e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=47137255e0a7d15fe92b72beac78fe6ac552026e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:5f:c6:99:c4:3a:39:58:18:6e:7f:91:92:
35:80:f6:c2:98:13:c2:cb:da:6f:77:d0:0c:c9:70:
3f:3e:a0:7b:49:67:63:03:4f:d7:fc:4f:f5:8c:7d:
4e:04:eb:64:85:af:d9:d2:7d:9f:8d:b4:8a:0d:92:
9d:4f:d8:90:2e:37:d9:51:ca:91:14:52:11:84:6e:
05:8a:6c:24:d1:9e:b3:53:36:12:3e:96:6b:59:23:
b2:26:5c:91:3d:55:05:a3:e7:49:11:cd:2b:8e:55:
cf:65:3d:44:88:bb:53:8a:03:45:70:f9:de:31:cf:
1f:69:fe:44:85:4e:12:f8:b7:de:fb:20:d0:56:d5:
96:cb:7e:ed:5f:e3:9f:0f:80:ff:4a:76:38:5d:14:
97:9b:0d:90:12:2d:61:e7:dd:86:3e:08:ab:39:1e:
a2:64:54:64:c2:20:80:e9:20:b5:9c:a0:86:99:84:
ed:5b:8d:ab:74:04:95:fd:79:0f:54:e3:cf:0d:e0:
f1:23:8a:24:9b:80:d6:74:da:40:ea:58:c4:ce:ec:
8a:24:b6:76:9c:58:74:80:2f:d8:ee:40:4d:c9:87:
b7:54:da:0f:cb:1f:87:c8:6f:0c:dc:48:f4:90:aa:
dc:ec:41:f0:37:a6:18:96:d8:f4:8a:dc:cd:24:9f:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:13:72:55:E0:A7:D1:5F:E9:2B:72:BE:AC:78:FE:6A:C5:52:02:6E
X509v3 Authority Key Identifier:
keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4d:9b:e2:36:6b:73:48:fc:5e:6a:38:4c:62:1f:1c:c8:d8:
d3:6c:7b:a9:cf:f1:58:0b:c1:19:87:e4:f9:d5:78:88:79:c6:
ff:08:be:fc:27:6c:bb:3b:f7:bc:74:1e:46:8f:6a:ee:5b:44:
80:3c:07:7b:d7:bf:9e:94:bf:e4:ce:b3:32:3e:75:ef:d4:6e:
93:df:43:1e:c1:c0:85:30:77:0d:d0:96:4c:57:e6:46:7b:1e:
31:b6:45:c0:0f:ed:a1:c3:64:f4:70:53:cb:5b:4b:2e:fc:21:
38:5a:8b:17:3a:ea:af:83:81:36:a4:7f:aa:75:d1:17:e6:da:
61:d8:54:50:5d:b5:58:2c:75:a6:ac:b8:30:69:d7:62:39:64:
7d:90:7f:9b:fb:97:fd:ba:60:c3:7c:cd:75:46:3a:3c:86:09:
d0:54:78:e0:bf:3a:35:57:13:b6:05:62:de:4c:b7:ed:1f:85:
9d:5f:cf:cb:f0:85:22:f6:e9:e6:36:bf:08:cb:e9:3c:91:d8:
39:c6:9f:e1:0a:8c:81:40:11:a2:8b:dc:a6:a6:e8:14:bf:16:
93:f8:1f:4e:ae:80:69:83:b9:d4:c4:65:de:1a:71:8d:3d:fb:
24:7a:57:d2:c4:e1:6d:cf:4b:7e:0f:32:5b:54:f8:8f:49:d3:
78:e9:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:05 2025 by rpki-client