Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json)
Hash identifier: 7IRopgSMKbd2J1M6zecanR0FuEdP+CsHZ2bBsSGOLFI=
Subject key identifier: 60:DD:C6:4F:6F:CD:03:01:5D:36:5E:A8:CD:67:28:5C:29:B6:92:0E
Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Certificate serial: 0198D65F940EDEEF1FD6EEE82EFDAA53F0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
Manifest number: 0C1B
Signing time: Sat 23 Aug 2025 10:00:44 +0000
Manifest this update: Sat 23 Aug 2025 10:00:44 +0000
Manifest next update: Sun 24 Aug 2025 10:00:44 +0000
Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: Uk9kpULXhyryuRozGhH0sM5LFXAxiMBMcdJH4NLgUCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:94:0e:de:ef:1f:d6:ee:e8:2e:fd:aa:53:f0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Validity
Not Before: Aug 23 10:00:44 2025 GMT
Not After : Aug 24 10:00:44 2025 GMT
Subject: CN=60ddc64f6fcd03015d365ea8cd67285c29b6920e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:cf:df:4a:09:f2:3c:24:44:f9:47:67:50:
c0:d7:66:1b:b4:3c:3d:f5:3b:2b:77:2b:2f:81:00:
7e:40:44:1a:95:7a:33:9f:ae:d5:b6:4d:62:9b:94:
e0:c9:d3:03:dd:a1:92:2b:f9:fe:6e:58:32:ec:ff:
17:f7:a6:8e:e8:9c:8a:03:ed:5c:ba:0c:4a:9f:55:
59:b7:d2:09:96:97:34:3b:06:0b:03:b5:4e:df:74:
81:26:ff:ce:d6:8f:3b:b7:92:41:dd:ad:1d:95:c0:
a9:5a:ea:70:ee:9f:59:58:f5:f2:19:44:44:9c:55:
bb:cf:0d:fb:55:04:ab:61:50:ff:8d:ac:15:cf:ac:
4a:2b:1f:31:79:f6:91:df:79:c2:ad:15:f3:b1:8b:
11:a8:cd:2b:ff:78:7a:5e:59:01:f2:8e:3c:a6:9a:
d0:cf:ff:ee:56:05:ea:b3:52:98:b2:0a:51:c1:9d:
1b:9c:37:7a:ea:d4:04:c4:d1:aa:33:0e:12:57:d1:
d1:68:61:a6:47:90:38:cd:d1:20:6b:dc:2d:a8:fd:
91:9e:cb:6a:fd:0f:1c:e6:e8:d8:87:b9:e6:08:b4:
f0:d9:21:7b:d2:18:43:4b:ba:e2:4e:d6:b7:e2:e5:
58:5b:6e:33:08:8c:a2:ea:de:9c:23:b9:d2:37:fd:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:C6:4F:6F:CD:03:01:5D:36:5E:A8:CD:67:28:5C:29:B6:92:0E
X509v3 Authority Key Identifier:
keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c9:48:a4:ee:b8:31:39:98:56:b1:4a:1d:cc:4a:42:6d:2c:
46:f8:4d:a9:04:60:7d:08:a2:2c:83:6d:7f:85:50:29:1f:c3:
86:c7:b6:0b:f1:2a:80:36:59:ff:ff:64:3c:b9:4b:03:cb:ff:
66:24:31:ae:4e:79:72:89:0a:16:af:21:4c:fa:b4:94:2a:5c:
bf:52:60:46:11:c9:32:c8:5f:6e:d3:e7:12:c6:f3:c9:ed:42:
5c:3a:06:f8:c3:08:fe:fb:13:f9:35:4c:0c:82:af:7d:1f:b5:
64:75:8c:f9:ef:12:b9:04:b1:09:1d:69:48:3e:ac:ce:3c:56:
17:26:6e:ac:bc:73:45:b5:ca:e9:a6:c7:93:51:58:cc:39:29:
82:fb:d9:2e:21:2c:02:11:ba:84:98:82:39:12:9f:0c:da:6a:
c4:cf:8e:52:a0:6c:9d:85:25:10:51:ee:bf:e9:a9:cf:6e:7e:
ad:48:b4:f7:3e:9b:2a:b2:69:d8:24:f0:e9:1c:ce:17:71:e3:
57:8a:7d:90:3e:0d:4a:95:29:24:72:9f:87:07:1c:1c:6f:c9:
89:78:99:1a:4a:9c:1a:66:52:73:7f:6a:93:e4:30:51:20:ec:
c2:c9:b7:f3:5c:19:b4:2f:2d:66:7a:ce:9c:45:92:16:09:30:
ee:87:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:06 2025 by rpki-client