Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json)
Hash identifier: lKCytBneWaT4dUF+dra/Jj0IaO9P0+zOdcyPxR09lFw=
Subject key identifier: 35:A3:ED:1F:66:40:48:7F:4A:0D:BB:F3:5C:EA:09:89:F9:6F:E4:3E
Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Certificate serial: 0197C238589D1E437533AD1F618850CBBF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
Manifest number: 0B8C
Signing time: Mon 30 Jun 2025 19:02:42 +0000
Manifest this update: Mon 30 Jun 2025 19:02:42 +0000
Manifest next update: Tue 01 Jul 2025 19:02:42 +0000
Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: clLWpscLuRViSGrfe2L5p6Mwdjvewarc4ACVBIZbFOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:38:58:9d:1e:43:75:33:ad:1f:61:88:50:cb:bf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Validity
Not Before: Jun 30 19:02:42 2025 GMT
Not After : Jul 1 19:02:42 2025 GMT
Subject: CN=35a3ed1f6640487f4a0dbbf35cea0989f96fe43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:20:c3:64:3f:d6:0e:49:a2:c5:6e:b4:39:
37:7a:67:46:d6:61:06:4c:30:9d:18:4b:2d:9e:2c:
71:29:7f:b3:f8:a6:c3:4f:cd:b7:d2:1c:ca:7f:4e:
a4:fb:c2:47:b9:00:99:14:40:58:f2:7d:ca:3a:fd:
c6:f8:4d:12:93:6b:84:56:6f:9d:45:c1:36:66:0d:
7f:d9:a7:ee:fa:a3:0b:39:e7:ab:dd:a9:02:2f:e5:
08:a0:7e:aa:ae:77:a6:84:04:7c:64:96:8c:ac:8e:
1e:06:be:8c:2c:d2:ec:4a:fa:c7:ff:b5:2d:03:04:
79:af:bc:59:dd:26:85:f3:55:d9:68:04:45:dc:82:
89:e7:42:da:4f:15:12:94:8d:99:b0:bc:14:cb:09:
51:3d:c1:5b:77:de:04:6d:e0:fd:f8:03:b3:f7:2a:
2a:c9:82:ed:c3:ed:50:91:d2:14:85:9a:c2:14:10:
8d:85:1d:05:8f:e3:a4:75:78:91:b1:66:14:7a:20:
64:83:4c:7b:e6:47:e5:98:75:82:68:94:43:25:0b:
34:5c:90:30:3b:c4:dc:ec:dc:2f:31:20:4c:de:28:
da:4b:75:18:6e:84:4e:26:51:e3:d5:e8:47:0c:ba:
a0:c0:d8:35:f0:65:07:7d:66:01:31:a3:b1:40:cb:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:ED:1F:66:40:48:7F:4A:0D:BB:F3:5C:EA:09:89:F9:6F:E4:3E
X509v3 Authority Key Identifier:
keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4e:0e:a4:d9:73:4f:c5:85:47:8c:91:2a:37:f0:d2:ac:8c:
fa:7e:73:7e:07:d8:62:5b:14:49:5d:f0:38:27:db:1c:fb:84:
e2:6a:c3:32:0d:54:68:6f:0b:01:1f:04:ca:37:20:cb:3c:62:
d5:97:dd:47:75:1c:08:d4:cc:44:5d:0c:d9:ac:8a:ad:e5:d9:
72:3a:5c:fc:c4:30:36:08:7b:11:ba:63:0b:29:a4:ac:a9:c4:
61:ee:81:f0:b7:4f:e1:2f:10:22:d5:63:c2:78:09:cf:42:71:
9b:ad:66:5f:f5:77:71:9d:40:e8:0e:d8:62:83:0b:f1:a8:c4:
48:51:2c:eb:54:55:1a:09:0c:1d:1d:f2:81:d7:b4:1c:d1:dc:
59:f2:39:fd:cd:ac:a9:1e:e9:73:75:6a:4b:9e:16:6e:e3:7e:
8c:44:48:f2:0d:9f:b9:c1:8e:23:14:f9:6b:35:f4:3f:de:a6:
a5:cf:db:9f:00:57:5f:bb:19:30:69:77:8b:2e:d4:85:e5:e6:
fa:f9:73:65:84:00:be:4d:79:1c:65:2e:ec:26:00:18:bc:8b:
fa:f7:20:d0:f9:92:43:42:cf:9d:31:6d:a0:be:c3:44:ae:10:
e8:b6:cc:74:21:99:4f:33:c7:7f:38:de:e6:78:46:22:63:3b:
f3:46:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:03:00 2025 by rpki-client