Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: MCxXfVhgRut+fClWO6+Kvo8QzpS2705S+qLSxixBmPs=
Subject key identifier: CF:92:0A:58:CB:96:C7:B5:A2:D7:70:B5:A1:0D:98:A8:96:6B:6A:1D
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 0197B88F634B69DE8F9EB94DBED81AD6E889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 06F2
Signing time: Sat 28 Jun 2025 22:01:33 +0000
Manifest this update: Sat 28 Jun 2025 22:01:33 +0000
Manifest next update: Sun 29 Jun 2025 22:01:33 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: NlKDXOON2xM2g8aoRUMu+RPFPJpEs4f6d8c/9O2JpTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:63:4b:69:de:8f:9e:b9:4d:be:d8:1a:d6:e8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Jun 28 22:01:33 2025 GMT
Not After : Jun 29 22:01:33 2025 GMT
Subject: CN=cf920a58cb96c7b5a2d770b5a10d98a8966b6a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:03:a2:3a:b6:2e:47:8f:15:98:e4:0f:07:
3a:8b:79:66:25:de:c2:0d:25:50:30:4f:1d:6d:4c:
85:25:20:dc:a2:a5:9b:4e:04:8a:9f:0e:b7:e2:a4:
fc:60:76:07:05:b6:a9:01:16:40:cc:fe:27:82:76:
78:3e:70:86:20:7b:84:e4:73:20:1e:2d:93:51:0d:
6f:e3:fa:00:62:2c:00:2c:52:d7:8d:ed:8d:30:7c:
d5:68:75:07:e6:f6:19:1b:3d:8f:31:2a:1d:d8:9d:
26:1a:f5:72:7e:79:94:d6:bc:b4:9d:6c:62:a0:6a:
a8:b2:1b:fc:b9:2e:b6:f8:ca:e9:93:eb:ee:1e:35:
94:ba:90:d6:ef:1e:ab:96:c7:2b:85:6d:8e:f2:31:
94:0d:1c:dc:29:31:50:54:c2:d1:1f:eb:26:85:6b:
a2:6f:7e:21:35:82:4a:20:d5:fe:6f:d7:70:e5:fa:
8b:10:ee:27:cb:13:90:97:23:5e:c2:0b:f6:ef:e1:
2c:bd:56:36:ef:b9:e4:99:a6:58:55:37:bf:85:4b:
53:26:6c:6a:c4:78:44:6d:a9:31:be:e4:ac:5d:7b:
0c:b0:69:17:67:9e:86:6d:23:39:d3:7d:3a:8a:ee:
6b:94:54:70:fa:b3:32:ba:48:1e:ee:ac:9f:f5:fb:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:92:0A:58:CB:96:C7:B5:A2:D7:70:B5:A1:0D:98:A8:96:6B:6A:1D
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d8:f4:d0:e3:c5:a2:60:b3:67:1a:21:99:2d:d4:3c:15:bd:
ed:6d:fa:67:0e:77:a6:7b:be:b7:eb:42:23:f6:8f:ed:69:fd:
ce:7a:1e:9e:41:22:a8:c6:82:36:99:f7:cf:60:a6:23:fe:d9:
23:50:ed:ce:28:d0:46:a4:ad:4c:5c:ee:31:2b:95:96:5a:19:
a2:68:58:66:61:74:5d:d3:27:71:7e:1f:a8:ac:06:53:57:04:
23:d3:f2:a3:be:aa:c5:1d:66:1b:af:fa:82:45:ce:32:14:dc:
28:2e:49:c3:3e:7a:55:20:e7:c3:d9:c8:b2:db:10:93:e5:28:
df:4c:c0:23:60:6a:0d:e1:d1:bd:2c:5f:82:fc:f4:1b:92:2a:
0d:7e:8c:fa:3f:87:bc:b1:a7:49:6b:45:14:d0:86:e3:88:fa:
91:d4:28:cb:f4:96:6e:9f:6a:b7:8b:41:7c:ea:8d:3c:8b:f4:
af:a6:2a:cb:ae:f2:e2:e5:91:01:fc:ac:f4:df:1d:f5:eb:24:
e5:f6:48:1b:c6:1b:03:7d:3e:09:c5:c3:7c:2a:06:18:77:04:
cc:76:9a:ad:6a:67:30:0b:d4:d4:03:90:1f:65:aa:65:99:13:
f6:e1:25:eb:6e:5a:34:fb:14:3f:f3:cb:1e:4d:94:68:c6:b6:
35:68:28:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:36:27 2025 by rpki-client