Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
File: HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json)
Hash identifier: 2mbGQo76tY3o2ZTOoEH95UdVaM34L7uw2AHpfoY70v8=
Subject key identifier: 5F:B3:83:49:D2:20:3B:F6:4B:95:3C:50:43:5C:2A:DE:BB:A1:58:D3
Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Certificate issuer: /CN=1f1523928d8e8e54be467976331a0121d42a0067
Certificate serial: 0197B88EEADE523A635EF41ABB6506234FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:01:03 +0000
Manifest this update: Sat 28 Jun 2025 22:01:03 +0000
Manifest next update: Sun 29 Jun 2025 22:01:03 +0000
Files and hashes: 1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: jxvjXVE+Rhw0GKFCMDVG7mdSTW5RalsSPsbE5UneqN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:ea:de:52:3a:63:5e:f4:1a:bb:65:06:23:4f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067
Validity
Not Before: Jun 28 22:01:03 2025 GMT
Not After : Jun 29 22:01:03 2025 GMT
Subject: CN=5fb38349d2203bf64b953c50435c2adebba158d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:90:d4:e8:88:0c:eb:7d:f9:30:d3:ae:1d:
91:41:db:c3:32:56:48:f8:66:bd:14:59:f5:63:4b:
42:0c:d4:18:b0:7e:e2:f8:f2:39:97:78:a2:04:63:
71:32:7b:58:88:5f:20:d8:c9:a5:c4:01:03:4e:8c:
ea:58:d9:ce:1e:c4:0c:90:04:4d:43:39:d2:7a:61:
d8:aa:2e:3e:19:30:ff:f0:94:6c:df:67:d6:9b:9a:
83:e6:bf:1a:ef:3a:e8:b2:b9:73:03:ae:90:0b:c1:
6f:51:5b:41:4a:48:2e:c4:b9:98:1d:8c:a9:62:f5:
73:d2:26:ac:89:50:9f:10:c2:30:59:85:29:71:25:
6c:c3:1d:a8:55:5e:70:d7:a9:0a:3b:e7:84:3a:b2:
4f:de:34:44:79:a5:c3:f4:f5:af:64:d9:32:cc:3c:
a2:77:88:bf:ed:3d:17:9f:4b:f5:d9:0b:59:8d:07:
fd:19:2e:04:16:ec:29:23:cd:bb:fd:00:46:0b:75:
03:51:a5:f5:7f:d6:34:3c:3a:b1:ec:27:e4:93:5c:
7b:16:20:6b:52:25:e3:bb:78:de:4d:83:44:68:ba:
5b:af:58:e6:d3:d3:a5:cc:39:9c:de:35:92:0a:99:
24:b0:9f:c9:95:c5:31:cf:87:5a:6e:30:27:41:2e:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B3:83:49:D2:20:3B:F6:4B:95:3C:50:43:5C:2A:DE:BB:A1:58:D3
X509v3 Authority Key Identifier:
keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b7:c0:fa:e2:a5:94:d5:13:7d:d8:97:3c:15:5f:c9:4f:2e:
5a:e0:dd:6f:5f:63:aa:39:92:c6:04:ab:af:3d:ea:06:f8:ac:
5a:c9:72:e2:20:48:5d:11:52:c4:e8:e5:c4:72:63:70:5e:81:
84:9a:67:86:d7:19:64:3b:10:e0:9a:63:ef:1c:18:d6:6d:f9:
b8:5d:f3:76:79:b4:75:ab:ee:5d:12:5f:70:9e:2a:88:9b:62:
78:61:ea:af:fd:ad:75:76:43:ff:16:1a:cd:99:67:29:50:ed:
65:38:6f:99:83:37:09:b9:4e:dd:3e:63:9b:c8:97:af:c2:af:
2f:07:9b:48:93:aa:aa:3d:d1:70:06:db:a4:a9:1b:20:4c:f0:
30:88:03:c4:49:c5:36:1b:64:c1:c2:b4:7e:86:bc:cf:51:37:
58:9c:d1:2f:cf:8f:2b:2a:94:8b:4f:a5:ae:a0:b4:6e:ea:02:
c9:63:22:a5:83:7d:62:11:19:6c:e5:ad:00:a8:79:8c:3b:5f:
06:b4:15:08:3e:a3:27:01:7c:55:20:cd:9d:69:91:da:6d:4b:
64:da:92:33:f7:ee:9b:20:98:fa:ff:04:2e:1e:2a:13:a2:e7:
fd:69:77:5c:dd:17:83:10:55:25:5d:5b:1d:c9:8d:bf:b7:85:
b7:69:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:14 2025 by rpki-client