Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier: NKpqsEJwAYimPVrHbJcCjHIl2fuj2iv0Q0XNG7P+P1E=
Subject key identifier: A9:F8:C3:6C:65:1E:8F:AB:DE:CA:DB:58:3D:DD:CB:4C:FF:AC:03:EE
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial: 0197CE3B46A4FB849909D8274FD8F3AA5D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number: 15BE
Signing time: Thu 03 Jul 2025 03:01:20 +0000
Manifest this update: Thu 03 Jul 2025 03:01:20 +0000
Manifest next update: Fri 04 Jul 2025 03:01:20 +0000
Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: gXW4lO0+jkiHLo4Je1gO0Eg6iYuEz8D3YrwLjHXoPyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:3b:46:a4:fb:84:99:09:d8:27:4f:d8:f3:aa:5d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Validity
Not Before: Jul 3 03:01:20 2025 GMT
Not After : Jul 4 03:01:20 2025 GMT
Subject: CN=a9f8c36c651e8fabdecadb583dddcb4cffac03ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:ee:7a:84:de:f9:87:50:2e:dc:4c:ef:96:
e6:de:b6:07:e9:99:d4:d4:cf:ca:cb:db:4e:2f:59:
cd:74:a7:9f:40:6e:c1:fc:8f:ee:0a:49:12:5f:89:
0c:e9:be:67:69:36:ce:7a:dc:2a:ca:6a:11:5d:07:
56:f5:11:c1:8d:34:f4:a6:3b:1c:ed:61:47:90:88:
1a:1d:67:78:03:73:74:28:5f:e5:25:0d:3a:2e:71:
69:91:a7:69:c6:72:a0:66:83:65:5a:68:6c:8a:6e:
6f:d8:c7:d1:fe:69:85:ef:3f:b6:fc:2d:32:b1:8a:
09:2f:78:94:d7:99:19:ad:9a:bc:fa:90:5b:76:eb:
f6:f0:a0:15:01:5f:41:2e:e0:46:82:8a:bc:5e:a1:
47:94:aa:d5:d7:69:db:d3:f3:4f:ef:b2:10:e9:70:
a5:64:f8:32:36:76:5b:c9:94:0c:49:dd:49:cb:74:
66:c5:85:fa:de:a1:1d:c9:b2:59:4d:8e:ba:b9:65:
02:12:97:b5:f5:e0:e6:00:22:4f:00:39:b8:48:5e:
f8:67:49:1c:43:42:69:be:16:75:67:68:3f:12:1b:
f3:9d:ce:0b:5e:60:d8:c1:00:93:75:a8:44:c5:64:
2c:7a:ed:09:19:6a:3f:a8:ac:d1:71:a0:11:2e:62:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:C3:6C:65:1E:8F:AB:DE:CA:DB:58:3D:DD:CB:4C:FF:AC:03:EE
X509v3 Authority Key Identifier:
keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7e:9f:3b:38:2b:3b:3c:01:f1:80:32:36:69:7b:5c:dd:47:
63:72:51:d9:9e:9b:66:50:84:38:79:09:68:49:72:a0:48:46:
79:10:1a:57:51:4b:b3:cf:44:ce:94:03:65:9e:2c:a8:d7:0e:
2e:bf:db:55:55:95:49:22:4d:73:65:71:a6:84:c1:c3:e3:0b:
71:99:d5:c7:9f:34:e3:fe:4a:7b:15:03:64:ca:b8:c2:82:34:
19:02:0e:84:88:e0:88:9b:25:2f:21:9a:be:45:84:39:09:e7:
d8:0b:f4:89:1c:2f:52:6b:65:13:27:d1:ad:3b:2c:03:99:ff:
08:d6:7a:e4:47:1a:cb:b9:88:86:15:d1:18:3e:b0:de:d5:1a:
a2:a6:08:b3:7a:ed:82:85:32:0a:11:5f:93:a7:e8:c8:fd:0e:
f5:b1:5e:fc:2f:8b:cd:ec:02:14:99:8f:29:5e:a8:e9:30:10:
b8:0b:98:98:2e:f3:5d:ac:e8:4a:ab:49:e8:6f:c1:58:6c:1f:
32:b0:8d:db:93:eb:47:f0:76:ea:25:d2:36:0e:16:fb:aa:41:
ab:e5:81:61:86:a8:23:b8:bd:18:f4:7b:af:22:9b:85:36:9b:
8a:26:a7:fe:27:0c:d1:ed:f5:d7:9e:ca:17:60:f6:6c:85:59:
27:0b:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:37:09 2025 by rpki-client