Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
File: a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json)
Hash identifier: fO2rwM4ryD2+TWKso+e8QF/iRi2O3TLqopwQzlRmaPI=
Subject key identifier: 60:A4:14:BE:58:93:E8:D4:EF:15:9A:20:C8:89:76:00:F6:35:E7:60
Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
Certificate issuer: /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Certificate serial: 0197B7EA6C71DA780D26ABEA396017F3F18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
Manifest number: 0C4C
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: eUBbY58r65LK+zbHBdKYhq7w28GKLZFi65AzrjrtMJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6c:71:da:78:0d:26:ab:ea:39:60:17:f3:f1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=60a414be5893e8d4ef159a20c8897600f635e760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:03:f8:e2:3c:aa:38:b5:c1:76:51:33:89:
73:fc:b1:c0:ea:27:59:d6:5a:0b:9b:1d:de:ed:46:
54:d2:c8:ef:38:91:f5:01:e3:cc:10:33:10:d7:0c:
03:85:2b:22:41:ab:bb:f4:f1:0b:77:f1:9e:73:ff:
d1:8a:0a:19:36:e4:ef:9b:1f:7c:32:eb:62:4a:f9:
67:36:b7:13:fa:be:f2:47:ef:f9:3f:cd:ed:28:77:
89:f0:85:28:76:c9:6c:c9:a2:21:5c:22:7e:e4:12:
b4:66:40:fc:44:8c:c4:cd:d3:47:7a:23:18:c9:75:
8d:d9:9c:53:35:2f:b0:21:dd:0b:03:14:dd:df:56:
9d:8a:d3:a0:dd:5e:c6:9e:3c:9a:d0:f8:e5:f8:6c:
78:e3:bb:7c:a4:7e:d2:64:d0:b6:1c:49:f3:e2:3a:
6a:f2:92:81:68:75:85:0c:4a:f4:b8:cc:d9:cb:67:
10:1f:b3:a2:e2:37:98:c6:0a:d9:69:9e:9f:5b:ec:
fd:64:37:8f:63:59:45:8d:a7:8b:20:eb:8e:c0:b3:
f2:d5:b2:78:c9:a4:88:f5:b5:cd:50:b2:93:c5:cf:
33:2f:e4:f1:5e:14:50:f9:27:41:88:49:57:0f:c3:
b6:e2:a0:ca:e9:c9:29:12:8f:fd:20:40:2b:86:77:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:14:BE:58:93:E8:D4:EF:15:9A:20:C8:89:76:00:F6:35:E7:60
X509v3 Authority Key Identifier:
keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:c6:ed:f7:55:c4:31:ff:bb:19:8c:39:7f:06:b9:b0:f8:
6d:84:df:29:a7:5d:21:e8:c4:bf:ef:4b:ad:7c:81:d0:79:42:
67:5d:cb:70:e8:50:c4:a4:26:09:18:87:69:68:75:ff:8f:f9:
98:c9:3f:aa:de:77:d2:9e:57:31:46:a2:4e:dc:c7:e4:8e:33:
5f:d4:3b:1f:45:70:94:e5:a7:7e:d0:27:1c:59:36:f3:74:15:
9b:62:c8:ad:2d:4e:6d:d5:0a:75:ba:cd:f0:8a:dc:0c:54:0d:
da:8f:7c:c0:c6:65:73:be:86:3a:6e:60:26:4e:67:15:f2:65:
37:a4:d0:9a:e4:28:bc:c9:92:f5:b1:02:f2:96:40:bb:b2:8d:
e0:d6:84:2c:1a:d1:e4:66:aa:88:57:28:18:28:32:8a:71:1d:
b8:f1:28:09:aa:e4:2d:17:aa:98:cb:86:15:1a:b4:46:3c:66:
02:94:6d:76:4b:b1:9a:2a:64:09:2f:92:67:02:f8:21:62:6f:
be:63:18:51:c4:3c:f2:99:bc:a0:99:e7:69:83:4a:cd:de:75:
57:17:2b:0a:cf:6a:8a:4e:c7:4b:49:04:2e:22:07:d9:77:fb:
cd:63:ba:57:a8:59:05:45:d3:85:38:58:a5:dc:ea:95:e9:76:
51:09:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:48 2025 by rpki-client