Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: fdl33EzvBU+g0z0KYdJaZ+imXfwKoKsjJhVOsxTCdIw=
Subject key identifier: 13:5D:52:29:19:7A:90:3C:82:25:EC:62:8B:05:71:1B:1D:03:47:10
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 0197B6A15E69801861D4CD2AAF06421F3814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:58 +0000
Manifest this update: Sat 28 Jun 2025 13:01:58 +0000
Manifest next update: Sun 29 Jun 2025 13:01:58 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: OgP5G7EKxH94hLw87CVxjE+6Fwrhrtuwkp/4xwpwxuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5e:69:80:18:61:d4:cd:2a:af:06:42:1f:38:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Jun 28 13:01:58 2025 GMT
Not After : Jun 29 13:01:58 2025 GMT
Subject: CN=135d5229197a903c8225ec628b05711b1d034710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:86:a8:3a:c4:20:18:46:4b:08:b0:d7:58:
f5:cc:1f:19:40:d9:82:5a:65:2f:c9:e0:22:8d:9e:
d6:51:79:24:bf:bb:9b:08:ff:12:1a:57:71:02:76:
b0:b1:fd:fc:fa:99:84:6a:0a:50:b1:ad:41:34:d2:
be:b1:9c:c2:c4:e4:23:6b:e2:72:c8:0a:4a:a4:53:
16:75:7a:62:b8:f7:53:42:4f:7e:81:e6:30:70:b6:
13:fa:50:73:97:3f:4d:08:f0:a2:3b:15:18:b1:1c:
39:e2:9d:13:ec:13:39:54:1c:67:17:73:c0:83:e4:
48:6e:2c:f8:80:ba:5d:01:51:dd:46:7f:7f:9a:6f:
7e:36:61:a4:e6:6a:f1:44:61:40:31:87:38:62:21:
c4:75:89:aa:71:c2:8d:41:c7:5e:4a:05:76:f2:0e:
33:12:a4:60:d6:5f:bd:52:a9:eb:40:aa:1b:cb:c2:
df:6a:d6:5f:c3:c8:62:56:1f:3a:d7:62:0f:82:d2:
1d:ac:b7:80:50:1e:36:2a:0d:71:1e:34:18:18:7b:
0f:99:bf:8b:6a:0e:5c:74:b7:43:60:d9:cc:e1:db:
e2:94:93:49:e5:cd:30:a6:d0:85:a1:b3:c7:79:52:
1d:f6:98:42:fd:77:62:93:ff:6d:0e:08:bc:40:4a:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5D:52:29:19:7A:90:3C:82:25:EC:62:8B:05:71:1B:1D:03:47:10
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:64:29:90:fd:53:c7:87:64:3e:2c:92:79:b0:83:5c:b4:fc:
67:ae:58:34:b4:f6:5c:b0:fa:0f:a3:4f:c9:21:fc:00:81:f0:
4a:34:51:2c:ef:11:c0:24:20:6c:dc:67:82:36:23:1e:62:20:
e7:d5:24:6c:58:36:78:d5:d6:7e:d2:cb:5b:f6:73:ba:7e:1c:
94:10:9a:ee:37:86:92:84:05:fc:24:24:cc:29:1e:59:4d:2b:
36:78:b3:8c:e0:68:33:73:fe:32:4b:3d:b6:7d:c3:73:c4:3f:
47:9a:07:12:13:8f:aa:6d:68:e9:cf:99:8b:fe:30:0a:70:0d:
8e:7b:c2:ec:97:f0:31:00:11:5d:a1:23:3d:93:6c:01:7a:98:
01:0d:0e:05:db:5e:bb:fc:25:1c:09:90:13:6b:a1:52:04:ee:
bf:af:69:b0:77:4f:f4:04:65:09:4a:a1:8a:ba:e0:2e:5e:86:
b8:ab:1a:a7:6f:c3:d6:19:eb:18:c8:b5:00:e0:7f:45:91:70:
2b:c9:f8:9e:23:93:25:76:a6:4e:6e:e8:fe:97:2f:90:d2:ac:
75:1a:ef:25:e8:fa:bd:4d:00:72:fc:69:f2:27:b1:99:a5:b7:
4e:3c:d5:d8:25:6d:be:30:82:d5:32:ba:c3:62:59:b6:2c:d6:
5d:8b:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:33 2025 by rpki-client