Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: W8WD8kepw/Lq3yw77zHm1s7NHlQ1E94kC0uxZWcZaOY=
Subject key identifier: 8E:21:FB:50:10:71:44:18:F3:08:B5:CD:BF:FF:D3:A0:57:17:F7:5C
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 0197B6A2155A574A3DDB124D5A28FF413754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:44 +0000
Manifest this update: Sat 28 Jun 2025 13:02:44 +0000
Manifest next update: Sun 29 Jun 2025 13:02:44 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: WOVcX3+M8xwn5g6lz2T12cr/xvSda4NNknk0rLL8P5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:15:5a:57:4a:3d:db:12:4d:5a:28:ff:41:37:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: Jun 28 13:02:44 2025 GMT
Not After : Jun 29 13:02:44 2025 GMT
Subject: CN=8e21fb5010714418f308b5cdbfffd3a05717f75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:6a:03:fe:59:46:ab:ea:63:cb:4d:e4:88:
43:5b:ad:1f:86:00:fe:8b:fe:28:8a:e1:34:26:a4:
71:44:18:54:16:eb:5f:b0:42:ae:6b:75:1c:74:2a:
71:86:ae:c3:55:b7:54:26:86:6d:0f:5b:46:5d:49:
0e:d8:d4:4f:6c:19:a6:41:1a:eb:56:2a:c3:2b:5e:
86:60:7a:08:8f:49:1f:a5:4f:73:cf:18:40:30:52:
50:db:db:bc:9a:bf:08:c8:7b:c1:b4:53:05:9c:80:
98:78:23:f1:5f:47:cc:73:3c:7a:59:6b:3b:e5:4c:
90:27:7f:f5:9e:ec:9e:30:90:e2:39:68:03:d9:ed:
07:6b:cc:22:08:0d:3f:8c:43:85:ea:d0:d1:10:82:
41:cb:b2:6a:3d:ab:30:51:40:32:9c:6c:8e:01:c5:
1f:c6:3b:e6:46:e5:e3:44:80:55:2c:b7:bb:96:3d:
a6:9f:e3:e5:43:48:6a:ef:52:98:90:3a:d1:9e:23:
7c:8d:b0:94:64:dc:db:3c:15:20:96:3a:29:84:53:
16:7d:e8:34:f8:8e:ce:5a:c6:cc:a8:a9:e6:d7:39:
6d:11:89:85:e8:ca:ea:5e:b9:80:4a:a5:0b:ec:5e:
17:58:e7:87:55:e7:f8:dd:12:76:ec:fd:9d:93:02:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:21:FB:50:10:71:44:18:F3:08:B5:CD:BF:FF:D3:A0:57:17:F7:5C
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d0:e6:21:7a:0f:4d:e6:1e:ca:6c:c2:f4:3e:5b:a0:b3:7d:
14:bb:c4:33:38:3b:be:3c:7b:a7:60:36:e8:a2:32:85:f3:13:
f1:e9:b5:8c:58:8d:23:57:aa:ae:03:21:83:e2:02:69:24:92:
f4:26:7d:be:33:06:21:46:ba:49:82:6f:35:d1:01:59:47:e4:
f7:eb:cd:71:7a:15:f2:7e:ed:bd:0a:5b:59:f2:c7:0f:b7:5d:
7e:00:21:1d:20:16:d8:a9:9e:05:71:13:87:69:83:6d:b1:f2:
65:c1:64:a4:ec:2f:10:16:36:d7:29:43:ae:9d:a8:84:69:c6:
a4:47:0f:e1:c3:45:2a:27:71:27:dc:d1:cc:10:71:58:81:f3:
d5:7c:bc:ea:41:b3:56:22:9e:b3:99:46:08:20:3b:6c:d2:ef:
bc:3d:ad:7b:e1:c8:ab:3d:b3:aa:b0:df:2c:fa:9d:8b:a9:a2:
8e:8b:04:bd:35:6e:b4:6f:7a:96:07:2c:dd:71:ec:23:f9:fc:
6a:cb:75:65:6c:3d:8a:b1:15:7a:24:eb:6d:82:da:01:ec:a9:
18:65:99:52:3f:dd:78:cb:20:f7:51:9e:22:76:19:bf:11:9d:
49:9a:d6:5b:a3:1a:3c:46:f4:88:b7:9d:e4:cd:00:e0:d4:58:
74:fb:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:02 2025 by rpki-client