Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json)
Hash identifier: i8jM9d2kvsQ10oFS49PpyiJVMV+RW7leoQjyz7Eh1Hg=
Subject key identifier: BC:FF:D3:EC:3F:2B:B9:1F:22:10:81:82:44:62:01:8B:0D:CB:60:59
Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Certificate serial: 0197B7EA6ED6316DC883592AD73FA1FB92F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
Manifest number: E7
Signing time: Sat 28 Jun 2025 19:01:23 +0000
Manifest this update: Sat 28 Jun 2025 19:01:23 +0000
Manifest next update: Sun 29 Jun 2025 19:01:23 +0000
Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: 7OUPtVkNVXLPnLg0+pU4/fDq0w2nq5k06JKJ6hhb8rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6e:d6:31:6d:c8:83:59:2a:d7:3f:a1:fb:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Validity
Not Before: Jun 28 19:01:23 2025 GMT
Not After : Jun 29 19:01:23 2025 GMT
Subject: CN=bcffd3ec3f2bb91f221081824462018b0dcb6059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:9a:1a:9e:8a:48:c4:47:8b:10:5d:c9:ab:
98:69:f7:77:d4:e8:0d:3f:58:ca:8c:02:26:9c:5e:
8b:0e:1f:36:08:0f:2a:ea:1e:f1:7d:16:a4:51:09:
e7:4c:f0:27:37:95:90:03:ed:bc:ff:66:83:cf:0b:
48:6f:81:2c:18:90:d2:c6:bb:2a:2e:4d:de:f9:fd:
7a:f8:af:10:c1:f8:1d:2a:92:e6:f1:60:24:58:0b:
58:2f:6c:be:25:3d:4e:68:2f:fb:b6:90:bd:b2:44:
1d:53:bc:ed:d9:92:43:0d:7d:09:2f:6b:08:0a:73:
55:02:d9:2b:f6:d6:26:b7:b2:5b:7f:7f:92:f0:52:
6e:72:52:b5:86:e1:57:4d:6b:d8:b4:23:5c:e8:eb:
2c:ff:89:4c:fd:62:db:3e:67:01:16:cb:30:0e:30:
8a:c8:bb:39:61:40:c2:8e:41:c1:d4:cc:0b:ef:dd:
49:b3:30:f0:82:ea:2f:1b:1a:f2:48:27:ae:a3:31:
1d:6b:8b:80:85:ed:d6:b5:f8:b6:e2:c3:4e:1d:7a:
eb:5f:32:ef:bd:a0:90:fb:0c:2d:66:b9:b5:7b:82:
14:fb:e9:30:b9:cf:4c:55:33:8e:a7:0b:f6:85:ba:
fc:4b:df:7d:7b:b9:61:14:60:70:d7:f4:1f:91:73:
fe:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:D3:EC:3F:2B:B9:1F:22:10:81:82:44:62:01:8B:0D:CB:60:59
X509v3 Authority Key Identifier:
keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1c:70:35:79:54:6f:b9:28:21:5a:fb:22:b2:a3:76:1c:70:
6d:f5:6a:b1:ce:bc:9a:3c:26:af:6d:e6:11:fa:29:4c:3e:16:
2b:ab:c1:ef:70:73:e6:0c:55:29:2d:95:a8:4e:c0:b9:0e:c6:
34:18:15:06:c9:75:25:7c:9f:86:02:9a:55:8d:bd:c5:5d:c4:
62:40:37:62:f0:b0:0c:58:31:00:65:18:63:83:ef:b2:38:b3:
45:3b:f3:ad:d7:ed:9f:6b:c8:e3:7e:6a:f8:40:40:3e:1e:2b:
98:84:e0:4a:9b:27:cd:56:d5:76:1e:ea:77:07:ce:be:1d:48:
04:53:86:be:07:97:de:d3:06:3f:d0:e6:61:dc:36:85:ef:e0:
a3:fd:5c:af:39:e7:31:a9:b0:60:88:56:3f:80:df:e4:b5:52:
d4:e9:ba:f6:92:3e:05:97:54:15:d0:74:1b:6e:dc:57:33:bc:
c9:7d:10:54:18:0e:6c:51:bc:9d:64:a9:f8:c0:cc:00:7e:74:
db:e1:04:9f:b7:0a:fe:0d:ad:a7:06:97:62:a3:e6:d7:8c:d2:
5e:b5:ab:8c:a7:f8:bb:b3:20:7f:eb:9b:60:42:27:12:14:3a:
0f:d8:82:9b:93:fb:a0:0b:53:a0:5c:42:33:33:67:35:a7:a9:
20:2e:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:10 2025 by rpki-client