Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: nceItmncnV4osurKfVUypF+lkJUgOlnz7nm084EME54=
Subject key identifier: 1B:2E:DC:5E:89:FA:A1:5D:FB:53:8A:F4:C9:06:5E:5A:91:0F:05:F2
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 0197B7B2F118404A55A30E5CD58130780364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 0200
Signing time: Sat 28 Jun 2025 18:00:47 +0000
Manifest this update: Sat 28 Jun 2025 18:00:47 +0000
Manifest next update: Sun 29 Jun 2025 18:00:47 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: EyIUnU5sCMElV0ZjPv8dT4xC/hDKOMXMttiT1C1uIYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f1:18:40:4a:55:a3:0e:5c:d5:81:30:78:03:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Jun 28 18:00:47 2025 GMT
Not After : Jun 29 18:00:47 2025 GMT
Subject: CN=1b2edc5e89faa15dfb538af4c9065e5a910f05f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:e1:b0:7c:89:2b:02:88:2e:f7:2e:f0:29:
b0:1f:cf:7a:e6:ab:e4:51:92:61:76:1f:e5:79:ab:
ea:dc:8d:40:a6:c7:90:de:87:6b:07:ff:04:2c:c4:
57:a4:dc:ad:94:b2:a3:0d:40:db:f5:ec:d3:cf:e4:
39:a0:24:df:fc:b8:15:85:f4:48:4f:e9:e7:e9:5b:
26:22:22:f1:4e:73:0c:0a:06:62:7e:c6:15:f6:c4:
7f:87:7d:ce:bb:58:b0:5f:e6:53:ee:c2:21:48:7c:
02:78:a5:db:8b:0e:3f:5f:5e:b7:e3:5e:3b:80:44:
f1:94:9b:d4:9e:39:bf:dd:7e:09:65:71:ce:fd:be:
62:67:1c:b9:eb:6a:13:8e:85:d9:b3:97:ab:58:8c:
c0:a9:d0:fe:68:b4:59:38:40:d0:d4:0f:33:6b:13:
bd:37:73:d0:eb:34:c0:4e:a4:c6:2f:bc:6b:ad:71:
e5:c0:0d:39:a4:53:47:68:0e:51:65:52:2d:8c:7b:
fe:0a:a3:d7:a2:76:02:83:11:66:38:b0:a3:fa:36:
39:8d:ae:74:5c:52:33:db:b0:26:5a:0c:d6:6b:39:
0a:80:26:b1:68:de:73:a1:9c:76:6f:5d:56:c3:27:
2f:38:b0:d6:f6:ed:f9:11:cc:15:38:4c:51:2e:10:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:DC:5E:89:FA:A1:5D:FB:53:8A:F4:C9:06:5E:5A:91:0F:05:F2
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:f8:01:4d:97:2f:d0:6c:52:56:67:9f:2e:59:56:ac:df:
7f:d2:c5:4b:67:6f:9f:85:95:a8:a8:b7:ac:f2:01:62:c3:73:
d2:49:96:3b:ea:ab:d4:eb:b0:8b:0e:df:ed:c6:6e:4f:d7:c4:
6a:4b:56:c8:80:77:02:ae:6a:34:33:77:54:40:5d:d9:24:ef:
44:7d:95:24:53:8a:11:44:35:1d:e4:44:03:1b:14:16:1c:37:
fa:c1:03:89:97:e2:6a:77:86:9a:1d:6c:d6:05:7c:1d:b7:a6:
e4:1d:e5:14:b6:5e:57:be:b1:d4:63:86:fd:70:cf:84:46:86:
48:d1:ee:fa:f4:8f:61:84:e0:2c:30:65:f6:bf:52:0a:13:b4:
26:d0:b9:6f:21:d1:eb:d8:b2:90:65:49:d0:d4:52:18:87:85:
36:c1:27:be:53:4b:5b:13:b0:13:57:9c:01:f1:56:34:2f:03:
37:5d:f1:96:cb:8d:14:82:57:62:b9:96:43:7b:95:ac:4d:c0:
b7:5f:5f:bd:8c:70:92:87:d4:9c:aa:0f:02:24:5d:cc:f9:08:
a9:6c:59:50:1e:d4:ba:70:78:1c:c3:8a:4c:fc:fa:fe:c3:44:
76:43:c5:ce:ae:18:87:5c:50:c9:af:07:4d:e8:7b:75:96:03:
c8:21:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:20 2025 by rpki-client