Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier: rM11OHZfmDgXTKYzRyURWxArs+wQo0L+CkR6GwQ1OCQ=
Subject key identifier: BE:9D:23:B8:0B:FA:98:F5:99:DD:D3:10:FC:9F:17:20:1D:B5:8B:52
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 0197B5FC63B7BACDD3E5052DB501B7C7E8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number: 10B4
Signing time: Sat 28 Jun 2025 10:01:46 +0000
Manifest this update: Sat 28 Jun 2025 10:01:46 +0000
Manifest next update: Sun 29 Jun 2025 10:01:46 +0000
Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: TEi2P/jDzfwOq6ntAUTKyK0xXp4doolhtMJy78HYCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:63:b7:ba:cd:d3:e5:05:2d:b5:01:b7:c7:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Jun 28 10:01:46 2025 GMT
Not After : Jun 29 10:01:46 2025 GMT
Subject: CN=be9d23b80bfa98f599ddd310fc9f17201db58b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:31:85:7f:49:0a:99:71:f5:e5:40:7f:5d:
84:bf:21:29:47:09:31:45:fb:fc:74:d0:90:8f:a2:
b4:21:fe:dd:90:cc:04:59:b5:db:23:ae:0c:d1:21:
10:31:f9:7e:8c:58:69:15:f2:f2:51:d6:fe:47:40:
91:a4:ac:c9:8c:d4:58:f9:73:70:dc:0c:4e:14:02:
9f:70:d8:b4:12:25:40:ea:5a:80:73:04:e2:90:37:
3b:76:80:0d:9a:fc:e8:b4:35:e0:4d:95:4a:15:72:
0b:3b:1c:d9:5e:5c:ba:b2:15:58:52:f3:7e:a7:65:
34:be:a3:20:00:a6:3e:fb:b5:c7:b0:bf:4b:bc:c8:
c3:6b:e0:9f:25:25:c1:35:de:db:32:21:6c:9d:59:
42:9e:d5:39:94:ec:8f:5f:0c:90:49:3d:d2:b8:6d:
41:2c:bc:ff:7a:16:5d:34:a9:09:ed:79:96:b9:8f:
a7:bf:ca:37:37:5d:ca:e0:3f:42:81:f7:10:73:bc:
55:89:29:da:5f:66:f0:be:b6:e6:91:94:e4:56:56:
81:c9:e1:2e:3e:5c:0e:6f:97:d9:78:e9:99:84:30:
f5:9e:96:6e:4e:2c:b7:56:ff:d4:2f:0b:d6:7e:bf:
13:f6:9e:54:ab:3b:8e:af:f3:5c:f9:d9:a0:6c:5a:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:23:B8:0B:FA:98:F5:99:DD:D3:10:FC:9F:17:20:1D:B5:8B:52
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:27:70:0a:81:79:79:1d:99:35:2b:9b:57:c9:4f:36:f4:4d:
7a:5e:53:ce:54:31:6b:92:5a:4b:01:28:14:0c:a6:c0:10:a5:
a1:72:28:6a:1f:9e:80:b0:58:e1:37:ae:ea:be:a7:47:18:5c:
21:1a:84:a6:16:a6:07:ed:4c:d6:28:74:04:19:cd:da:74:f7:
bf:e9:95:c6:d6:72:f9:0f:99:da:2b:34:34:cb:86:f0:dc:15:
10:81:f3:47:85:cb:47:6d:00:06:b6:1f:07:7e:05:ba:7c:2f:
ae:1a:63:e9:00:fc:d8:fb:09:93:87:9b:9b:09:0b:c2:23:5c:
2c:09:f7:f4:9d:4d:9f:c9:01:d6:de:2a:e2:51:16:ea:d0:d8:
dd:31:dc:ec:de:15:9c:8d:6a:e9:e1:72:f1:eb:4d:66:99:e7:
ee:d1:30:78:f0:09:09:ce:ef:df:d1:c7:5f:a6:3c:67:d9:52:
67:25:01:8d:f6:b2:6b:27:da:b4:ca:94:a5:0e:a5:4b:e0:06:
c0:55:07:3c:ee:06:c2:78:e6:09:57:6e:a2:76:08:b3:38:67:
8e:f0:3f:8c:09:b7:a5:86:22:1c:27:ad:59:36:36:74:f5:6c:
b1:4e:76:49:0c:f5:e1:67:2b:d9:d2:42:a9:9e:37:2f:4f:26:
0f:38:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:53 2025 by rpki-client