Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: XtmHlb6QhZ3bpPVukLPapX0VRYPQZW0rp59GMiEEXjA=
Subject key identifier: D6:45:00:3F:C5:00:93:74:38:F6:94:61:9B:DA:F6:F0:9E:6C:31:B8
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 0197B70EE9AAD0730B1C7AF640A7ABCD8EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 08F7
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: a7hjFM3Zi2aq/NtbOsp03hnDpkHQARB+PeRSXvDattY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e9:aa:d0:73:0b:1c:7a:f6:40:a7:ab:cd:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=d645003fc500937438f694619bdaf6f09e6c31b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:f6:52:d3:69:a5:1f:29:44:ba:c4:1f:fd:
a6:28:40:f1:2b:7b:9d:2e:82:19:e6:aa:46:ab:04:
1b:28:90:f8:e7:63:77:6a:c9:6c:37:10:72:62:d0:
64:95:6d:91:11:82:7c:04:bf:32:96:d3:99:22:89:
db:3d:f9:95:3d:c0:6e:c4:00:37:99:04:a5:94:73:
4f:39:79:35:39:30:89:fd:41:31:e9:91:06:20:ec:
47:e9:8a:2c:b4:1a:cd:97:4f:ce:2a:89:28:c0:60:
f7:3e:b2:f4:96:09:b7:6d:a4:e7:1d:4e:d8:3b:e6:
7c:0d:f0:bd:f5:af:3d:50:49:a3:4b:74:98:c7:88:
8a:aa:aa:43:e8:4c:fd:40:c2:94:cf:f2:7b:c4:68:
c6:18:52:fa:da:91:78:31:22:bd:74:48:c4:16:02:
ac:c1:46:03:89:bb:3d:e2:96:9e:10:b2:ce:48:e5:
29:37:76:f4:11:a7:56:2c:4e:da:97:1a:62:86:5d:
11:57:a7:92:40:30:49:d5:f8:1d:57:f1:e6:2e:d1:
a0:20:31:15:9d:7d:e8:e8:f7:e4:5c:77:4e:48:c3:
cb:ff:f4:d8:a3:e4:e6:3b:49:ac:58:b7:b8:59:95:
0e:a7:f3:e4:d6:cc:dd:c2:1e:98:30:cd:1f:be:85:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:00:3F:C5:00:93:74:38:F6:94:61:9B:DA:F6:F0:9E:6C:31:B8
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8f:31:27:96:37:ca:85:55:d7:ef:7c:fb:32:9a:07:63:54:
df:9c:04:83:44:69:92:62:6b:af:7c:75:43:e6:5e:da:69:c5:
51:d2:46:cf:05:d9:2c:a8:2e:fb:05:50:c2:ef:7e:f7:3b:99:
b0:3e:67:9c:54:fb:aa:0d:6b:c4:e7:8e:c7:e5:9d:cc:f5:b9:
81:04:71:40:94:27:57:bb:d6:2c:40:17:02:b7:dc:00:b3:d3:
bb:10:da:3b:1b:b0:d1:21:53:64:27:1d:46:ca:17:a9:69:b8:
8f:f8:ca:74:71:fb:d2:88:49:00:09:e2:bd:75:dc:c1:ba:25:
77:4f:a4:16:bb:50:a4:15:15:b3:d6:cd:cb:2f:ab:c4:9f:e9:
83:81:1f:41:ba:e3:f3:75:9b:cd:5a:b1:c2:15:ca:ea:e8:59:
e2:ec:20:82:f2:02:f2:bf:d1:48:d6:6a:4e:f0:c9:6f:ca:64:
da:25:cc:6d:e7:62:24:1d:bc:5a:ec:93:57:1c:ba:01:1d:40:
f6:93:1c:fc:c0:9f:c7:ea:8a:25:b5:12:7f:eb:7a:93:45:93:
0b:89:cb:92:31:ab:3b:ae:a6:64:9f:a6:cc:75:d4:d2:b2:bc:
e4:00:82:fd:5f:51:e1:63:f5:3f:e1:5c:7e:95:c9:e9:c3:b5:
23:fd:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:40 2025 by rpki-client