Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: ZHDaOlUnnWkl39rikZ24wzenR8t4S2CKPT+c51XJjvc=
Subject key identifier: E0:C3:14:08:31:B2:1A:35:A8:22:26:11:3A:4C:15:7C:F3:0C:44:39
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 0197B6A05B0A97E2F6B06D9273A80627CFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 03B1
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: HxhFSNos2bFCY2Yvu/3OeZuhhOYBR+8iJcnZOZYQGQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5b:0a:97:e2:f6:b0:6d:92:73:a8:06:27:cf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=e0c3140831b21a35a82226113a4c157cf30c4439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:3e:57:f4:a2:f2:37:9d:2e:8f:a1:04:1e:
37:f9:4e:e7:37:a5:2e:17:ac:6d:f9:d1:f1:89:fb:
64:88:08:2b:77:37:17:38:3f:62:81:49:ae:d1:bc:
6f:96:7a:8b:67:00:64:0c:7a:08:f4:63:1d:14:21:
54:c7:39:05:58:18:a9:9b:1f:f8:49:38:43:1d:d5:
72:28:f9:a1:36:2f:57:43:a4:6b:44:b2:31:4b:3f:
9c:62:1a:f3:61:07:a5:43:a7:f3:6d:80:2a:a7:ad:
7d:03:5b:a6:62:ee:71:b5:3a:59:a1:b0:64:e0:59:
62:97:3f:8c:a7:09:25:11:bc:52:e6:8d:7e:03:73:
85:71:81:6e:d7:a5:e7:eb:35:66:8a:9e:e5:c8:7c:
a0:9b:75:ce:6f:c1:34:f1:b8:9f:f5:2f:fe:97:4a:
44:af:7b:36:9e:e4:c7:5e:20:d4:6c:d5:28:08:27:
25:ce:a9:d5:81:76:25:78:60:74:a2:28:ca:03:64:
b9:0f:2d:0b:16:bb:d1:f4:c9:bc:f5:71:20:0a:77:
a0:04:86:bd:ff:22:ab:45:45:a7:09:d1:09:f4:39:
4a:28:bd:99:ca:3f:4f:68:1f:8e:9d:c7:e2:24:64:
c9:8b:04:f1:96:07:bc:b8:01:f0:70:db:b8:94:78:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C3:14:08:31:B2:1A:35:A8:22:26:11:3A:4C:15:7C:F3:0C:44:39
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:10:7a:f5:c9:8e:c5:dd:82:52:b7:0a:56:ed:2e:e9:7f:25:
8c:62:b8:a2:e8:70:12:de:3b:6a:9f:f3:7c:ca:f5:c0:ec:bc:
15:7a:c1:53:22:8c:06:3f:22:b1:20:e6:4e:cc:7f:2f:ae:44:
0c:6b:cd:7e:3e:15:f9:27:15:9d:ec:c8:ea:12:5e:73:fb:b6:
85:f9:9c:0b:ac:a2:34:f7:a4:26:a3:67:ce:e7:4b:32:51:25:
af:96:2f:1c:4a:78:09:af:1b:c2:44:2c:12:f8:af:49:da:7e:
69:6a:e4:a1:e6:01:b5:fe:1d:06:2e:ca:e0:e0:13:05:fd:ba:
48:54:30:fc:d8:0e:d0:cc:7f:3a:92:0c:61:57:3b:50:62:34:
13:8d:88:0c:c2:86:d8:ae:c3:2e:18:2c:df:8e:64:ac:ef:06:
3e:16:57:f7:89:e3:f7:30:b6:55:8d:53:96:96:e6:38:77:4e:
fa:18:ea:f6:e2:49:5f:0b:83:d2:1f:7a:3f:85:c0:3a:a6:28:
f6:c0:2c:0c:18:a8:95:7d:3f:6e:53:d7:02:eb:d8:e0:71:9e:
88:e7:07:b3:01:54:3f:93:9a:00:81:0d:ce:a2:01:78:f7:7a:
1a:44:35:cc:22:df:6d:db:09:6b:92:b8:8c:e8:04:76:ee:7f:
49:a5:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:20 2025 by rpki-client