Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json)
Hash identifier: oQrCWpTsJjT1DlmLKetJG74yeogKYDUAMe0SQdmTK2A=
Subject key identifier: 2C:04:A2:7D:F2:4E:06:3F:88:56:0F:A2:A4:DC:D0:5F:CD:97:E4:DD
Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
Certificate issuer: /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Certificate serial: 0197B88F7E9971CCE8608982C9A19BDDDF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
Manifest number: 0A9A
Signing time: Sat 28 Jun 2025 22:01:41 +0000
Manifest this update: Sat 28 Jun 2025 22:01:41 +0000
Manifest next update: Sun 29 Jun 2025 22:01:41 +0000
Files and hashes: 1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: oHUNIgxP00Uu8Hatmw43HtUZrPohTX+c5/1yWMVJWeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:7e:99:71:cc:e8:60:89:82:c9:a1:9b:dd:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417
Validity
Not Before: Jun 28 22:01:41 2025 GMT
Not After : Jun 29 22:01:41 2025 GMT
Subject: CN=2c04a27df24e063f88560fa2a4dcd05fcd97e4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:56:ca:c3:83:1d:4f:f0:b3:04:c0:09:9b:
25:e7:c7:67:39:5c:d2:3a:76:b4:5a:2e:b4:99:dc:
a3:53:b0:47:66:81:c8:ae:f9:48:b6:af:d7:f9:a8:
39:97:55:44:62:ad:93:83:da:6f:73:1b:7b:86:34:
90:b1:89:c8:b7:66:06:70:e2:66:54:a9:7f:90:d4:
fd:34:6b:8b:69:35:08:f5:68:b6:d0:1f:b2:6c:a7:
82:e2:20:ff:e4:3f:7f:25:d7:0d:45:e3:10:11:e4:
b7:94:ea:e4:c2:0c:9c:11:47:28:0f:00:78:86:4a:
a9:cb:7a:18:f7:42:5d:43:8f:b3:fe:ff:15:7e:91:
1a:5b:43:09:e3:fb:43:88:1b:3a:cb:2c:95:90:22:
b9:c2:5d:ab:dc:f1:4f:be:ff:ec:06:e7:d4:c3:92:
e2:98:c9:49:76:e7:5f:9e:29:7f:9f:d7:be:1a:48:
5f:89:0e:8f:f0:aa:22:98:59:9a:0c:9c:85:e7:75:
7f:08:de:62:c0:43:76:60:12:6a:0a:54:48:e9:ad:
53:9d:20:e5:e8:44:b5:15:79:40:3d:3d:30:95:a1:
21:76:9d:e4:27:af:10:5b:98:e1:4f:76:b6:6d:c9:
cb:19:63:35:08:37:7d:f5:5f:74:2c:0a:eb:de:d5:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:04:A2:7D:F2:4E:06:3F:88:56:0F:A2:A4:DC:D0:5F:CD:97:E4:DD
X509v3 Authority Key Identifier:
keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:00:a3:7b:bf:22:8f:db:e1:9a:f2:80:c1:39:3c:ff:15:d2:
2d:4d:b7:b4:10:94:2a:77:14:3c:34:9f:e5:7b:54:ab:e9:cd:
5d:9e:ec:14:ec:05:73:48:7f:49:37:67:a3:74:41:76:59:76:
ed:2b:6d:97:18:f3:fe:1a:7b:d2:df:db:2b:2e:9a:e7:bd:f5:
32:32:71:c1:c8:e3:23:6b:fc:22:4e:58:1d:60:1c:d9:d9:5a:
d3:3e:5a:e0:03:00:4f:e1:f2:2e:62:75:15:ce:34:b4:1f:c7:
40:83:6c:cb:6a:29:b1:33:b8:87:48:c5:6f:a2:db:3b:60:02:
95:9a:49:ae:35:48:9f:e9:52:42:15:01:93:6f:93:a1:44:83:
a1:94:4b:ee:97:c8:47:3f:92:dd:f3:69:3b:75:f6:52:19:b4:
ad:d9:43:04:32:c8:b9:a9:5b:9a:8a:18:5a:f7:27:7c:45:de:
ee:51:c2:11:5d:ab:13:4f:e8:d9:55:1c:f9:ed:c9:fd:39:86:
26:00:1a:9f:dc:6c:4c:2a:d9:95:31:90:30:1b:48:06:1a:8d:
5f:71:52:fc:fe:47:98:45:8f:2f:1f:be:fd:ae:cd:35:c9:89:
d3:a2:77:4d:ec:0c:14:b0:93:33:1d:4b:63:35:8b:18:6e:1e:
c6:47:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:53 2025 by rpki-client