Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json)
Hash identifier: zkRtHmzXXxx9Bhw0DtH4E98M0MHVQP7HsCB/arOEc24=
Subject key identifier: 2B:AA:CA:EE:B2:97:11:72:30:38:4F:EE:63:2E:9A:0C:C0:CE:C7:2E
Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Certificate serial: 0197B6A07EE7642F7DDDF3FC4CD90BF99C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
Manifest number: 06C6
Signing time: Sat 28 Jun 2025 13:01:00 +0000
Manifest this update: Sat 28 Jun 2025 13:01:00 +0000
Manifest next update: Sun 29 Jun 2025 13:01:00 +0000
Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: 2lQWd6m645BZVRbzFY1MiI8C8oOobhVXkWPk6rSzkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7e:e7:64:2f:7d:dd:f3:fc:4c:d9:0b:f9:9c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Validity
Not Before: Jun 28 13:01:00 2025 GMT
Not After : Jun 29 13:01:00 2025 GMT
Subject: CN=2baacaeeb297117230384fee632e9a0cc0cec72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:91:78:5a:14:d1:b7:0f:cd:1e:d3:c6:a0:
87:32:12:89:bd:b1:19:8d:50:f3:a1:15:cb:89:d5:
22:e7:2b:e2:f6:a9:ae:5a:39:5b:1d:a0:61:1b:77:
00:69:fb:f6:6a:dd:3e:34:80:11:05:f1:d7:01:7e:
48:f7:53:cf:65:6f:33:12:20:84:ea:e7:d2:55:ac:
9b:90:ba:ee:54:62:a1:20:2b:53:0d:ce:6e:48:64:
e5:0d:02:3f:f2:17:f6:ef:1b:4b:dd:ad:b2:21:a3:
f0:6f:08:b5:e7:40:e2:8d:3c:b9:0e:a8:3b:90:80:
3a:3a:48:e9:84:1a:f2:43:f0:f4:d6:29:78:79:c5:
bc:94:85:8f:39:ef:73:8d:22:a9:5a:12:a4:07:03:
bf:95:6a:06:63:00:f9:a6:1d:13:cd:0e:e0:02:1e:
72:1c:2e:5e:46:ac:d3:9d:61:77:4e:ac:43:12:ba:
70:32:51:63:32:97:c0:63:85:cb:c6:35:2d:c6:5c:
1e:23:68:1d:cd:61:27:34:00:ee:76:7b:a2:b7:22:
4d:20:48:ab:19:69:e2:ca:9a:2d:6e:2c:73:b5:9a:
46:82:2d:50:c6:5a:fc:79:e0:6c:ad:87:05:92:79:
a9:a7:7a:33:b3:89:cb:95:4a:08:e6:98:5b:86:f6:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AA:CA:EE:B2:97:11:72:30:38:4F:EE:63:2E:9A:0C:C0:CE:C7:2E
X509v3 Authority Key Identifier:
keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8b:c0:bd:0a:26:0e:04:73:63:e7:18:3b:10:ea:8a:50:5b:
4f:bf:20:85:3e:90:15:90:b5:54:48:0a:cc:5a:0a:9c:0a:81:
37:b7:bb:05:4f:53:11:af:4a:fc:75:0c:69:5a:7c:68:84:75:
b3:4c:4c:53:25:e3:33:88:9a:a5:b1:a6:ef:8d:9e:88:ff:58:
b3:2c:d6:9b:26:f5:e4:c2:76:31:71:23:e6:fd:af:2b:0a:c5:
00:c5:2e:c9:9b:e1:35:91:2a:3f:12:da:8a:18:3f:ae:f5:b4:
53:7a:99:6a:f0:cd:8a:7f:b4:12:16:61:07:1e:f6:95:40:d3:
4e:50:78:00:f5:ed:6f:0a:51:30:c3:ff:e7:18:77:d9:f8:d4:
c9:12:6c:81:04:96:8f:c3:39:d9:21:88:55:d8:1c:f6:e3:c5:
34:f7:37:44:2b:e5:bb:15:5e:08:71:a2:cc:c6:59:12:b9:23:
cf:bf:d2:49:17:c0:1f:cc:0b:0f:ee:6d:5b:fc:80:b8:31:08:
9e:0d:c5:8e:97:46:03:4c:7a:f0:8b:ae:8e:1d:7d:a9:06:18:
d6:cc:f2:43:05:74:45:d3:d8:97:14:ee:e5:22:7d:78:7c:1e:
e6:6a:62:99:44:8f:7b:76:6b:ce:2d:10:a5:87:aa:8e:f3:d8:
ad:b9:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:56 2025 by rpki-client