Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
File: HzkK-DPX1CaQQsJJvPSWSFcglbY.mft (raw, json)
Hash identifier: LAPpoh9yEPiuJ4G5/JoWWZZmt7TCvJ0JV28WXE0K/SE=
Subject key identifier: 4E:38:84:37:01:79:B0:78:6C:20:59:E3:6B:E2:4A:EA:7F:78:45:89
Authority key identifier: 1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
Certificate issuer: /CN=1f390af833d7d4269042c249bcf49648572095b6
Certificate serial: 0197B6A1C49977E7896258819EBF4C6B6542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
Manifest number: 1054
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: HzkK-DPX1CaQQsJJvPSWSFcglbY.crl (hash: yqp5VscCVJaHQXskmFXn3AEMiNhff5ed99ZXF3iWDiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c4:99:77:e7:89:62:58:81:9e:bf:4c:6b:65:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f390af833d7d4269042c249bcf49648572095b6
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=4e3884370179b0786c2059e36be24aea7f784589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:c1:97:5a:ea:b3:f7:59:ec:03:e9:0b:9a:
e1:fc:f2:15:95:ac:cd:ec:76:14:b2:bf:4e:da:6c:
2d:bd:4c:72:c3:53:1b:f7:36:9e:04:96:06:88:29:
94:d7:35:d5:ed:b4:cf:b2:32:e3:97:c3:6f:e2:e3:
04:15:a6:c4:22:1b:73:6d:c7:a8:a0:32:41:e9:df:
e1:90:33:a1:59:68:b3:80:c2:a3:d5:68:e1:f9:1a:
9b:86:1d:4a:17:4c:83:01:73:c3:ad:5a:7a:57:9d:
1d:a8:ad:d9:ed:22:a0:6e:d8:42:4f:06:1f:28:f5:
86:f7:de:05:df:63:ca:03:4a:43:0e:1b:1f:85:00:
92:76:3b:75:73:04:bf:0f:ce:e8:82:da:1b:6b:2b:
77:e5:12:92:dc:22:82:9e:c0:00:54:7e:93:32:6e:
27:6f:e0:19:fa:de:dc:c0:85:eb:8b:5a:58:2b:e3:
20:72:d7:28:43:37:47:f1:da:8a:2d:3d:cb:7b:ac:
02:13:3d:07:eb:c6:81:f3:21:a3:b1:61:f6:cf:cd:
72:de:26:93:e0:9f:95:2f:4f:f2:7f:19:69:e6:66:
eb:ed:e2:49:3f:71:80:f7:c2:5d:53:d5:b0:90:f3:
7f:65:e0:c0:3e:a5:2d:22:d9:4d:7c:13:43:f3:b9:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:38:84:37:01:79:B0:78:6C:20:59:E3:6B:E2:4A:EA:7F:78:45:89
X509v3 Authority Key Identifier:
keyid:1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b5:02:0a:ad:18:ee:b7:02:b8:13:52:e4:e2:20:83:34:b9:
82:69:95:12:bb:dd:d0:9b:cf:c3:49:cd:ca:64:4c:2e:09:62:
18:e2:cc:39:73:29:7c:36:2f:ac:17:19:ac:84:c4:94:bb:4b:
d4:29:51:41:61:4e:62:0b:f2:da:7e:32:50:f9:6a:69:3b:17:
64:dd:e5:42:df:8b:7a:0f:47:b9:e2:d0:e9:8b:8e:a5:34:9f:
9a:6e:da:f8:df:0e:16:89:6f:6e:a3:77:0f:ae:da:70:eb:39:
dd:da:9d:69:17:3c:a5:01:93:c1:c6:be:0e:6c:31:e5:d8:05:
87:44:4a:61:f2:7a:79:0e:ed:9e:29:99:a7:c9:36:36:04:ab:
cc:f9:51:b3:8c:df:30:cd:03:cd:fa:6d:3e:98:1c:3f:ae:55:
84:f1:85:c3:9a:c7:f7:53:7c:ec:2f:6f:66:f1:bc:78:5e:0b:
23:6b:53:8c:e9:54:02:99:a0:7b:08:81:2e:85:d7:c5:f5:42:
5b:99:dd:30:13:51:41:f1:3b:24:02:76:26:65:84:12:5a:bf:
f5:f7:2b:d1:e5:b0:72:e5:63:17:8e:d3:b9:e9:65:e8:6f:bc:
73:db:c6:ef:7b:29:b5:9e:16:18:b2:16:78:86:c1:06:25:85:
98:dc:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:18 2025 by rpki-client