Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
File: HDotyHGc8y1ZegUekO2VAmg15Pg.mft (raw, json)
Hash identifier: zZCobUJEL+LpSArzOcB6grpmb5r0QjjZp47UKumKtLw=
Subject key identifier: 3D:8C:9C:44:D6:95:55:C6:DB:6A:3B:17:77:DE:D7:AF:D2:27:75:5A
Authority key identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
Certificate issuer: /CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Certificate serial: 0197B6D74BA9CBBCE193936501D96D109495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
Manifest number: 06CC
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: HDotyHGc8y1ZegUekO2VAmg15Pg.crl (hash: 3VBiK+vqYWJF3ibRYg6AG4S3Yq0GegFzdQYbtfkhddQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4b:a9:cb:bc:e1:93:93:65:01:d9:6d:10:94:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=3d8c9c44d69555c6db6a3b1777ded7afd227755a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:17:a8:91:47:40:ab:ad:2a:8f:88:98:49:d3:
22:3f:8e:d7:8d:6d:01:4d:a6:7b:ca:8d:be:47:b2:
0f:b9:e1:50:61:a8:74:be:35:4d:fa:5f:4b:bf:80:
65:48:9d:95:04:b4:62:78:f6:de:72:df:7f:2f:23:
e0:87:2b:3f:db:1e:6c:9c:24:9a:58:73:b4:f4:10:
d5:84:2a:d7:02:f3:6e:fb:7b:96:99:0d:96:ea:bd:
89:ee:6b:d7:43:9a:12:b3:ac:60:13:1d:02:c8:09:
92:5f:78:05:0c:06:aa:4b:0e:d3:3e:31:7a:cd:c4:
99:93:75:56:d0:35:35:4c:d5:08:87:0b:ce:84:d9:
1c:71:7c:4a:e1:b5:41:ab:ce:3e:1f:d1:71:98:16:
d6:e0:1d:28:3b:73:44:61:ea:15:50:99:dc:93:f9:
aa:7f:40:c1:78:2d:9a:b6:24:01:67:cc:1d:35:4c:
1b:60:b0:50:40:43:a1:02:18:bf:6c:15:3f:2a:f2:
05:1c:20:86:0a:dc:af:36:7b:22:9e:6b:9b:15:e4:
ed:9a:9e:5b:54:26:13:f9:a5:b5:e3:c9:9f:eb:b9:
d0:c1:53:33:b6:27:b4:18:75:71:ae:8d:22:fe:4a:
5b:3e:db:df:7f:6e:6b:52:60:a0:e4:f3:73:b8:ed:
8a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8C:9C:44:D6:95:55:C6:DB:6A:3B:17:77:DE:D7:AF:D2:27:75:5A
X509v3 Authority Key Identifier:
keyid:1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d7:73:e6:12:23:d6:be:29:18:76:23:63:2c:d5:ca:11:68:
c4:fb:15:9a:77:5e:85:7b:76:d1:b0:c4:84:84:7e:5d:07:ad:
07:2b:0b:db:77:f6:c0:da:ef:0b:5f:9b:8a:9d:70:f2:a6:b9:
33:d1:90:4c:b4:09:16:98:95:04:84:59:5c:43:45:d6:9b:e7:
f3:cf:65:e3:d6:9b:f7:a9:4b:1b:44:78:83:63:bb:f1:c9:18:
7d:9c:4d:59:6d:4d:67:f6:6c:4e:f6:87:a9:15:ba:b4:67:86:
7e:ee:af:ed:39:36:fc:9f:a7:16:0f:0c:dd:7e:13:a9:c2:78:
94:cd:5b:8f:2a:5d:dd:0b:58:c6:72:11:44:ff:43:b5:2d:a0:
d1:7b:7d:19:e5:f2:89:53:b2:48:10:01:0e:76:36:b8:e5:c4:
c0:f6:63:c2:66:c7:80:22:99:1f:40:37:e8:e5:2c:5a:e6:21:
a8:e1:02:75:ba:f5:cd:84:e4:dd:89:4a:6e:52:d6:6c:f3:d0:
de:82:73:37:02:6b:a9:18:96:50:46:e9:8e:2f:0e:99:92:3b:
a5:eb:3f:57:45:bb:1a:42:75:cb:3a:34:9f:28:50:f9:6a:dd:
7e:6d:28:d4:a2:1d:8f:01:8b:d2:c2:77:bb:93:0c:93:06:47:
8d:b4:a3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:28 2025 by rpki-client