Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File: HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier: 87KGDJg0SpSfzOW+tAN5hInaTNewNAqTmYK9zci8bGY=
Subject key identifier: 32:F6:1B:3B:86:66:7A:C3:07:E0:2D:36:18:09:25:08:D9:D9:C5:EB
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer: /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial: 0198D47454710F5B421D6E3F6ED10B60E602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number: 0CDC
Signing time: Sat 23 Aug 2025 01:04:10 +0000
Manifest this update: Sat 23 Aug 2025 01:04:10 +0000
Manifest next update: Sun 24 Aug 2025 01:04:10 +0000
Files and hashes: 1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: EjpnD7AixPmCcfOSQeSQrreh7CHSQTmPXY7+BZmoV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:54:71:0f:5b:42:1d:6e:3f:6e:d1:0b:60:e6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Validity
Not Before: Aug 23 01:04:10 2025 GMT
Not After : Aug 24 01:04:10 2025 GMT
Subject: CN=32f61b3b86667ac307e02d3618092508d9d9c5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:7a:26:5e:ed:32:4b:c1:34:e4:18:56:3e:
1e:63:fe:2a:82:19:a9:7e:2f:d7:cd:cb:02:bc:4f:
b2:aa:c1:40:60:7e:ee:57:7b:c9:4d:04:0b:fa:9f:
fb:68:0d:70:49:f3:f1:2c:6e:07:82:7a:b0:21:50:
00:bd:e4:ad:48:3c:23:c4:7a:bc:6a:54:a6:b7:af:
d5:5c:ad:a6:af:3d:f4:61:07:2e:17:4e:10:6c:86:
f4:53:51:29:bd:5d:54:da:a0:bb:66:11:15:10:42:
46:c1:63:24:69:4a:f0:fb:43:ec:82:cc:c5:99:61:
bf:cd:94:40:e4:7d:99:c1:1b:36:cd:e9:af:6d:97:
73:6c:b3:db:50:f1:5a:e4:ee:b4:f8:d8:f4:3c:c6:
40:fb:c2:24:e2:52:c8:10:c4:8d:4e:ce:d5:15:0a:
65:80:b3:04:e6:80:19:23:2c:dd:cc:ca:d1:0c:5f:
2f:d0:bb:0e:81:ed:51:74:69:95:42:a5:c4:1b:8e:
83:b4:ac:dc:92:bc:a2:68:bd:f6:60:00:bb:f2:60:
5b:61:e8:2c:c3:81:29:2c:f4:37:5e:b3:f0:93:b2:
97:cd:d2:d4:47:73:c4:87:80:58:3c:12:5f:fc:55:
f6:f3:1b:b0:f2:cf:f5:49:ff:7d:f0:b8:29:67:a3:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:1B:3B:86:66:7A:C3:07:E0:2D:36:18:09:25:08:D9:D9:C5:EB
X509v3 Authority Key Identifier:
keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:45:7c:87:1a:fa:d3:28:18:56:74:7d:e4:6c:c0:51:60:19:
ad:bd:f7:73:4f:46:60:2f:a1:a4:7f:9e:e2:84:b8:ab:39:43:
f2:f3:86:1f:a4:56:8b:47:99:7a:eb:8d:56:fa:dd:54:d2:49:
f3:ef:ed:bf:56:bb:f3:37:1c:fa:df:7f:fa:4f:1d:04:0b:40:
08:fb:86:60:18:81:e5:88:43:8b:39:ab:f8:19:8a:e8:f9:17:
a6:d1:02:8a:9d:96:e1:09:98:39:e6:9a:f0:6e:08:76:ff:d0:
da:f0:7c:c5:c2:c8:f1:f4:30:33:8d:2e:df:44:e6:bf:41:53:
11:0d:61:3a:4e:4b:2e:ed:51:10:0c:6f:a6:4a:c3:40:c6:cf:
d6:91:2b:73:57:7c:10:9d:06:55:03:ff:71:68:0a:29:76:02:
1c:b7:8a:19:e2:31:59:4f:e6:1e:72:96:19:50:1f:10:3d:d9:
01:1c:44:61:a6:da:42:68:61:94:3f:57:f0:fa:9c:c4:40:a6:
ca:43:03:c6:3d:56:48:42:d0:27:66:cd:79:91:4c:58:83:e9:
46:54:5f:74:be:c3:e7:c7:be:7c:17:c8:f6:c5:fc:4a:08:9e:
26:3f:10:49:10:42:45:11:b3:0b:ce:e3:37:cd:ef:d3:da:3a:
80:3e:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:37 2025 by rpki-client