Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: CH/LqAZzj2+VVdUgv7pPi5zIqlmi1O0jmNcztv73oFE=
Subject key identifier: C3:73:24:BB:8B:A8:3B:EC:71:1D:67:6C:96:60:F7:2E:90:6B:69:20
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 0197B6A141BEFB48B4DB2FB0E864F29AF28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 0E85
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: 8y58fpezSLHFRbmsRPnRy5QEgV85Vc0pI9QRW+LqknE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:41:be:fb:48:b4:db:2f:b0:e8:64:f2:9a:f2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=c37324bb8ba83bec711d676c9660f72e906b6920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:3b:14:3a:8a:fa:95:8d:59:77:47:96:65:
01:38:cb:92:34:2f:ab:0e:e8:44:bc:7c:d5:fb:0f:
89:fc:af:22:1f:f5:4d:a5:f5:f0:6f:1e:97:c7:bf:
ac:74:d7:85:b1:4e:c6:21:ee:97:7e:d1:dd:1f:2a:
34:4e:f3:3b:33:6e:d6:50:ba:93:de:86:d9:14:19:
c3:79:ea:0e:10:6f:b0:e5:e6:8d:fd:f2:bb:7f:2a:
41:d3:88:3f:58:52:77:f4:4e:06:6e:a3:a6:d4:63:
da:09:52:06:a2:22:99:b1:6d:34:8c:30:da:16:8b:
30:9a:2e:fc:99:3f:19:da:41:b6:85:4f:00:ae:5f:
c6:a1:fb:77:c1:a4:c0:83:19:9b:14:e9:8a:d0:83:
76:ac:9a:4a:7e:ca:15:22:ef:72:a2:9b:cb:2d:3b:
f8:09:6f:52:df:a4:f9:89:69:38:01:67:8f:b7:0b:
3a:5f:d0:a6:b7:a6:b2:fe:b6:ee:b5:7c:29:30:5a:
d3:9c:cf:43:4a:41:7a:02:ec:03:4c:ed:f4:f0:44:
17:bd:0a:b6:4d:37:f4:32:d0:d1:43:4d:1d:fd:ab:
96:44:d1:d3:5d:40:76:4f:49:16:59:ff:c9:96:94:
b2:42:fa:f8:93:d0:bc:b8:47:47:3b:bf:db:b0:e2:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:73:24:BB:8B:A8:3B:EC:71:1D:67:6C:96:60:F7:2E:90:6B:69:20
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fe:f2:45:f0:cb:90:11:d0:3d:49:e5:c2:00:48:9d:20:5a:
e5:a4:5c:4d:de:ea:8a:69:fd:40:83:d5:13:6a:11:d1:9d:33:
dd:3f:12:18:61:d2:60:de:a2:b2:2f:0c:c2:90:4a:de:14:34:
28:dd:54:19:2c:f9:06:98:b7:43:4f:91:a5:c5:83:a7:7d:5a:
ec:1c:09:21:2e:be:56:f1:35:91:ca:cd:ac:32:db:ca:af:21:
5d:38:19:a5:04:78:23:3a:17:f0:a6:04:2b:10:06:8c:4d:ee:
68:80:f9:67:fc:9a:53:29:0a:d6:c9:65:37:d7:29:b8:03:19:
e0:95:17:e9:20:db:5f:9c:b8:ac:14:f8:97:2a:45:0a:17:ff:
30:4c:24:d3:79:6e:36:17:19:db:8d:1d:10:18:c5:6d:82:31:
e9:e2:aa:d7:39:27:9f:7f:cf:3a:b3:43:1b:33:d0:88:84:cc:
05:b3:bb:d5:e1:71:f2:40:58:d6:09:08:41:bd:66:93:0c:0b:
5c:cd:88:d9:73:05:ff:85:b4:3f:41:bd:7f:c6:12:ac:ae:a2:
b9:60:2d:85:2c:96:56:9c:96:b4:05:85:ec:fc:12:e6:b9:72:
4e:73:0d:7f:f8:ea:77:93:76:bf:3b:85:37:c8:75:59:6d:18:
b7:82:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:43 2025 by rpki-client