Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier: gIorG7IAxTugg+ymZ0bBRMjudH43cNReK8W/YNzOSL8=
Subject key identifier: 19:BD:33:7A:BB:D9:6F:03:A4:B4:37:C8:A6:5C:28:C9:36:54:E5:C7
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 0197BA7D3506AC429EC1AA6D79D1F6B407D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number: 0EFC
Signing time: Sun 29 Jun 2025 07:00:57 +0000
Manifest this update: Sun 29 Jun 2025 07:00:57 +0000
Manifest next update: Mon 30 Jun 2025 07:00:57 +0000
Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: lWci11recQ6+j5Q51U9TYRBzcLwu4cAWCyp9flgUoHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:35:06:ac:42:9e:c1:aa:6d:79:d1:f6:b4:07:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Jun 29 07:00:57 2025 GMT
Not After : Jun 30 07:00:57 2025 GMT
Subject: CN=19bd337abbd96f03a4b437c8a65c28c93654e5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:72:4b:7e:b1:d3:53:fa:ec:5d:36:2d:1b:
58:a8:61:0f:b6:09:b3:fa:25:90:bb:74:e0:bd:2e:
14:a5:04:56:37:09:64:52:23:41:d9:a1:45:9a:3b:
63:7e:1d:c7:e7:8a:c9:6a:d2:5d:28:a8:67:0b:8d:
f1:bf:22:62:24:ab:0f:ce:2b:2e:74:38:f1:a9:dd:
02:5e:ec:b9:a6:e9:08:88:15:2a:a0:98:e8:bb:7d:
ed:d6:2b:b7:2e:8f:1f:47:ec:8d:9c:ed:0b:8c:66:
97:b6:1e:91:09:22:e9:97:4c:38:c7:7d:69:7c:13:
5d:56:68:80:8f:ba:14:7e:4e:90:ae:76:67:27:85:
b2:4b:7e:72:f5:89:a7:d0:b1:47:46:f2:bb:e2:be:
8c:4e:ec:ba:9b:ba:70:07:a6:a8:58:69:a2:3b:f4:
b9:ae:83:35:b3:0a:b8:42:2f:5e:2f:56:31:2f:25:
dd:da:7c:93:4f:4c:a1:72:c6:13:20:3c:47:1d:b7:
ee:c8:44:d3:d9:69:7f:03:f2:55:33:0e:67:48:e6:
70:96:0a:11:2e:06:89:d4:72:be:b4:01:6e:ab:3a:
de:82:b9:32:ed:40:8f:05:41:d9:9a:58:46:65:cc:
fe:99:aa:a3:a2:3d:24:c6:3b:4b:90:d3:ff:dd:d7:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:33:7A:BB:D9:6F:03:A4:B4:37:C8:A6:5C:28:C9:36:54:E5:C7
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c3:17:03:99:96:9e:a6:7b:30:cf:85:80:ac:79:58:5a:a1:
64:44:97:58:54:36:84:3d:c6:d4:fc:5a:e1:1f:0b:95:98:41:
12:1a:b7:a6:8f:b8:a5:94:68:67:3e:a4:fe:de:ed:3c:3e:23:
3e:ed:6f:23:1c:ae:21:e1:c7:62:93:f3:ad:ef:5a:bc:b3:f3:
e5:ff:0d:66:29:88:91:ac:f3:25:4f:6b:26:67:4a:73:f2:f1:
e6:ca:6a:96:4d:42:e2:4d:2d:72:e6:db:e4:70:eb:90:06:41:
79:35:09:20:d2:c5:82:6c:b3:4c:52:72:bc:7f:bf:45:cd:4e:
bb:b8:0f:54:6c:f1:ab:05:96:d8:83:a2:b4:d2:6a:cc:52:d1:
ac:b9:61:5c:45:53:8b:54:15:4a:00:51:c8:c3:d6:0f:52:4b:
c3:ec:7c:09:5c:b1:44:a3:a4:5b:51:5c:e4:cb:8a:fe:f9:de:
4a:3f:4c:c5:f5:95:89:c9:cc:7a:66:5b:30:08:5c:da:9d:e7:
84:2b:73:80:2e:ae:5b:81:b4:9d:0b:15:7b:5b:2f:e5:ed:8f:
b9:6b:fd:e1:8e:21:6e:17:e7:01:95:13:8b:6a:3d:cb:55:24:
9f:50:1e:d2:7c:88:97:19:30:e0:c9:00:5b:84:99:31:be:81:
7d:1e:4a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:06:06 2025 by rpki-client