Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File: HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier: j7JKjkGk8st2EIHAmnZXNkak1s+CEuhs6D6RSOh3SYQ=
Subject key identifier: 5D:0C:E3:8B:EA:91:20:F8:1B:F1:EF:12:AE:F0:08:89:C0:23:D3:3D
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer: /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial: 0197B6A1153B0FBCDCC5137ADA76071F84EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number: 0CDC
Signing time: Sat 28 Jun 2025 13:01:39 +0000
Manifest this update: Sat 28 Jun 2025 13:01:39 +0000
Manifest next update: Sun 29 Jun 2025 13:01:39 +0000
Files and hashes: 1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: Y97+xZfRUHwf1uIa5214x1rBd++pu0Znh42IZLhkkUs=)
2: RPmjQPRT6ThSraH9_mRiL0MDtOs.roa (hash: whApUZJ7ydquVhB+yjQTmZxwrY2+CBwkk7L36wahsAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:15:3b:0f:bc:dc:c5:13:7a:da:76:07:1f:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Validity
Not Before: Jun 28 13:01:39 2025 GMT
Not After : Jun 29 13:01:39 2025 GMT
Subject: CN=5d0ce38bea9120f81bf1ef12aef00889c023d33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:68:49:79:13:ab:e5:35:62:73:f3:3c:81:
eb:8b:1d:d9:da:1d:15:69:5c:6b:0f:1a:b1:c3:54:
29:b7:2e:36:7d:74:d0:6c:1c:68:8c:f7:9a:4e:06:
be:5e:b6:1a:92:bf:3d:a3:59:c0:97:d0:42:41:38:
f1:2f:37:0f:8b:6e:5a:34:db:df:c6:f0:e8:61:4c:
c2:8a:75:43:66:b4:5c:fa:7a:b1:a4:72:04:9b:59:
59:db:88:bc:b0:0d:55:7c:f2:eb:48:79:2f:13:68:
d6:2e:aa:f7:78:a3:78:63:1e:7e:a2:8e:85:2e:78:
1c:9d:7d:15:39:da:26:9f:1a:d9:d3:ca:c5:85:38:
aa:38:ce:50:ce:8a:61:75:e7:cd:53:5b:96:b5:fc:
3f:65:33:ca:7e:eb:65:47:1b:51:61:10:c6:b6:7d:
0e:d0:38:37:80:54:e1:a4:4b:ab:f2:f3:58:04:29:
50:46:b0:9c:d1:ae:6a:b6:f1:38:54:8d:a7:9d:7d:
84:a4:fb:17:a3:1e:5d:a4:e8:31:ea:16:fd:be:2c:
e0:8b:44:f4:e8:d2:de:42:1e:d1:bf:f7:dc:1c:21:
ec:c4:1b:86:55:00:c2:a8:13:ff:16:2c:a2:e4:0e:
76:3d:22:73:ee:39:d6:ea:a4:f9:82:e9:af:ff:2a:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0C:E3:8B:EA:91:20:F8:1B:F1:EF:12:AE:F0:08:89:C0:23:D3:3D
X509v3 Authority Key Identifier:
keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:93:a4:aa:5d:b5:73:ea:b7:f7:8f:48:86:e0:ad:e0:8a:a1:
75:5d:f0:7d:db:33:63:53:51:54:8e:af:a5:0e:f7:24:7a:e0:
54:6b:27:b5:d9:e0:8c:9a:ed:05:d9:42:df:e1:2d:ec:dc:d5:
3c:a3:90:b9:33:8e:cd:ea:9f:1c:88:1a:40:d9:7f:0e:42:e4:
c8:01:6b:34:24:2e:f8:f3:e5:ed:d2:c7:22:84:4c:a2:80:b2:
50:76:78:15:8c:a0:e2:db:78:ef:e3:20:9a:18:70:d0:32:a8:
85:44:92:55:1d:24:cf:79:d2:78:23:3d:20:fe:f5:42:2b:a4:
56:38:04:b9:36:21:e1:5a:da:97:5b:63:f9:a3:d8:ad:54:21:
e0:88:b4:30:2e:4f:b8:13:c3:4e:1b:ec:9d:99:bc:3a:e7:9d:
6a:09:46:74:7e:bb:37:d1:d8:79:49:c0:11:34:34:42:7f:ee:
cf:21:5f:20:54:f8:77:00:8c:2a:31:d7:e7:52:1c:a6:a7:41:
4c:e7:82:ac:5e:e8:07:9f:d9:55:ec:9e:f4:f6:fe:28:3c:56:
90:5b:68:0a:4d:ab:5c:8b:f5:87:13:72:65:8e:37:fc:b3:33:
c8:5e:95:5c:2d:45:c9:76:88:8e:82:3f:22:00:d5:44:85:40:
7c:a6:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:19 2025 by rpki-client