Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.mft (raw, json)
Hash identifier: IyHevO8rWRE+F5hPXd0ufB6py27uTNxy/uDj8DB/VNw=
Subject key identifier: 34:14:73:A3:37:D0:5F:7A:A0:F2:F9:92:F2:F2:34:6A:E7:BE:A7:75
Authority key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Certificate issuer: /CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Certificate serial: 0197B58E767FA6956EB388D5825A3E931197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 08:01:41 +0000
Manifest this update: Sat 28 Jun 2025 08:01:41 +0000
Manifest next update: Sun 29 Jun 2025 08:01:41 +0000
Files and hashes: 1: HPLsgl-mOB6OlP05sG6ji2PkGhA.crl (hash: datakr/eUxBTP5fHxlHkFbyXLqBqGcmVdeA0EMmkH0k=)
2: JAj8K9FK0yJ4abLe6Fga6ihptw4.roa (hash: EFhtWb0ps1NNZCAlSUS+dLCZTzQuPXq8Ov+/YyEbgx0=)
3: _IKA2Fs9sk_HXgYRoE_hIh9ff0o.roa (hash: 7fFt0WExoH93JNOsEPipdfERGEC89/UjUDUL8wmgczo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8e:76:7f:a6:95:6e:b3:88:d5:82:5a:3e:93:11:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Validity
Not Before: Jun 28 08:01:41 2025 GMT
Not After : Jun 29 08:01:41 2025 GMT
Subject: CN=341473a337d05f7aa0f2f992f2f2346ae7bea775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:70:f0:15:30:4a:9a:0c:1a:b5:3b:00:a8:2c:
c9:9d:e0:3d:a3:e5:8b:b3:51:6a:8c:69:d9:fa:8c:
e6:45:da:78:50:ce:96:10:4e:b5:d5:1e:d1:e5:7e:
8a:54:30:06:60:01:83:ae:0b:99:23:1b:bd:3f:cf:
1c:63:cb:d3:dc:b5:d1:30:82:0c:6c:20:49:7f:8e:
ad:46:97:b2:6f:6f:73:33:4f:66:57:62:de:1f:24:
bb:66:bb:a3:3c:96:91:1f:cf:d3:7d:85:34:06:4f:
a0:ba:2f:60:4b:96:a6:c8:a8:14:f5:37:9d:b4:d6:
13:2a:1e:b3:9c:58:a6:29:22:f7:18:04:c6:ec:2b:
19:b6:c3:a4:2c:a3:6c:56:ae:0d:07:42:ba:68:28:
a0:85:b3:72:fb:d6:00:fc:85:98:63:a4:9d:4f:e7:
5a:b4:c5:b0:a2:d5:d4:98:cf:4a:c1:f1:a3:53:22:
ad:1c:40:1b:0a:74:e4:b9:4d:a1:08:6e:19:b3:f4:
fa:e5:ab:f9:dd:4f:1f:71:5d:cf:97:a1:ed:3b:6a:
62:2c:90:b7:c0:d8:ad:de:66:68:b4:a2:38:c0:7c:
57:4a:45:2b:88:fd:b6:af:97:60:f1:c5:f6:34:34:
ca:67:0a:4b:3c:4c:52:66:eb:f5:af:da:d2:6a:d1:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:73:A3:37:D0:5F:7A:A0:F2:F9:92:F2:F2:34:6A:E7:BE:A7:75
X509v3 Authority Key Identifier:
keyid:1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:05:52:0b:fa:a3:45:0d:96:c3:df:5d:33:fd:06:58:17:
d7:e6:86:97:8e:64:18:fc:2d:31:db:e7:11:7b:80:37:c3:2c:
7c:4b:b8:9d:46:31:a5:86:8b:e3:aa:4a:84:86:6d:2d:f9:61:
9f:2e:bd:18:d2:10:4e:b5:8e:4a:ba:99:2a:f4:06:be:20:d0:
48:e3:30:39:bc:57:9e:87:63:75:13:3b:59:76:01:ae:db:a2:
d3:b7:42:62:e3:18:5a:35:ac:26:6e:d2:d3:57:36:8c:cb:b8:
33:4e:e7:52:6a:a1:b9:fd:16:d7:92:70:f9:a1:13:67:f5:3d:
79:55:58:69:8c:65:12:8d:03:f5:a9:81:c1:f7:c6:a5:89:18:
2d:67:f0:4d:3e:37:34:46:b5:b0:6e:c3:be:24:f4:e0:34:3b:
f7:b8:dc:f2:b3:18:32:4d:3e:2f:11:b3:a5:aa:5a:f2:ee:0a:
19:ab:84:04:c5:f4:5e:6d:5a:df:ce:7e:e5:95:46:74:d9:ad:
e6:2e:54:4b:91:21:4e:17:65:7d:37:74:35:95:6b:07:68:89:
a6:c6:9f:35:d7:a3:65:2b:7a:29:79:7e:e8:88:da:db:39:33:
79:c3:fb:94:96:1f:12:5f:a3:d4:b3:39:7f:fd:3a:4a:19:89:
ca:55:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:18 2025 by rpki-client