Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: L/ClhAOW3qSItU+Txe8YOjxjf3E5lUoqTSFV+shFDIA=
Subject key identifier: 99:FF:A7:43:3B:06:3A:3F:1E:8A:FB:EF:7C:13:27:2F:74:AC:C2:5A
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 0197B74517A5838902B12FE723EB649B769F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 0D38
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: hfHIKgl/Whjo6o1D2jJDDeM+usG9slq5lokGXPPKQhk=)
2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:17:a5:83:89:02:b1:2f:e7:23:eb:64:9b:76:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=99ffa7433b063a3f1e8afbef7c13272f74acc25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:8c:33:3e:c5:a5:03:b9:e5:a1:6c:09:53:
d1:bd:87:06:c0:14:ae:00:f7:29:42:25:2a:75:34:
3f:db:73:5a:c5:61:21:68:a9:5a:0b:e1:63:fd:f0:
00:4e:0b:5d:0a:e6:1c:d0:25:78:a7:d7:e9:98:ff:
ff:cf:2d:1e:b4:f6:31:4c:62:ad:fc:80:e0:9d:da:
f6:60:27:77:be:af:aa:78:d3:ce:ba:12:94:ae:2f:
e2:f1:30:68:56:16:97:ec:aa:cd:15:83:86:23:fe:
a3:95:d1:90:3c:1c:79:4a:ce:8a:24:a0:7d:fa:4d:
0e:9e:f3:23:09:fc:43:11:e5:50:f9:0a:19:03:f4:
3b:fb:cb:a2:1e:37:13:5f:4a:63:eb:bc:62:43:6c:
c4:37:de:d8:a0:af:4f:11:ec:35:bf:76:62:1d:b1:
2c:64:33:24:f4:0d:dd:24:fb:8b:a2:77:54:96:ac:
38:16:e1:46:91:b4:bd:e5:c0:14:91:3b:41:87:a2:
2c:84:0d:9e:94:ac:0f:ed:cf:7e:91:cd:e0:53:ed:
b8:4e:3e:79:e1:1d:8e:1c:2b:a7:9d:94:fa:15:a9:
78:12:8c:aa:fc:7e:6d:b2:db:c6:8d:ed:c2:13:81:
8a:bd:bd:b1:86:71:d3:22:c4:47:f2:c0:c1:36:48:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FF:A7:43:3B:06:3A:3F:1E:8A:FB:EF:7C:13:27:2F:74:AC:C2:5A
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:83:45:ab:56:2d:cf:3e:5a:f2:5b:15:5d:67:e5:85:00:cf:
90:44:d9:4b:a0:6d:46:a2:c9:ee:6e:6f:db:a0:44:31:cf:19:
dc:79:fe:4d:b4:d2:fe:6f:46:32:8d:ed:da:96:62:97:43:56:
3c:d4:a0:68:c8:7f:cf:de:52:aa:7d:c3:14:5d:d9:4d:c5:6f:
9e:c5:2f:0f:4c:99:0a:7a:42:e4:63:16:54:34:43:eb:d7:04:
bc:7e:59:9d:4e:32:b0:03:70:16:19:a5:0c:68:7c:a5:15:df:
09:2e:ab:af:ce:cb:33:97:ff:27:df:dd:d1:f2:50:b7:8e:26:
f6:58:92:3d:e6:6c:72:c9:35:86:ca:d2:ad:3d:0a:e7:d7:fc:
81:b0:31:14:fb:9b:e0:3b:96:cf:48:55:2f:8f:8b:6d:08:d1:
fd:65:29:11:ce:c4:71:1f:2e:8d:a1:99:d9:23:bb:7b:3e:41:
ea:97:9e:e8:8a:48:7b:79:70:67:05:0e:bb:e8:2c:eb:c3:c1:
22:1d:1e:78:ac:43:7e:b6:d3:6a:cc:a1:0f:b8:77:71:3f:9c:
fe:f1:59:6d:38:4f:a0:e4:e1:10:f5:70:77:88:e8:a5:9d:ab:
9e:11:a0:01:07:f2:49:e7:7d:f7:2a:7c:f0:41:cd:97:4b:26:
c3:72:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:16 2025 by rpki-client