Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: 7Ryfq/Y85OI2hRVFrQSLDm7PD7er3QHGjJmOUOzhWdU=
Subject key identifier: 9D:6F:22:DD:BC:C1:2D:B2:66:F9:BE:05:25:7A:A5:D2:4E:E0:31:27
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 0197B7EA36B68E0B0CE1622B20C14B3DA5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 0432
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: 2IUVrUcX57wEcebuPBNhbM7rtII.roa (hash: xFARryMWCZ7xJebZzJ48q6NyTNbF+EONupkOj48G4Zc=)
2: 3mgL5kmPTE1KzgmolBjYNrOCQw4.roa (hash: 4p0hGsG00DucWMHppeS8f+vIw114RVg7ok5Btqh+zyQ=)
3: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: Z+w3uh3O+P2MQCdKAv6uEW5icNiVPApQV81XIuuRV3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:36:b6:8e:0b:0c:e1:62:2b:20:c1:4b:3d:a5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=9d6f22ddbcc12db266f9be05257aa5d24ee03127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:32:b1:04:3b:da:60:ac:21:a2:83:18:a2:
0d:50:63:42:6e:70:6a:c8:99:4d:d6:06:21:dc:fd:
d1:e5:49:03:70:ef:91:db:f9:ff:e2:63:83:a6:a5:
e7:59:31:02:2c:69:e3:9d:1a:1c:b9:a7:bc:e5:43:
f8:f6:84:a1:f7:0f:3a:15:54:50:c0:4d:a2:66:1b:
6d:4b:81:bb:5d:2b:5e:b5:70:2c:fb:a1:94:ba:73:
ea:01:ca:ec:9a:71:36:0b:82:22:91:47:12:ef:7d:
bc:a1:74:10:e2:1c:66:99:7f:72:55:d6:5f:31:c4:
f2:c2:fb:18:37:8e:39:41:4b:78:40:fe:5e:0e:5f:
71:9c:ba:cf:64:5f:29:0e:67:11:06:52:98:40:9a:
14:3a:20:ab:09:cd:17:f9:ae:b7:55:60:4b:69:f1:
b5:fe:92:4f:1e:74:20:a5:57:db:4a:16:ee:24:6a:
79:52:57:5b:5b:55:b9:7b:73:5b:09:bd:21:08:1e:
79:ee:d1:f9:ec:1a:9d:5b:ed:c1:5e:95:80:26:e4:
e2:9c:0a:42:8d:93:7d:97:4a:33:10:9d:e8:8c:17:
0f:a4:8d:fc:dc:6f:f6:fb:78:8b:5f:f9:52:11:32:
cb:9b:a2:5b:d2:ee:f6:bd:37:8b:a7:08:6c:95:03:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:22:DD:BC:C1:2D:B2:66:F9:BE:05:25:7A:A5:D2:4E:E0:31:27
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ed:f9:b9:31:fe:5f:2e:e3:db:d9:3a:0e:b2:4a:47:14:b9:
ab:77:30:6f:32:dd:9b:c7:01:91:d9:54:ce:74:91:f5:ac:1c:
18:7b:ab:b9:d7:cc:66:7d:cd:6a:5a:8e:3c:5a:c5:24:04:66:
08:6a:c2:58:71:b6:2f:2e:d7:48:1f:6c:4c:0c:d2:01:b6:40:
12:02:26:9d:40:9e:0f:f1:10:d7:ea:a5:8b:f3:c7:21:17:6a:
7b:a9:6e:23:a8:a1:8e:3c:0f:53:7c:47:00:cc:db:00:11:1b:
8c:d2:03:96:dc:da:0c:26:27:2a:36:5b:01:5a:2f:c0:d3:81:
75:60:0f:d8:80:54:ec:15:b5:31:24:7f:83:78:0c:03:f0:d1:
8d:88:87:e2:a7:3e:69:11:e7:a8:f3:44:6d:0b:87:69:1b:0e:
9c:71:6e:58:76:19:47:c4:28:0e:7a:ad:b8:f0:7e:89:79:8d:
29:09:96:a0:6c:9a:57:0d:aa:64:e3:5c:18:1e:c2:2d:ed:4e:
27:a3:b0:fa:81:91:83:6e:79:2d:fe:ec:38:d1:c1:21:23:ee:
38:50:8c:ed:53:f2:a9:c6:f0:b5:c4:d0:3e:91:c7:d2:64:35:
c3:12:13:9d:33:79:98:ef:b1:9a:fd:38:66:82:2e:ad:5e:cf:
28:fa:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:28 2025 by rpki-client