Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: g4l/jeqHvfK4DCyrTG7IObEzFmxssGAwi6cn4Fw5tKU=
Subject key identifier: 4E:D0:28:10:FE:72:04:FC:A8:C2:B8:C2:5A:55:C9:87:15:DC:CF:F9
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 0197B7B3283AF95D19F4EA44A6F140BE82B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:01:01 +0000
Manifest this update: Sat 28 Jun 2025 18:01:01 +0000
Manifest next update: Sun 29 Jun 2025 18:01:01 +0000
Files and hashes: 1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: ZO9zJ2CRYaYHGGdEhRobUpZ8edkXrJTlamCIvKQhcaU=)
2: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:28:3a:f9:5d:19:f4:ea:44:a6:f1:40:be:82:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Jun 28 18:01:01 2025 GMT
Not After : Jun 29 18:01:01 2025 GMT
Subject: CN=4ed02810fe7204fca8c2b8c25a55c98715dccff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:ae:68:74:9d:72:bb:e7:ca:a0:bb:15:01:
d4:5e:5f:02:a6:cb:15:f2:2a:3e:d3:0c:97:2c:ad:
54:9e:6d:93:64:77:9f:91:82:7d:31:96:8f:c7:23:
b1:76:33:de:95:eb:ff:c4:e4:e5:31:c2:e4:18:e5:
a9:9f:9b:cc:fb:3d:c2:b1:85:1f:38:66:ea:32:e1:
ac:e2:bf:eb:3d:a6:e7:20:52:98:5f:bd:8c:a1:73:
28:b9:f2:4d:c7:81:3b:9d:45:64:54:74:05:b2:f8:
59:a1:d0:2d:49:49:58:c4:3d:e9:49:0a:2a:b9:c0:
ba:c8:9b:fc:17:1f:06:b1:6d:7d:52:8a:3f:02:cd:
99:39:1e:d4:6f:53:95:07:48:12:9b:3b:22:95:86:
31:24:e7:23:f3:57:57:c5:b3:0f:d6:8c:86:ce:0d:
ee:96:f6:05:bb:26:61:12:0a:4b:c9:96:b1:92:d8:
ca:e4:c2:e9:84:91:79:0d:05:b1:eb:3e:d9:3e:b4:
ed:f1:f3:c5:fa:e7:2a:03:dc:44:54:9a:78:e1:0c:
dc:a0:eb:f1:58:5a:36:2d:57:42:04:16:9e:89:9f:
50:02:85:99:a0:e2:3b:7c:c7:c7:4b:b1:bc:2e:63:
6d:78:b6:10:4d:b4:14:4c:94:e1:8b:d8:6e:47:b4:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:28:10:FE:72:04:FC:A8:C2:B8:C2:5A:55:C9:87:15:DC:CF:F9
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:65:7b:ac:c1:c8:cf:ad:08:6a:0c:af:10:8f:68:b0:a7:d0:
bf:bd:d7:d5:de:d4:b7:00:9f:2d:9e:e0:9c:82:fe:9e:db:70:
1d:9b:88:8c:2f:8a:fd:0b:d8:4f:8a:d8:cd:11:dd:11:e8:90:
2e:a3:05:0d:9b:e2:77:51:ea:9a:90:69:fd:05:92:8a:da:2f:
6d:98:ff:4a:bb:93:33:1e:a3:73:f8:dd:71:4d:0e:a1:0a:80:
51:59:f5:cc:d3:ad:e2:43:68:db:2e:cb:b6:08:73:84:cb:96:
b8:84:94:bf:b5:5f:e9:75:fc:15:8e:5a:1b:2e:c2:ef:4a:3a:
5c:aa:56:24:d1:ea:dd:1f:ed:83:23:63:19:94:96:c5:d2:b3:
9b:f6:32:0c:4e:28:a2:e4:79:f7:32:ea:3c:79:6f:aa:16:36:
ee:77:0c:45:1a:42:d6:db:87:80:20:13:bc:74:de:b5:f6:44:
f5:e8:ac:5c:e3:60:fb:01:81:8f:1f:46:f4:1e:9e:38:d3:c5:
f0:e5:04:e8:c1:d1:e5:46:9c:9b:67:ca:75:e1:1d:77:34:54:
f3:15:7f:6a:52:16:d1:23:4d:d0:12:a2:b9:b7:0c:92:8a:e3:
97:c2:b4:bd:ff:4c:74:73:4d:f6:10:43:e0:56:80:ae:38:4a:
53:77:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:04 2025 by rpki-client