Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: UK2W6/BMQbvODHkEITu9/rVaJyrYyFduQCOvHvXoeOU=
Subject key identifier: 6A:29:7F:EC:C2:A8:A4:D0:50:BE:69:C4:AA:09:C4:FC:FC:D3:C3:3A
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 0197B745554B088A86FA0D7FA9B72B105946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 6B
Signing time: Sat 28 Jun 2025 16:01:03 +0000
Manifest this update: Sat 28 Jun 2025 16:01:03 +0000
Manifest next update: Sun 29 Jun 2025 16:01:03 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: Yt6Cu71SWlXbY2TsyAkc+RwB5mnHA18pZv09IxuZDUc=)
2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:55:4b:08:8a:86:fa:0d:7f:a9:b7:2b:10:59:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Jun 28 16:01:03 2025 GMT
Not After : Jun 29 16:01:03 2025 GMT
Subject: CN=6a297fecc2a8a4d050be69c4aa09c4fcfcd3c33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:9c:32:78:2f:ca:26:3e:b5:e7:23:3e:b0:
55:ca:42:a5:db:31:d7:07:e0:c8:78:2b:8a:59:37:
9f:3d:e4:9e:67:67:d6:f8:6f:91:5f:69:38:fc:5a:
11:1d:bd:20:33:ea:c8:52:67:90:88:03:8a:dc:f1:
e7:06:fe:4c:02:73:6e:f8:df:f4:c2:0f:86:08:6d:
e3:f2:af:17:67:6a:3e:52:de:7a:0d:0d:95:ec:25:
c9:1b:97:74:25:7a:4d:73:19:d6:2b:20:85:35:88:
ef:70:db:3f:a3:66:89:54:64:e5:a1:d8:db:9c:1c:
da:40:68:eb:30:cc:53:75:22:99:bd:47:8d:65:2d:
84:19:76:c5:cb:b1:64:63:ee:50:51:cd:19:29:56:
0d:9f:c2:87:ba:28:ff:7b:c8:34:93:a5:a6:07:04:
8f:92:bf:a1:9d:6e:b6:16:89:bc:61:03:fb:34:22:
8a:17:9a:99:9b:c6:1a:d3:03:c1:1d:d9:aa:db:35:
2c:29:9b:56:95:bc:37:a3:cb:ec:10:af:7b:5b:ee:
6f:53:c2:4e:5f:e6:78:5a:1f:1e:a6:66:9f:8f:17:
c2:af:21:14:d1:59:cd:9d:89:16:6a:67:34:fb:e3:
f9:e0:5e:74:a2:71:34:07:26:be:a0:16:bb:4d:b6:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:29:7F:EC:C2:A8:A4:D0:50:BE:69:C4:AA:09:C4:FC:FC:D3:C3:3A
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fb:51:23:71:7a:9d:8f:1b:69:9b:fb:78:c9:9c:b0:fe:07:
ff:fc:e3:19:c9:b2:7e:a7:44:fd:fe:a1:41:61:a0:9e:be:6b:
a3:4c:70:51:5a:38:66:55:32:5e:0a:1d:28:c2:dd:7c:57:cf:
4a:45:4e:ba:2f:c5:c5:0d:66:95:e7:7c:fc:27:c4:c1:a2:92:
47:bb:1d:86:bb:1b:b4:85:65:f5:a2:ea:a1:84:bc:7f:9b:61:
c1:79:0b:96:93:10:7c:3a:71:41:09:00:06:ec:3b:08:f3:fb:
fd:a1:69:9b:45:f0:71:57:e1:2b:2c:2c:91:1d:32:37:4f:2f:
7b:8c:dd:c7:6f:39:96:c7:db:30:6d:a9:49:84:42:06:bc:3e:
b1:ac:a6:03:dd:c8:2b:49:53:3d:27:c8:72:fd:00:9f:e5:ec:
58:d2:fd:45:2f:10:2c:c1:8c:10:85:7d:ed:ae:fc:3c:47:1e:
a4:03:86:41:a5:76:27:31:ec:49:10:ad:2d:54:d0:e0:89:9a:
09:e4:a4:59:1d:d6:94:76:8b:5d:f3:99:77:53:a5:32:29:b0:
9e:20:ab:8c:f4:48:c1:19:95:88:4d:68:0e:49:9b:b4:31:c8:
ca:e9:a0:0d:0e:52:e9:c4:f8:1f:e3:ba:94:e1:e9:a2:b7:e8:
d3:70:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:38 2025 by rpki-client