Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: mJm9AXlHg/OWFcRTwxt+OTLJYrDmibh37gg4G8XUUp4=
Subject key identifier: 88:E1:19:A0:24:7F:1F:CE:C2:D5:F3:CB:50:E6:10:03:B5:6F:D4:AE
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 0197B77C1040EFF4D01E04C83CA8C55CC3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 1204
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=)
2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: 2LZ8MIzAUGSjrndX2lrp2YVhHPNmblKRxAPA2hBcwWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:10:40:ef:f4:d0:1e:04:c8:3c:a8:c5:5c:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=88e119a0247f1fcec2d5f3cb50e61003b56fd4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:ea:45:4a:41:61:63:49:ae:9b:ca:85:4b:
c6:fa:91:33:3a:f9:d4:3f:83:5a:1d:54:1f:19:f2:
5b:48:be:cb:18:b2:78:1e:e5:a3:53:af:46:7d:cb:
b0:43:d8:03:51:f8:a4:89:e1:bb:fb:f3:8b:c8:b8:
dc:80:9f:d3:59:de:e8:4a:a9:69:43:69:63:01:15:
99:46:90:02:17:a6:c9:4b:be:f7:dd:a9:ca:33:b2:
10:f9:5c:c3:6f:df:d7:73:d1:81:eb:d6:60:ce:f7:
4c:2c:a1:1d:ba:91:40:b8:fd:10:2c:a6:d7:38:f3:
1e:a3:cb:3d:87:97:11:77:23:ec:9d:9b:33:51:4a:
bd:5e:22:7c:97:18:11:2b:5a:79:7c:a3:67:bc:d1:
0b:db:49:17:cd:08:ec:88:aa:59:44:c7:ea:49:97:
4f:c6:87:cb:8e:a6:d5:2c:d8:56:a2:68:06:f3:9a:
2c:c2:d7:9f:cc:de:e9:bd:34:77:07:c4:50:a8:fa:
ff:6d:44:fb:58:e0:34:2a:58:de:8d:42:67:5f:fd:
4d:a9:18:06:b1:09:ee:74:99:2c:61:a3:fc:ba:9a:
a2:96:19:f3:dc:9c:ec:ee:b0:68:09:ee:f8:7f:82:
b3:92:81:63:ff:96:c2:4a:73:ea:18:ef:4f:53:32:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:19:A0:24:7F:1F:CE:C2:D5:F3:CB:50:E6:10:03:B5:6F:D4:AE
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bd:21:b4:58:c0:2d:a2:fa:b9:7d:cc:97:06:a1:c4:36:fe:
b9:5f:a4:42:d9:13:bd:21:e1:6e:ac:13:16:02:75:f7:07:4a:
96:5c:fb:9e:4f:b2:85:fd:8c:b3:28:db:6d:8e:af:49:56:0a:
05:06:ac:23:b4:82:03:f8:5c:e9:0d:20:42:d7:89:b1:5c:ca:
8d:a1:0d:46:a3:39:2a:92:d8:67:94:51:46:0e:77:5a:38:d3:
aa:87:40:56:11:24:48:c9:8e:cb:63:f0:b7:39:f7:bd:17:9a:
93:ba:f0:77:95:72:7b:d4:13:bb:8c:db:58:a6:a5:3e:0a:83:
1f:83:9b:bd:66:82:5f:00:ac:9a:32:10:fc:70:90:ed:35:0b:
56:83:bc:74:ea:c0:99:df:b9:69:08:88:97:df:7d:66:06:28:
9d:56:b1:42:70:2b:f1:bb:de:7a:4e:84:38:7e:ce:ee:db:6a:
67:b0:6e:1a:09:ca:49:ab:46:85:81:09:c8:33:2c:da:78:6f:
b0:16:5e:50:04:57:f3:c9:54:cd:a1:a2:e8:fb:78:9d:96:61:
6d:19:b4:79:bb:45:0d:bf:24:18:32:9a:cf:31:40:94:a8:44:
f6:e3:9d:fc:5b:ae:af:2b:49:9a:0e:55:64:ae:d6:0a:73:cc:
02:de:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:55 2025 by rpki-client