Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: KEA3RIwHyvUmGbg500GlMtlnakYiHFkzexBBT2g3eT4=
Subject key identifier: 2F:DA:5F:91:8B:A4:81:02:05:24:6F:F2:62:6D:CC:F3:1A:59:B8:54
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 0197B6D73C3A1A33C7C9189909B3689A2A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: m+5uYzRJR6myaV4ApFJkoLkbHXr+LcE2nvrH8s86tw8=)
2: S8E-qbm1BXEqIdetmmA1nZNgj7U.roa (hash: 3uwA4cyu+agvPaXd967UOebPOsNVk53AsWpnmfz8XsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3c:3a:1a:33:c7:c9:18:99:09:b3:68:9a:2a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=2fda5f918ba4810205246ff2626dccf31a59b854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:db:8b:d1:ab:fd:bb:3b:63:e2:09:cb:74:
fd:08:9c:e3:66:a1:f3:78:ad:66:0c:da:77:79:96:
80:76:00:60:69:1f:78:d6:31:03:02:65:9a:4f:0e:
54:61:22:a1:07:30:6d:67:1a:52:68:8a:44:22:33:
0a:f8:09:b9:f7:ef:9e:23:62:95:3d:d5:7d:0e:1e:
87:11:49:b6:5e:44:c9:f3:8a:9f:d4:fb:00:ac:60:
21:26:e6:e9:83:c3:86:72:36:36:b0:15:68:4d:04:
80:93:01:b9:3e:a2:d9:df:49:5a:06:b2:68:35:5a:
01:60:1c:65:1c:09:90:b1:81:d4:ca:81:bd:1e:c8:
74:8e:74:1f:f7:db:29:76:b8:4e:f2:65:ec:57:6d:
3d:68:fe:90:37:fe:44:27:39:e7:16:8d:f4:76:6d:
96:e5:8b:d8:1c:99:7c:5c:1d:dd:c1:99:da:3d:5c:
66:0a:91:96:ee:6f:3d:64:b7:fe:ef:b8:b2:36:c7:
fa:f8:cd:b2:0f:71:aa:c6:e9:82:61:8f:86:2b:b5:
59:93:0b:88:fd:06:37:8c:4f:c7:53:6f:0e:fd:00:
58:62:1e:49:36:68:91:bb:8a:91:fb:43:92:43:8a:
6b:0d:13:d0:14:26:52:01:31:b2:ad:67:20:58:9d:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:5F:91:8B:A4:81:02:05:24:6F:F2:62:6D:CC:F3:1A:59:B8:54
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6c:0a:c2:d1:0c:75:1e:7a:ff:e1:43:f9:0f:0a:b7:18:b3:
4d:10:8d:37:cc:9e:c5:0b:01:64:e0:0c:c6:fd:ad:49:9f:46:
af:e1:46:20:d1:d0:ea:1a:6e:7d:8f:a0:ac:50:21:df:73:e5:
74:63:37:dc:a0:9a:d4:65:bb:77:07:6b:73:1e:cd:b7:79:b5:
2b:61:e7:f9:dd:df:f9:eb:a5:cf:c4:45:21:86:94:21:d3:94:
8e:76:c4:70:b5:53:30:51:5e:7a:87:15:c0:b4:bb:81:0a:6e:
f2:7b:ea:bc:8b:e4:c0:e1:c7:ef:af:df:bd:14:96:4a:89:a6:
5c:35:89:89:c3:04:80:66:94:82:15:3e:a9:b5:0c:49:65:7b:
df:3c:f8:18:a0:f2:60:d8:de:85:b9:4a:ff:7d:26:a5:3e:9f:
89:6e:a5:ee:9d:8b:36:7c:00:5a:61:c9:51:27:b0:64:c6:e9:
76:c5:56:7c:34:ce:1e:cc:3f:a7:5f:a2:38:0b:be:0a:5e:89:
d5:ba:62:1e:28:6a:68:d0:93:81:cc:8b:f0:ca:5c:6b:71:cb:
74:a0:22:32:c6:ef:64:49:db:a2:84:8f:50:61:0c:87:ef:a7:
20:58:5e:7f:36:5d:4f:f7:da:b4:fd:9d:c5:41:b1:23:06:3f:
7b:a7:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:57 2025 by rpki-client