Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json)
Hash identifier: pYHnAwQ5kUEKcADyx/kZJGYKG2mAs4ZtEGN1lTCCXXM=
Subject key identifier: B3:5B:AA:83:38:C0:AD:70:56:D9:40:99:A6:16:F4:B0:0F:E7:E0:04
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 0197B6D779370E5448931312F95953136B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 14:01:03 +0000
Manifest this update: Sat 28 Jun 2025 14:01:03 +0000
Manifest next update: Sun 29 Jun 2025 14:01:03 +0000
Files and hashes: 1: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: qgh3X6UkIwe19Uc/hHqTip6VMosGv46lykBZDGA+RXk=)
2: nfcB4W3-frcdsttLFxfqKvUAYPA.roa (hash: LSLZu1kedUT6p6v50vQ31LG0ikk6bjLybjbis0FT+ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:79:37:0e:54:48:93:13:12:f9:59:53:13:6b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Jun 28 14:01:03 2025 GMT
Not After : Jun 29 14:01:03 2025 GMT
Subject: CN=b35baa8338c0ad7056d94099a616f4b00fe7e004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:68:0c:63:5f:85:aa:f0:e8:97:48:05:14:
1c:3f:79:ec:6f:24:13:dc:1f:17:29:6f:4b:96:75:
20:88:d3:92:8c:42:cc:12:96:f2:1c:8b:94:76:fd:
86:eb:c9:36:ae:cb:43:1d:61:14:9b:94:3a:aa:b5:
21:fe:87:b2:16:1e:b0:47:6f:b0:9f:da:54:a8:da:
b8:26:a5:f7:f7:1e:b2:90:32:9c:74:a9:93:29:df:
33:85:99:d4:3b:2c:1d:15:86:02:9f:03:04:44:ba:
e5:07:cc:6b:3c:38:eb:f3:93:79:5c:6f:79:ba:71:
65:29:b0:b3:7e:66:9d:2f:0e:13:07:94:e8:a4:4a:
96:d7:dc:ca:e5:e3:aa:bc:11:1d:a9:31:b2:b6:f9:
72:1e:58:f0:e6:28:3d:0b:a8:76:9f:1b:2f:34:45:
74:cd:93:41:99:b2:3d:75:09:ad:65:26:ce:11:11:
a7:35:87:6c:6d:04:9b:e4:43:c3:a4:64:a5:a0:63:
48:38:22:30:73:a9:30:e2:c8:c3:3b:ff:f8:2a:b3:
29:d4:d6:9b:d9:b6:88:fe:9b:a1:59:01:88:9e:40:
b4:1e:b1:21:80:fd:6c:26:3d:20:d1:c7:d2:8c:dc:
5b:f9:a1:28:97:f3:80:4b:63:5d:93:16:b6:de:9d:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5B:AA:83:38:C0:AD:70:56:D9:40:99:A6:16:F4:B0:0F:E7:E0:04
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a9:04:c9:ab:9a:1d:d1:5e:6c:e5:3e:60:fb:b9:6e:90:14:
da:fb:6e:c7:ad:24:a6:4c:8c:ad:cb:85:fd:63:81:d2:ba:92:
e4:07:cd:17:e8:93:43:5a:7a:f2:ad:8d:e7:06:83:fc:04:ec:
e1:3b:ec:4f:26:00:71:7a:5c:1e:27:6b:39:4d:f9:eb:e9:46:
ca:19:cc:1c:49:59:25:f3:76:32:97:db:ac:9e:2d:cd:04:01:
18:b1:d1:94:c5:1c:7d:74:d7:d9:82:e2:15:02:bc:53:5f:8d:
67:57:b6:eb:f7:cf:3f:2f:a7:bb:ad:73:a4:96:28:af:70:99:
0c:a7:1b:42:4a:03:2b:37:e5:f6:1d:07:76:c1:20:c5:82:30:
be:05:b1:d3:9c:5b:2a:2d:34:50:3f:44:cc:ca:95:12:e3:bc:
76:58:ce:74:82:fa:84:f7:c1:40:b8:26:5f:80:24:37:b9:ec:
d4:75:36:84:07:f0:32:55:fd:ed:e1:4b:e1:1f:da:3d:79:98:
13:8f:c6:20:ce:6d:ca:a3:60:0d:fe:0a:1a:0d:df:60:f9:55:
2d:b4:13:81:86:21:37:83:ab:d4:d7:f9:7a:66:6c:39:9b:7c:
ad:59:27:88:4a:ba:95:7d:47:a6:89:78:b7:45:80:b5:66:a1:
5d:bf:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:56 2025 by rpki-client