Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
File: HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft (raw, json)
Hash identifier: ytPBRcmec00S3sJcRWe9E4ekf3YetuvosOkXV6b8Dds=
Subject key identifier: 3E:71:4B:D4:0C:0B:7E:FD:1C:8D:7E:E4:8C:22:4F:D5:A1:F7:76:BE
Authority key identifier: 1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
Certificate issuer: /CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Certificate serial: 0197B745A937C66A4EE10EFC5455A0A24D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
Manifest number: 06CF
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa (hash: N/U8cjrJKkb1U0RlpmtZn+cKz90pd4hkwgPvU1swCC0=)
2: HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl (hash: 4ZXYKyngOpxy3wSp3DemG0EB/ptfTCvewAWYLFmtzHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a9:37:c6:6a:4e:e1:0e:fc:54:55:a0:a2:4d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=3e714bd40c0b7efd1c8d7ee48c224fd5a1f776be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:ec:66:29:4c:63:72:56:a6:0c:6a:d5:1a:
6e:ab:ec:3b:ae:f5:e1:f0:4a:3b:d1:eb:e4:94:72:
84:43:db:27:ec:c7:52:08:27:fe:92:80:22:69:33:
b8:c2:5e:f8:8f:32:f6:a9:63:b4:4b:3e:0d:ab:e8:
16:16:11:75:6f:23:13:06:5d:2d:f0:bb:31:b4:6d:
50:e6:7d:2d:a1:96:9b:0c:1a:a8:09:a7:48:fa:33:
7b:db:1a:e5:0d:72:0a:51:94:3a:63:cd:2e:cd:ef:
b9:24:d4:3f:db:86:10:a4:47:4f:0b:31:7b:43:ff:
0a:c2:b0:e9:b8:53:f4:be:76:ad:ad:12:25:4b:48:
04:ab:7e:d3:37:7a:aa:4d:c9:ed:2f:ae:c6:d0:4e:
6e:5b:29:a1:a3:f0:e9:6b:49:4b:a4:1e:4f:30:c9:
3e:93:ee:ed:5d:6e:91:5f:e5:26:2d:e3:d5:ad:4f:
e5:22:a8:d3:a4:b4:63:1d:4c:6c:b7:b0:79:0e:9b:
d8:43:c3:72:f2:fc:2a:32:6e:4d:b4:54:59:06:9c:
34:e7:bf:44:7f:d3:0c:7a:79:0d:3b:25:11:a2:3f:
7d:ec:07:87:1c:d8:58:56:e6:e4:00:c5:28:a1:ac:
a3:28:a8:93:60:0c:46:13:2d:ca:d2:49:ac:82:6c:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:71:4B:D4:0C:0B:7E:FD:1C:8D:7E:E4:8C:22:4F:D5:A1:F7:76:BE
X509v3 Authority Key Identifier:
keyid:1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:11:fb:5a:f1:44:0e:7c:7e:52:6e:a0:8f:d1:41:5e:e6:8a:
fc:33:64:35:59:c9:d8:be:09:a5:53:f8:35:5b:99:00:29:80:
bc:ba:ee:27:e1:4e:dd:f3:f8:36:f5:c6:26:40:27:d4:96:98:
5f:b8:e9:7a:84:e7:67:91:11:4f:cf:d5:a1:03:cb:58:4a:b4:
3e:d9:57:0e:b0:9a:1a:6b:87:6d:5b:b3:3d:d0:e9:33:62:dd:
44:67:7a:b1:c8:a3:95:fe:dd:30:fb:64:78:02:e1:09:f4:77:
6d:fb:b1:bc:79:ef:64:10:4d:fc:4b:39:3f:bf:72:ac:0e:2f:
79:df:3c:87:f1:62:62:e2:da:36:78:4f:58:77:73:03:61:92:
63:96:b1:69:fc:83:00:96:f9:e8:f6:a2:d3:63:d5:8d:95:f2:
be:7d:27:b0:30:0d:4d:29:b2:20:8a:68:65:5b:db:3d:db:cd:
ec:6d:88:95:f2:94:a7:e6:9e:82:16:a9:61:c7:93:e6:c8:2b:
af:28:27:cf:d2:9a:3f:db:35:53:37:14:b8:30:59:e1:e4:43:
0a:bb:3e:d9:00:28:39:ee:8f:50:42:a1:ba:a5:0f:56:38:d7:
d1:91:e2:d0:c4:4e:8f:3c:b4:69:99:22:7f:34:ff:53:86:8c:
1f:6c:63:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:57 2025 by rpki-client