Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: 8WPUjUDNgrs6DLgEpIueTjXjlTfqoibXPkV2llJsc7E=
Subject key identifier: 46:F9:D7:62:9B:35:9E:A2:D9:FD:36:AA:DE:3D:D5:9D:98:6A:6B:76
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 0197B6A0C55E4985FF93E33343681F777924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 0693
Signing time: Sat 28 Jun 2025 13:01:18 +0000
Manifest this update: Sat 28 Jun 2025 13:01:18 +0000
Manifest next update: Sun 29 Jun 2025 13:01:18 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: qm3dsIUSsiBu76IgY8a/NewHSTgVXXVi+64NStc5tUM=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c5:5e:49:85:ff:93:e3:33:43:68:1f:77:79:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Jun 28 13:01:18 2025 GMT
Not After : Jun 29 13:01:18 2025 GMT
Subject: CN=46f9d7629b359ea2d9fd36aade3dd59d986a6b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:38:a4:7a:ba:3f:14:76:72:1d:a8:20:34:
a2:3d:a4:7e:dc:ee:da:e4:09:24:f6:a2:a6:f5:d3:
96:47:26:65:8a:d1:1e:82:ea:de:74:12:d5:36:89:
a6:9e:eb:95:ea:e9:74:3a:81:2c:a1:1e:d7:12:d1:
07:fe:66:3e:c7:7b:81:f3:22:06:c0:71:54:a0:83:
6c:3e:0c:a6:d8:0b:1c:32:e9:3c:fc:e8:1e:60:15:
85:96:f9:ff:42:a7:22:56:47:77:38:ab:51:ba:ca:
bb:53:96:87:18:cd:13:00:7a:c0:d9:a2:b5:d0:5e:
0b:ce:b2:4d:44:d7:0b:44:e8:74:31:b8:4b:b8:86:
f8:eb:c5:8c:60:86:94:60:1e:1d:18:fd:01:43:22:
52:81:96:75:a9:53:27:f0:89:e0:7d:ad:e7:6c:23:
80:e6:37:d1:db:7a:e0:5b:56:a0:c7:9f:be:0d:bf:
e7:89:88:38:ba:f2:80:52:4a:96:66:14:77:b7:01:
bd:2f:66:88:d4:e2:f3:c9:2d:bc:f4:31:95:cd:96:
53:91:a1:70:db:52:03:9b:8c:08:c0:72:a2:30:cb:
2a:ce:bb:07:1d:fc:42:03:e3:72:10:aa:65:ff:34:
7a:94:36:13:78:12:80:3f:0d:64:6c:ab:91:e2:1f:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F9:D7:62:9B:35:9E:A2:D9:FD:36:AA:DE:3D:D5:9D:98:6A:6B:76
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:48:76:68:6e:dc:c5:51:e5:ae:e9:99:c1:c5:f1:46:d0:c0:
bd:b3:00:af:44:6c:51:10:78:eb:48:ee:6c:0b:d6:c7:de:b7:
87:7f:52:d1:1d:c9:7a:92:fe:d8:70:10:9f:2a:7f:9c:71:42:
69:5b:1a:0e:c5:85:e7:ca:55:99:ed:4c:79:2a:b2:9a:dc:d5:
20:77:1a:85:eb:f6:c4:84:55:a0:68:9d:3a:92:5b:aa:02:d9:
60:5e:c4:00:fa:f5:f4:10:0a:ab:bb:62:cf:8d:b9:51:a8:00:
b2:62:6b:2d:8d:e9:ad:43:64:9e:22:4f:5e:02:18:14:e6:a8:
d3:7b:d6:1f:f4:a2:d9:6a:4d:13:a5:2b:18:42:48:36:62:c8:
dc:a3:7c:d9:fa:a5:7a:95:d6:22:df:db:2d:8f:fc:c8:99:32:
d5:d3:27:09:b0:7f:e1:df:88:89:e7:d4:e1:a8:97:bc:c5:ab:
f5:30:86:ae:3b:d1:3e:77:16:89:fe:80:dc:cf:94:0e:fb:d4:
66:ff:2f:61:9e:fe:11:eb:d6:5d:98:ac:23:9e:e5:09:d0:ee:
ce:1c:ec:05:91:b0:39:b0:4d:13:96:c2:b5:45:cf:dd:5a:5a:
46:58:3e:5e:a3:36:dd:ff:20:c0:01:a8:0b:4c:38:fd:f1:0c:
bd:6b:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:13 2025 by rpki-client