Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier: srdWXwzppHblfqfJZlpCFleIBzdjGwprbubp4TNUteM=
Subject key identifier: AA:0C:B3:08:4F:90:A4:DD:35:34:EF:E9:0C:D8:13:32:F5:2C:2C:3C
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial: 0197B7452B291AF8F2458BC98681C35AE8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number: 0613
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=)
2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: XDOf67jmLC2VsD53k4/z9pIbrbFsg7xtcRhalDwhRv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2b:29:1a:f8:f2:45:8b:c9:86:81:c3:5a:e8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=aa0cb3084f90a4dd3534efe90cd81332f52c2c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:3d:cf:58:91:d6:02:7b:74:bd:e1:81:d9:
2a:d2:f8:98:40:a8:44:40:28:2e:53:c7:02:4b:30:
b5:01:2c:48:db:4f:2f:58:9a:46:d9:ae:12:99:bc:
35:70:69:ea:c0:3f:8a:6a:66:2e:f3:7d:f7:7d:b3:
c3:be:6c:0c:fd:99:cd:df:b6:7c:1c:7b:58:42:28:
c5:32:69:e1:38:dd:28:a0:39:1a:e7:c5:55:c3:d3:
f3:b1:7c:53:d9:1c:53:5e:e7:ff:91:24:8f:5a:fd:
e6:95:92:7f:a6:3e:ae:73:ca:5b:7d:dc:bb:d2:96:
d8:11:d7:d2:8d:93:e8:ec:06:3c:7d:01:96:13:f6:
15:8b:96:92:e9:fc:9e:9c:99:f8:52:91:18:6b:00:
bc:55:eb:5b:be:9e:73:dd:75:93:dd:1b:fc:d0:73:
66:95:34:2f:b1:8a:bf:59:3b:22:ab:05:57:75:2a:
3e:5f:a4:96:5b:fe:1b:81:ea:d3:67:d5:b1:3b:b0:
98:cf:e2:b5:dc:0f:0d:a3:fb:22:0d:3a:7a:fb:ee:
79:fc:e3:58:ee:29:2b:66:cd:ea:f7:ef:83:85:9e:
33:75:3a:02:8d:61:89:81:6f:dc:53:88:0a:b9:12:
df:c0:fe:6f:16:8d:a4:7e:f4:7a:6b:2b:66:4a:ff:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0C:B3:08:4F:90:A4:DD:35:34:EF:E9:0C:D8:13:32:F5:2C:2C:3C
X509v3 Authority Key Identifier:
keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f5:88:46:2e:a7:91:62:1b:c2:b4:3a:ab:4b:cf:7f:f3:2c:
19:00:9c:44:a1:dd:27:03:56:76:b9:1f:be:2c:9c:02:ae:f3:
65:e8:6a:37:c5:8b:2e:88:16:11:56:20:3b:94:71:1c:9b:bc:
f8:36:69:41:ee:51:6d:4b:83:77:ef:a9:fc:d7:e2:f0:ff:60:
e5:81:69:60:00:2b:94:0e:44:fe:21:c8:4b:a1:e7:7f:b2:48:
06:06:5f:8c:59:fe:bf:bd:0d:4b:ec:f9:d5:28:9d:7f:a9:ff:
98:bb:0e:69:cf:9b:d4:de:dd:c8:b8:bc:64:f0:b2:08:40:40:
49:7d:a7:08:1a:96:12:d5:46:21:31:ca:7c:58:ab:20:e2:51:
5a:12:7b:07:c8:f6:0f:cb:15:7a:cd:ec:e0:48:6c:1d:09:17:
09:e8:f0:cd:f9:fa:f0:6b:ed:e1:f6:04:ec:d5:ca:e5:5c:ab:
04:b3:11:34:82:76:31:c2:c5:47:11:f9:0a:c7:7a:33:17:62:
a7:d2:b1:3a:73:c5:1c:0d:71:af:ee:5f:fb:62:3b:be:c0:d3:
62:c7:30:7d:6f:dd:d6:62:cd:a5:48:4a:00:25:2a:ae:d8:d5:
3d:be:c7:80:a7:7a:e9:e4:e0:39:36:4c:d3:17:29:76:ff:3f:
40:8f:70:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:29 2025 by rpki-client