Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: I9OqwK2i6Cx0e7d09a7M8+xDY+HFOAxqnx5aO0lTVTg=
Subject key identifier: E2:C3:E2:9F:09:84:F2:6F:FC:B0:23:87:E7:2A:31:48:3A:45:30:74
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 0197B9A18DD6AB1D504C628E9FC5A98678F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 1420
Signing time: Sun 29 Jun 2025 03:01:01 +0000
Manifest this update: Sun 29 Jun 2025 03:01:01 +0000
Manifest next update: Mon 30 Jun 2025 03:01:01 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: WRP9T7H0SMyhQUdD8RemyC20asnuDnEHHzio8qgVt1w=)
2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=)
3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:8d:d6:ab:1d:50:4c:62:8e:9f:c5:a9:86:78:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Jun 29 03:01:01 2025 GMT
Not After : Jun 30 03:01:01 2025 GMT
Subject: CN=e2c3e29f0984f26ffcb02387e72a31483a453074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:53:b1:7a:ba:3c:39:b2:1b:9f:c0:0b:50:
c3:12:dc:d1:35:31:38:e0:8b:c8:df:3b:5e:1b:43:
c2:a4:18:05:77:54:8e:4d:ce:ff:5e:b2:96:a7:1e:
88:8a:8e:0e:2b:8c:dd:f4:ab:5c:91:9d:66:30:77:
11:c9:3d:61:cb:bd:94:62:57:49:06:0f:5c:8a:be:
68:51:0a:83:7c:f6:9a:94:fa:e7:19:c0:5e:34:74:
f6:7f:30:19:e5:e2:fd:77:e7:3a:54:f7:82:4f:b7:
ab:2a:34:3d:94:d8:6a:0f:7f:a1:4b:1e:4e:9e:2e:
3e:5e:3f:ee:91:5b:c6:39:d7:3c:c6:5f:ec:12:e2:
c9:a7:17:c8:54:d6:c8:15:c5:b9:2c:e9:ca:46:d3:
f5:74:03:c9:47:36:82:ad:2a:00:c9:a7:5f:75:bf:
e8:ee:84:4f:a5:8b:fe:74:7e:94:26:5b:b7:af:29:
fa:d4:21:ab:dc:0e:92:0b:c4:88:27:b0:78:08:ac:
89:a7:5c:e4:f3:1d:34:bb:1d:32:54:fd:dc:3f:9e:
5d:af:86:41:0f:23:0b:fe:f5:8c:33:d4:76:bf:c9:
9e:b2:dd:a2:30:71:e9:fc:4b:ba:55:fa:81:5e:a5:
ca:af:65:ef:e1:53:52:9f:c6:36:13:49:27:02:84:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C3:E2:9F:09:84:F2:6F:FC:B0:23:87:E7:2A:31:48:3A:45:30:74
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f6:d1:79:11:b6:36:0a:3c:80:84:a4:4e:d7:1f:44:5d:17:
b8:8f:66:c9:1f:c6:ab:28:f2:2f:a2:c5:bd:5d:1d:8b:5a:67:
c5:17:82:7c:a5:fb:be:3a:06:92:73:da:0c:02:89:46:8b:d6:
e7:d0:be:ad:9d:46:d5:ca:2f:da:ba:56:da:d8:bc:b7:b1:42:
07:bd:14:86:bb:14:6b:fd:ff:dc:d4:70:5e:cb:f1:91:82:4a:
8e:b3:89:7c:a7:4d:e8:06:60:b3:ce:e7:53:1e:b4:6a:7d:8c:
d6:8d:0d:74:6e:02:70:e2:8c:33:c0:cf:cd:9d:4b:13:a3:09:
99:07:28:39:cc:a2:0e:58:79:5d:34:77:02:5f:56:b6:bb:29:
77:ec:f4:37:c8:0d:c9:4b:c8:3e:4b:7a:f2:5a:c0:8b:61:94:
12:37:7d:39:a1:4d:57:dc:a8:94:33:06:6d:a6:49:75:d4:ab:
f5:9e:cd:2d:7f:f6:fd:a6:dd:33:40:06:d3:c8:12:13:72:c2:
42:3e:9e:84:17:d2:f5:63:c7:7d:a3:f4:d1:a3:c4:b5:33:0e:
48:75:c0:c1:a7:54:e8:48:ed:a1:41:2b:64:d9:76:0f:ea:df:
fd:f7:c5:b4:22:c7:b6:32:b9:82:50:1f:3b:91:c7:c7:c4:63:
8e:3c:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:07 2025 by rpki-client