Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: h2AQgo6Sx15Rf2F7ncb4Nrken0oR6xT9eW4xQILJVIk=
Subject key identifier: E1:D0:94:0B:64:BD:0C:38:54:9F:9A:03:AF:B0:EE:C9:F6:9C:50:52
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 0197B77C45ED6AB677C78B688047C8A28F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 1565
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: JXaPgBdG5yve3/XkgL/FvGEvqLwjMuOdT07W1TaGw+4=)
2: PqAYbce5ZFtorWDJm1IoXprDpjE.roa (hash: tbDVPuUEiQGmvMdLsr4Uj3a9EoVRDD7cfOnaPg9V/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:45:ed:6a:b6:77:c7:8b:68:80:47:c8:a2:8f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=e1d0940b64bd0c38549f9a03afb0eec9f69c5052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:95:36:d8:63:c1:9c:5c:0e:36:c9:c4:c7:2d:
17:cd:92:f3:e3:5a:0b:a0:f5:93:a5:73:b6:41:ac:
59:8e:a2:c6:a6:a5:53:bc:62:43:aa:41:07:ed:c1:
5d:39:a9:66:e8:2e:2e:fa:b7:c8:10:a4:5e:ec:4e:
f2:24:20:e9:80:c4:72:aa:32:0f:b5:1a:dd:6a:8d:
a8:ed:aa:b5:e0:bf:e8:c5:62:9b:1a:aa:3c:9a:50:
c0:cd:e1:b0:1f:d5:30:6e:e3:a1:2e:13:71:60:f0:
a5:aa:2c:35:06:15:27:b2:f6:2e:4b:f7:64:b7:b7:
51:0d:52:31:09:5e:20:b1:1b:2c:a9:21:ad:1c:0c:
b3:41:38:1e:21:72:0a:3f:62:8b:66:ef:44:32:ef:
e7:89:34:97:dc:7c:b5:aa:02:67:77:fc:4f:ab:40:
ec:24:8b:85:18:bd:ba:30:9d:61:36:9d:fe:30:ec:
49:43:e0:15:87:96:be:9e:bb:06:8c:fa:a5:ee:5f:
3f:57:46:2e:77:ae:56:4a:5b:20:56:87:8f:5d:51:
42:16:f1:26:82:87:89:87:43:97:85:d9:45:d4:c0:
81:fd:87:bb:17:66:fd:88:f5:7e:5c:0f:73:4f:62:
99:46:57:a8:cb:5a:db:ec:cd:6f:2d:da:ff:a2:31:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D0:94:0B:64:BD:0C:38:54:9F:9A:03:AF:B0:EE:C9:F6:9C:50:52
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:01:c2:f4:76:a0:33:fe:86:59:54:08:51:49:82:55:24:b0:
f0:90:73:c2:90:91:17:92:64:5c:6e:3c:0f:4b:ab:10:f6:07:
b0:0d:e4:97:7e:eb:af:bd:48:93:7a:91:e2:7e:e5:48:f9:d3:
22:7c:cd:7a:c3:29:8b:7c:a5:11:56:8a:ad:60:23:92:c7:39:
04:cf:76:ac:99:85:e8:72:0d:0e:c7:f8:a5:85:17:06:f2:a6:
78:46:b1:20:78:d3:f8:98:32:48:52:ef:18:f5:ca:ef:d9:a6:
b9:13:fd:2a:de:1b:97:11:77:18:6e:2d:1c:c8:5d:89:a6:2d:
fd:ec:8b:bb:a4:31:89:6a:eb:62:f1:62:52:56:9c:ec:69:4e:
98:a0:f7:0c:57:99:75:98:0b:38:b8:5e:14:a3:8b:ca:1b:8a:
c7:00:be:dc:72:ce:b0:44:05:f6:1b:24:2c:41:82:fe:2d:d9:
49:7b:30:de:5c:fd:27:fb:f8:0e:9a:d3:75:2c:66:c8:96:26:
13:d6:d3:ec:71:be:af:2f:76:17:09:f6:7c:65:68:0a:ec:ba:
a0:8b:72:7d:5f:75:53:8c:74:78:cc:84:ac:0a:72:65:28:c9:
d8:e2:41:e7:2c:f5:9a:ee:06:14:1a:a3:8a:b4:28:a3:7e:2f:
de:0b:5f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:06 2025 by rpki-client