Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File: HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier: uxKOFuEOnBMIX28cKH1T+dONSzyeDXZcfDd3rFd5jBA=
Subject key identifier: 5D:2D:77:0D:42:05:0A:D8:AA:B7:D8:33:CD:62:AF:4C:07:88:8B:58
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial: 0197BEFEA4F52CBD6FE26E0C7983614D2508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number: 15BF
Signing time: Mon 30 Jun 2025 04:00:48 +0000
Manifest this update: Mon 30 Jun 2025 04:00:48 +0000
Manifest next update: Tue 01 Jul 2025 04:00:48 +0000
Files and hashes: 1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: 1VSizOUjszlaW5u7di2rMdhTdEEC1uGhiSsD6Go67fk=)
2: HNpMhKMf-UOKB_2xrTd5Ah5Jh4E.roa (hash: wTidaPS7G17Hoeusbm7EV9pgsdks7oYQI4PUUl46YEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:fe:a4:f5:2c:bd:6f:e2:6e:0c:79:83:61:4d:25:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Validity
Not Before: Jun 30 04:00:48 2025 GMT
Not After : Jul 1 04:00:48 2025 GMT
Subject: CN=5d2d770d42050ad8aab7d833cd62af4c07888b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:cc:79:87:8e:56:61:4d:ed:ac:fe:6c:29:
d5:b5:1a:d8:ec:fe:ab:ca:e1:81:ed:87:9f:93:c6:
76:68:c0:9e:a8:f8:d1:f2:d3:32:c5:bf:57:bd:3b:
6e:d2:df:8e:45:56:69:d3:86:e1:4e:51:52:66:84:
73:bc:3e:39:a2:b6:a9:69:c8:c5:ef:99:3f:a5:f3:
44:54:0e:78:90:6f:c0:26:26:0b:08:f9:2a:0c:98:
fb:4b:95:cd:a2:ef:28:35:74:e8:d8:f3:cb:4e:87:
98:67:b8:8a:da:90:90:73:e7:4c:70:f7:26:95:5f:
36:cd:e8:4e:66:e6:4c:26:0c:9d:3a:39:b2:a2:63:
f2:82:ff:6c:7f:9c:9d:96:3e:44:0c:3d:a2:70:b2:
e3:1b:7d:eb:d6:38:88:c9:28:83:ba:4a:11:af:3b:
d1:11:50:d5:4f:dc:d5:64:6d:af:53:dc:84:82:cd:
b2:a2:7e:ee:c6:8f:19:98:36:89:31:e6:4c:80:db:
24:86:58:6b:1f:39:cc:dc:1c:6c:06:78:eb:24:4d:
55:af:d4:ab:f2:be:fe:0d:e0:20:dd:dd:60:b0:2c:
2e:00:76:96:28:c0:c5:48:c0:78:0d:f0:6f:44:68:
41:01:e7:52:33:39:8e:f5:93:e1:41:13:85:15:8b:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:77:0D:42:05:0A:D8:AA:B7:D8:33:CD:62:AF:4C:07:88:8B:58
X509v3 Authority Key Identifier:
keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f3:e2:bd:cb:e2:c5:60:d0:6b:e1:f9:e7:75:16:53:60:26:
77:9b:b4:23:29:fe:6b:7c:ab:56:b6:77:52:58:91:00:a4:69:
7b:33:9a:e1:32:19:08:61:e5:02:f8:a2:2f:3e:3f:0f:34:df:
7a:3e:62:69:3c:47:ae:4c:4d:cf:96:04:64:c8:17:96:a8:58:
84:e1:5b:e7:3b:fa:98:ac:22:1b:07:31:21:b8:10:06:f1:cd:
bc:d5:5e:c1:ce:be:1a:e7:62:de:bb:9d:6a:96:66:87:b2:de:
b1:0d:22:89:53:4f:f8:ff:7e:78:44:bc:36:73:e8:08:bf:81:
a6:65:b9:4c:c1:04:ac:84:e3:c0:7b:81:36:e4:67:0d:33:4b:
7c:dd:97:0a:17:c9:12:6c:c8:dc:00:4f:65:81:69:a3:8e:14:
2c:6e:f0:58:30:a0:12:13:60:5d:a7:39:3e:dc:46:ec:56:84:
a0:33:b2:8e:50:73:5e:0e:88:3f:a5:37:e8:bb:7e:bc:cb:91:
36:e0:85:e6:92:d1:34:19:3e:53:8b:48:4b:c1:1e:91:e2:ec:
44:04:5f:05:6f:5c:23:f5:84:7b:d1:bc:b4:8b:a2:64:1e:64:
8f:8d:41:dc:04:f9:e8:d5:0c:b3:c2:87:6c:39:39:7a:7b:7b:
33:3b:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:48:22 2025 by rpki-client