Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
File: hlEiwOVi5AeXaCPZThnip5T4y2I.mft (raw, json)
Hash identifier: WfC2b4pSLaBUICl1ui7zoQkQPzQaJYiAPliJY+bdxCM=
Subject key identifier: FA:44:81:35:5D:01:0C:07:EF:3D:C8:A1:A1:CF:BD:A8:7D:22:F6:58
Authority key identifier: 86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
Certificate issuer: /CN=865122c0e562e407976823d94e19e2a794f8cb62
Certificate serial: 0197B82114AA443F7EE3C1F3A0D3237F6675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 20:01:05 +0000
Manifest this update: Sat 28 Jun 2025 20:01:05 +0000
Manifest next update: Sun 29 Jun 2025 20:01:05 +0000
Files and hashes: 1: hlEiwOVi5AeXaCPZThnip5T4y2I.crl (hash: Y5Sf0nHJB+SE5urh/ROV6e0DNoWfFcSfCoAV2TgtekI=)
2: w-uN_1VCR8_SOj5bY-QHNqktijQ.roa (hash: 0MkMfXtYvuQQQ2rI12rE9KqS+DI9qKcacxegwXpKbvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:14:aa:44:3f:7e:e3:c1:f3:a0:d3:23:7f:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865122c0e562e407976823d94e19e2a794f8cb62
Validity
Not Before: Jun 28 20:01:05 2025 GMT
Not After : Jun 29 20:01:05 2025 GMT
Subject: CN=fa4481355d010c07ef3dc8a1a1cfbda87d22f658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c5:84:41:e1:08:0c:bf:d0:46:58:41:82:92:
e1:1e:e9:12:ed:fa:8c:0d:fc:ce:70:7d:cd:9d:f3:
36:4d:07:19:4b:aa:65:9a:b2:e6:52:e7:57:af:64:
5d:64:23:01:d9:d2:84:53:b0:1a:95:98:58:50:e8:
0b:7b:20:5f:bc:77:67:cb:a3:e7:ef:ee:e8:15:cd:
ef:fe:18:e6:44:1d:93:29:4c:30:da:ca:7c:df:6a:
d8:56:5d:f6:9b:83:03:c9:ee:87:8a:a8:a3:f9:de:
fa:7e:2a:da:7c:ad:37:66:e8:14:0e:6b:4d:27:46:
3a:6f:09:03:68:e2:ee:40:26:2c:60:b0:59:16:32:
2c:bf:15:85:a1:51:c1:18:d4:50:d6:08:b7:54:3d:
85:50:2b:6d:78:95:1d:95:09:f5:62:27:e3:ff:94:
4a:8c:a2:c2:f7:2d:98:88:4e:d9:72:fe:6b:a9:43:
d7:96:1a:08:2f:de:ff:5b:5f:b9:eb:61:34:f2:fb:
73:09:cf:83:b7:66:50:1c:e8:da:99:02:fd:05:f6:
44:77:f3:41:05:65:49:a1:f1:0e:01:d7:70:c8:8a:
ff:90:14:e4:22:b3:44:f8:a4:60:83:29:75:6d:f0:
03:e2:5e:a0:78:44:a2:c2:ef:a0:b9:c4:3e:d7:b5:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:44:81:35:5D:01:0C:07:EF:3D:C8:A1:A1:CF:BD:A8:7D:22:F6:58
X509v3 Authority Key Identifier:
keyid:86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0b:1d:2d:eb:05:96:56:fd:37:d1:6c:e8:d7:4c:b1:77:d7:
a6:87:91:0f:f2:4b:20:0a:e2:35:91:62:59:e0:e7:ae:45:65:
95:ba:f0:56:f3:6b:4c:49:0d:80:8e:df:55:61:9f:f5:e2:6c:
12:9c:53:61:a7:7b:7a:b4:f3:fd:c7:a3:ca:14:d2:97:c0:2d:
3a:8d:4e:42:36:c0:ca:e5:1d:be:fa:15:da:05:08:63:ab:c9:
ca:d0:db:ca:1c:e8:18:05:d3:df:94:86:93:89:f6:75:f7:c0:
87:13:e7:41:ca:0e:09:67:4c:9b:a6:c2:aa:27:c4:7a:9d:1f:
58:cb:92:d5:5f:13:e1:cd:9a:a9:04:d5:84:1b:d8:b5:bc:51:
7a:4c:00:1b:fa:45:b6:a1:9a:c1:57:f1:10:dc:d2:92:08:2a:
bd:c2:45:ef:46:66:7d:b4:25:ed:b1:f0:f7:f4:e0:0f:71:e8:
36:50:80:90:b1:32:f9:33:d6:0f:0d:47:b5:d5:5f:e1:ea:78:
33:19:18:e9:dc:7e:39:8d:e6:9c:63:4a:47:24:f4:32:2c:1d:
07:bb:cf:93:e4:b9:78:c3:1e:47:7e:81:47:9c:e8:7b:53:8a:
9f:77:16:9f:26:be:44:77:31:8a:ac:f4:8b:3e:2e:0f:a1:96:
82:97:a2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:22 2025 by rpki-client