
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
File: HgKySJ9HE5YtEFESslJ264HxrJA.mft (raw, json)
Hash identifier: e6oXaHeGktZTXxi6scC3OE/esFyi8F4NVtb1ae5BQWU=
Subject key identifier: 1B:B5:36:60:F0:98:BF:76:36:5F:8C:7E:FB:5C:E1:5C:F6:39:4C:33
Authority key identifier: 1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
Certificate issuer: /CN=1e02b2489f4713962d105112b25276eb81f1ac90
Certificate serial: 0197B7EA21F921BD168E1BDFE869C9B01C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:03 +0000
Manifest this update: Sat 28 Jun 2025 19:01:03 +0000
Manifest next update: Sun 29 Jun 2025 19:01:03 +0000
Files and hashes: 1: 9V85HLFbpWnoHuwfi3uBdYCY9ZM.roa (hash: sWuFEcVAMiwExmVPdpvYCkHmeYDgX5Tn0zMIqcTEx/4=)
2: HgKySJ9HE5YtEFESslJ264HxrJA.crl (hash: /tVGt+YaP/mq7Q04iswzhAqLRIVeJM1psaBBjD+fFnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:21:f9:21:bd:16:8e:1b:df:e8:69:c9:b0:1c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e02b2489f4713962d105112b25276eb81f1ac90
Validity
Not Before: Jun 28 19:01:03 2025 GMT
Not After : Jun 29 19:01:03 2025 GMT
Subject: CN=1bb53660f098bf76365f8c7efb5ce15cf6394c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:92:88:52:7a:64:48:28:fc:3f:26:0e:65:
17:c0:3a:50:b3:8c:60:8a:0a:d4:a8:34:f1:89:ba:
8d:ac:e8:a5:78:43:2c:80:4a:76:7e:91:9a:f3:2e:
f5:eb:1e:9c:84:d3:f0:40:0c:70:c3:c6:61:04:dc:
96:2a:98:6e:40:c7:6f:26:33:d3:2f:69:bc:cc:96:
3a:e8:14:db:0e:27:79:97:cd:2e:1b:93:16:4d:7b:
23:bf:99:ce:fd:22:57:70:6f:89:18:7f:64:0d:b8:
df:1a:56:71:1a:ff:a4:66:aa:90:c9:94:ad:c5:d5:
d7:9d:aa:a4:7f:29:d6:ba:f2:c2:d2:1f:44:f1:a6:
e9:c9:9c:18:7d:7f:e2:15:e4:3f:e6:d7:31:76:05:
63:16:d7:cc:5c:ae:8f:b3:42:e5:6a:d4:3d:44:5b:
c1:9f:44:f0:48:97:3d:64:ef:d3:48:70:41:1a:d2:
45:2c:e3:58:f2:b8:43:d8:04:03:3c:3d:54:4f:c6:
50:ca:ec:44:64:e4:8c:58:99:cb:6a:99:94:89:99:
3c:21:ec:ab:d2:92:8e:30:9d:a8:48:1f:4d:8e:e4:
e9:aa:6c:81:d3:ba:4e:bc:fa:7f:a6:e7:b5:14:09:
d5:83:2f:8a:05:4c:2a:63:11:92:ff:e8:f9:64:7f:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B5:36:60:F0:98:BF:76:36:5F:8C:7E:FB:5C:E1:5C:F6:39:4C:33
X509v3 Authority Key Identifier:
keyid:1E:02:B2:48:9F:47:13:96:2D:10:51:12:B2:52:76:EB:81:F1:AC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgKySJ9HE5YtEFESslJ264HxrJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c0a326-88e1-42b4-9d56-0921d1bbf349/1/HgKySJ9HE5YtEFESslJ264HxrJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:08:2e:ff:eb:fa:05:b1:44:c2:a8:43:08:91:b6:06:d1:89:
ec:7f:fc:67:23:2b:1a:fb:1d:75:de:34:7d:b6:7b:f7:66:5b:
8c:e1:49:8d:3e:47:d8:a3:09:1e:de:25:37:32:2c:7f:2a:36:
16:ec:8f:b4:f5:74:2f:a3:11:2d:e7:2e:9f:11:73:71:e8:2a:
8b:17:eb:b4:5d:7d:74:9b:04:d7:8b:48:29:5a:0e:b9:ad:6c:
e4:1b:57:aa:c0:c3:40:68:80:a7:33:64:e7:50:ec:cb:6d:25:
b6:cb:4d:eb:65:51:b9:cb:fb:cc:63:a1:4a:e3:93:66:dc:b2:
62:f5:a4:d5:a7:73:8d:a1:a4:64:bc:b2:82:b9:d3:59:52:a5:
40:6c:99:53:7e:d4:c8:c2:34:ca:5a:f3:de:7f:1f:f0:f2:be:
15:16:0a:f4:ae:1e:3a:e6:2b:3f:b0:00:bf:67:c4:14:e7:b9:
69:ef:6a:54:e2:d2:09:84:8a:ab:03:1e:65:d7:de:76:55:2b:
9f:6a:11:83:fc:58:b9:28:3e:10:04:9d:78:97:7a:fb:38:73:
34:de:49:a6:18:db:68:45:fb:83:11:34:f1:47:b9:b9:84:c0:
ef:ad:4d:8b:f2:3c:bd:d6:eb:de:4a:ee:ba:eb:70:b4:f6:ff:
b8:6f:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:31 2025 by rpki-client