Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: SwhxkP4Gw7z0+sDjofT01pHEbWdhdWM8XJmh8z1E0M8=
Subject key identifier: B3:F3:71:A9:53:B6:30:67:1C:8C:94:D3:6C:22:6E:7C:AC:6C:DB:30
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 0197B70ED20B8CD72EAFAE45172E565D17AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 0216
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: 0tHvPtdsZRMSdECFrWywHEFzjJY.roa (hash: wDxCLikDUetb91mXxU1f33qmz0PqiuAAUobRz5+KIoE=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: 0z7/Puvju/ZoIXLv3PgpNx+BWAfJvEsq1JyrEtCQ/xg=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d2:0b:8c:d7:2e:af:ae:45:17:2e:56:5d:17:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=b3f371a953b630671c8c94d36c226e7cac6cdb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:79:c0:46:ae:a2:db:19:61:d4:52:79:83:
4f:77:76:03:ce:89:5e:51:6a:e1:b1:ee:c5:5c:17:
be:0d:11:29:67:06:da:27:66:12:59:a7:3a:ec:46:
3c:cb:36:5b:99:60:7e:cd:0b:4f:29:04:c7:c8:a5:
4c:1a:ed:6b:ce:03:6f:54:51:26:21:b1:32:d3:b3:
46:4a:99:9b:93:72:09:bd:ec:a5:63:b3:2a:90:6b:
44:c3:16:6e:db:68:53:27:cc:18:b3:9e:69:12:c6:
c4:2f:f1:f5:4e:6f:d5:c9:a8:2c:f2:97:51:79:2c:
2f:7a:be:8d:bb:b8:2a:37:01:69:03:0d:f4:91:12:
4a:c7:1d:ee:54:34:7c:8d:fe:b3:c5:8d:42:0a:99:
f2:27:7c:59:96:af:30:48:31:02:e7:1b:e8:f3:4f:
3d:0e:cb:a8:fd:04:37:f5:fc:9e:74:13:01:ff:31:
94:a8:6b:7d:30:02:a2:46:cd:60:25:41:86:6c:b8:
5a:d4:dd:1a:31:f9:69:ec:cc:1e:71:c0:f2:60:18:
d3:96:f0:6e:d4:99:a4:10:d6:7f:5c:b6:42:60:20:
48:63:a0:f8:3c:19:36:2a:3b:65:35:0e:48:e4:46:
2c:06:d3:90:cb:6c:66:c4:ff:14:cd:fe:57:11:e3:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F3:71:A9:53:B6:30:67:1C:8C:94:D3:6C:22:6E:7C:AC:6C:DB:30
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:79:59:fd:b3:a5:fb:29:e8:c0:2d:00:bb:31:2e:2a:1b:09:
fc:b2:ce:b5:ef:0d:53:6a:e4:0d:9a:e8:b1:35:73:53:79:09:
44:6b:2e:23:c8:89:1c:ce:37:94:3d:ce:07:ee:ad:8a:21:80:
67:ec:09:52:67:99:7b:08:9c:9d:7c:31:3e:00:3d:af:d2:75:
2c:a2:85:bb:d2:c3:6a:1e:78:f5:76:8a:30:ce:71:ac:55:98:
eb:58:de:9b:bb:10:3b:c8:d7:96:fa:fe:f4:34:5d:68:a3:28:
ae:96:a7:58:6e:7c:62:d9:6f:43:32:63:c0:66:f8:eb:0c:6e:
3d:2a:63:8b:b0:83:93:80:38:9f:ff:7c:d8:81:1e:97:30:62:
9a:48:4f:4a:66:d8:22:bf:46:f1:cd:a9:3a:f1:d1:31:6f:22:
94:c2:ff:b0:86:40:1e:de:38:ac:d3:65:ec:de:62:71:c2:e7:
ef:c0:2a:e1:7f:ea:db:78:30:47:dd:09:d1:41:20:9a:ae:93:
09:c1:19:7c:49:a7:2e:ff:af:8b:10:fa:b5:d1:fb:15:70:32:
40:ac:11:4e:5c:6f:b3:f9:b6:c2:78:e5:bb:79:f6:ca:ae:99:
bf:e6:32:fd:4b:a9:fd:7b:8b:9c:38:6f:f0:f5:27:16:2a:53:
9e:f5:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:45 2025 by rpki-client