Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: XFOTV74nKJLltyFlVV69OoHIjq/ipG+YhhwKf6cXy8c=
Subject key identifier: 2E:66:E4:63:7A:A3:97:14:B5:73:18:5B:D9:32:02:A7:72:9C:A3:7D
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 0197B70EF57879B4B1EB19CB799D610A98C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0C99
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: +9B8Ark94kHYXXVg7wqFHEIav4g4TI0N+28rDgsvxLY=)
2: obxxCWwwodKEQItq-LvA1UofY7E.roa (hash: EDnG/ruD1T9KRKhZcI5dsIBjNgSOpQ6QRSsT8ooYu6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f5:78:79:b4:b1:eb:19:cb:79:9d:61:0a:98:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=2e66e4637aa39714b573185bd93202a7729ca37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:ae:76:dd:17:67:d6:89:73:e7:d9:03:17:
15:f8:e5:38:1a:23:c0:de:d5:11:ac:6a:2e:c2:4f:
2f:b8:de:52:3b:e1:47:4d:df:56:3d:c2:db:3a:79:
a5:5e:8e:15:64:51:d9:d6:c9:09:89:4e:7e:2b:2e:
92:d9:25:cc:64:47:20:00:70:0e:81:c0:43:8c:66:
a8:72:19:83:f0:43:81:07:73:80:fd:35:c0:83:a7:
4b:78:74:17:c3:6e:e9:e2:db:6d:3e:d3:6f:ff:b9:
6c:eb:4d:2a:b0:61:20:f5:6f:e4:54:1b:2e:e6:d4:
cf:bd:00:f6:23:dd:3a:15:61:0a:5c:2b:5f:30:14:
e3:d2:18:91:b0:a2:89:25:c7:6e:89:ee:df:3d:bf:
ba:1a:9d:bd:6c:e1:b7:c0:fb:73:ad:19:43:1f:f1:
c6:0e:93:81:f1:d9:43:c9:eb:d8:6d:05:4e:eb:c1:
54:97:b6:54:7f:5b:97:37:2f:bf:50:fc:e5:76:15:
dc:1d:ce:8b:31:43:a6:03:5b:74:8f:8d:ee:ad:ed:
6b:31:ac:42:5b:7f:5b:58:7c:aa:3e:d2:3c:fd:96:
d2:70:92:1c:ff:02:56:0c:fb:ca:8c:c8:f6:0f:7f:
d6:3c:83:2c:f2:c7:5a:7f:40:d8:10:1c:1d:2d:f1:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:E4:63:7A:A3:97:14:B5:73:18:5B:D9:32:02:A7:72:9C:A3:7D
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:64:05:5e:94:78:7e:82:b6:61:0b:0d:31:a1:c6:15:b9:2a:
11:bc:77:43:4f:93:5b:4d:2c:8e:1e:61:af:4a:1a:dc:d3:34:
45:70:2c:4c:fe:d4:df:02:36:96:38:61:b6:a3:08:f3:ad:88:
db:b1:b9:18:88:93:a6:05:4a:0b:93:26:04:f8:f3:7c:10:0a:
14:dc:a4:fc:1e:e9:fc:e3:b4:2c:d5:cf:d3:a6:7e:f7:1c:b0:
16:e9:93:f7:f3:40:f5:4f:9d:93:36:d0:ba:e1:4e:f7:cd:a7:
a4:ce:8b:33:fe:3f:19:df:ad:c8:6b:de:d6:25:a3:b7:1d:1f:
30:a8:17:b6:a1:af:c7:3e:50:c0:35:d0:65:04:d3:d4:af:25:
f1:16:b4:64:db:86:68:d6:af:39:17:78:27:f2:18:90:17:a9:
5f:23:1e:fe:63:a4:c7:ee:df:bf:00:6e:59:da:d2:07:e9:f3:
10:ca:48:6c:ea:c7:06:60:fe:2c:5e:7e:d4:1b:04:3b:91:4a:
f8:f7:b7:09:88:83:26:49:e8:1c:45:04:54:71:d0:3a:ef:2b:
3e:43:e6:1f:d5:81:25:83:15:8e:6b:2c:e0:1a:fa:9d:46:20:
2e:6c:68:b8:17:c3:ef:23:c8:3a:cc:a2:92:74:c0:01:96:5e:
b7:a4:4f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:28 2025 by rpki-client