Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: Bxg1rpg4eEuuo1/c8F1VXrwvuSRpkPtC946X8k9PJIA=
Subject key identifier: E3:60:93:D7:77:AD:09:2F:8E:51:F0:48:76:99:1A:FD:C0:2B:5E:82
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 0197B6A1E310ACADAB2301B8940A967407E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 0F43
Signing time: Sat 28 Jun 2025 13:02:32 +0000
Manifest this update: Sat 28 Jun 2025 13:02:32 +0000
Manifest next update: Sun 29 Jun 2025 13:02:32 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: FCEXNLZaxVQy5vuP9et2c25SuaanZ+GqSYiKf1UetAA=)
2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e3:10:ac:ad:ab:23:01:b8:94:0a:96:74:07:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Jun 28 13:02:32 2025 GMT
Not After : Jun 29 13:02:32 2025 GMT
Subject: CN=e36093d777ad092f8e51f04876991afdc02b5e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:2d:80:1c:30:0c:9e:06:2a:ee:92:0d:64:
e4:ac:52:26:20:67:de:ea:e0:2c:67:2e:72:2a:e8:
f1:24:21:16:05:18:7a:1d:b1:57:99:d9:5e:ea:a9:
41:f4:be:d1:52:74:16:3f:af:15:0b:97:dd:71:f3:
fc:33:0e:b9:93:92:e9:95:1a:a1:7f:c8:ad:a4:93:
49:b5:4c:36:6c:fd:52:12:6c:8a:31:4f:4a:83:16:
47:55:33:ea:86:1a:27:4f:99:75:92:07:1e:e3:a5:
ac:e6:de:78:ca:67:3f:d8:b5:ee:eb:34:06:54:8f:
e4:00:ec:cf:92:9e:27:0a:8c:49:8d:2f:b7:e0:77:
c5:d7:89:21:5a:02:46:10:b8:f2:8c:4a:0e:49:d4:
d9:56:38:d2:7c:3c:eb:eb:6f:87:41:31:03:ca:6d:
ca:75:53:e7:dc:8e:60:b7:f8:1c:06:b9:fb:da:3f:
b0:16:ea:50:fc:f3:90:b9:01:25:2b:9a:87:ca:5c:
69:6c:a8:0c:92:b3:21:b3:5e:3b:85:2f:10:d9:3e:
08:3a:2d:a1:29:55:f3:9f:75:28:93:6d:34:19:cf:
b4:be:ae:f6:21:fc:ee:fb:34:48:40:0e:86:0c:e7:
e3:1e:86:f5:55:0d:74:46:26:46:ad:18:34:1e:52:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:93:D7:77:AD:09:2F:8E:51:F0:48:76:99:1A:FD:C0:2B:5E:82
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ae:91:05:72:e4:b7:ca:3a:f4:0e:5d:94:11:55:e8:3d:38:
1a:5d:37:e0:33:4a:55:a7:75:c8:4e:72:25:e5:07:9f:4b:5e:
b1:6a:a6:60:ca:2b:db:97:1e:38:be:1e:35:72:bd:79:2f:e6:
29:69:a8:48:98:24:e6:64:18:14:5a:6e:23:d5:51:2b:cf:3a:
19:8e:e9:3a:3e:fb:5f:84:84:0d:0c:96:27:31:14:bd:c9:21:
a7:8a:35:bb:d7:4a:02:47:44:1c:08:f2:47:ac:3a:88:53:77:
7e:30:b6:94:82:bc:60:ca:88:fb:73:e5:30:59:c5:16:e5:52:
a6:0e:73:33:98:67:fe:02:19:d9:60:0d:4d:0e:c0:2e:7f:83:
18:f7:9e:6a:e4:16:e1:34:b2:60:f8:67:46:75:37:94:ae:2f:
c2:b4:58:20:af:82:5e:c9:9c:59:d5:10:13:ad:ca:ea:f4:89:
5d:80:d4:d7:22:b5:cc:bc:e0:63:26:e2:07:25:a4:30:71:ce:
ae:43:5b:77:21:02:de:5c:1d:ec:70:54:23:de:02:3f:68:d4:
25:b4:86:5e:e1:33:a2:11:5c:b6:e7:44:dd:d7:1f:8c:00:e2:
9f:f8:45:6a:9d:50:c4:30:1e:20:1f:52:9f:ba:b2:1a:ed:20:
e4:59:68:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:16 2025 by rpki-client