Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: XUHnacXIpUc8BmhCndtUfvRohJnQDvc9okkP8oAWBvQ=
Subject key identifier: 9C:96:8C:89:97:2B:6E:E5:45:02:56:44:E2:E2:28:2D:60:75:73:10
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 0197C8027D127A17DA25841FDA0AB75FD111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 15C0
Signing time: Tue 01 Jul 2025 22:01:35 +0000
Manifest this update: Tue 01 Jul 2025 22:01:35 +0000
Manifest next update: Wed 02 Jul 2025 22:01:35 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: 27HwHgOa3PpyGYAJ+sgfPidHeK1b38mPl1U09apK5qY=)
2: z6MmCrjG_M-ly3NSz9op9zn2Kp8.roa (hash: RhWaGG++pr/cOsZo3DpIE+m6eX6qqpoZxRcmwUA1c6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:7d:12:7a:17:da:25:84:1f:da:0a:b7:5f:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Jul 1 22:01:35 2025 GMT
Not After : Jul 2 22:01:35 2025 GMT
Subject: CN=9c968c89972b6ee545025644e2e2282d60757310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:c7:68:44:78:d9:fb:d2:96:69:ff:38:64:
f1:22:ab:30:84:06:ea:9a:e3:9a:7e:0f:7f:5e:3e:
c0:26:89:4a:49:0c:42:14:85:34:75:50:b1:9c:90:
e5:f6:1d:bc:e7:3a:87:d0:08:0f:0a:18:09:f3:2c:
50:56:2d:f9:ad:47:e8:17:31:ce:64:07:57:8f:91:
c2:52:b1:92:24:f2:bb:93:f1:bc:5a:5c:12:a1:05:
54:3d:ab:5e:57:3b:92:06:6b:29:a4:4b:c5:0f:24:
63:3d:09:c3:c9:44:aa:51:11:77:42:9f:00:e9:bc:
e9:50:77:58:6c:d4:bc:62:7a:66:1b:22:2d:11:b4:
40:a5:22:dc:c7:56:97:21:7c:cd:d2:22:1b:19:31:
2c:b6:eb:b8:0c:b9:91:c7:1f:97:f9:56:b3:9c:9f:
e2:08:11:88:cc:45:34:0b:9e:49:a4:01:0c:c8:f0:
98:8f:2a:30:b8:4b:b7:f2:bd:c2:62:2e:90:0c:99:
fe:95:e9:62:2a:08:66:49:3b:21:e0:96:98:1e:6b:
f3:da:97:3e:7e:34:e5:7c:d9:fb:2b:af:e0:e5:65:
21:90:dd:56:53:56:ff:b1:1a:d1:be:a2:f6:56:9a:
5b:3f:0e:e7:04:a2:c7:53:c5:3c:3e:24:d1:2d:87:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:96:8C:89:97:2B:6E:E5:45:02:56:44:E2:E2:28:2D:60:75:73:10
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:58:35:10:c0:fd:e5:33:bd:ed:af:e0:18:e0:54:fe:72:c1:
e9:b7:af:64:9c:c2:2f:e6:fa:96:e6:52:8a:df:89:ff:51:c3:
df:2f:6b:33:07:43:51:fb:ae:24:14:99:ba:2c:11:ed:d7:c4:
c3:a4:98:2e:e5:6e:98:37:57:ea:cf:f5:91:07:c1:83:eb:fd:
07:1e:b4:9b:27:21:0c:f9:b5:4f:8f:36:4d:30:ec:fd:16:af:
8a:2c:ad:07:e8:d9:d0:ac:57:19:19:08:51:e7:61:24:ce:cf:
eb:ab:25:cf:4d:4b:92:5c:87:de:b0:04:a7:0f:fd:c0:c1:f6:
69:7b:93:a7:73:b2:30:85:70:10:d5:47:85:03:c9:af:6d:d3:
01:37:ac:8d:d4:52:38:00:dd:bb:4b:ed:80:7d:ab:68:9a:39:
cc:d6:77:d3:3a:2e:cc:21:46:8b:8c:bb:08:a7:51:11:80:63:
c2:49:f9:2a:f2:98:85:b2:05:9e:9f:10:40:38:94:82:3e:26:
77:53:8b:e1:73:fe:ab:3f:f9:b8:05:f1:28:32:a6:bc:88:e7:
d5:bc:58:5e:df:99:cd:30:8b:73:a4:37:d9:f6:69:43:a2:3e:
72:06:06:4e:ef:f9:ff:7f:57:61:71:a8:33:c5:fa:ad:07:1a:
65:b4:64:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 23:29:13 2025 by rpki-client