Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: Su1JARU3jH5e6NObycfSRKnsfmMLqHfCaZGsiMi5s5M=
Subject key identifier: 9C:60:96:73:33:46:D7:12:7D:E9:D5:4D:C3:D4:EB:E5:55:2D:72:63
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 0197B7453765285130CE79A51C570E618256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 0D29
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: 3tqS8s7aXjlzgF34bboURgapBUq8+6076yHmOExePjY=)
2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:37:65:28:51:30:ce:79:a5:1c:57:0e:61:82:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=9c6096733346d7127de9d54dc3d4ebe5552d7263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:b9:3f:0b:aa:e2:fc:3b:7c:db:62:a1:84:
69:20:aa:a6:28:40:f2:03:76:58:99:23:96:14:a6:
2b:45:e5:79:d1:0b:0e:45:56:27:9b:62:3b:27:03:
24:91:9a:f7:90:12:bb:7e:08:46:b8:ae:d4:96:fb:
57:cb:34:73:71:c7:3d:c5:a1:e1:c7:6d:d9:24:56:
93:52:dd:22:0b:46:e6:7b:16:1e:31:c8:56:d2:15:
9c:6a:4c:aa:c3:d9:66:5d:f4:69:41:68:8e:2c:ff:
f2:60:0b:0b:42:1b:17:20:bd:a8:ec:26:84:1c:57:
34:6d:7f:d8:90:2f:34:e4:74:e9:e7:fc:1d:1a:1d:
2a:cd:c7:a4:80:2c:99:96:1a:ad:d4:d1:36:fe:bc:
59:cc:d9:a0:53:04:59:70:5c:44:6e:61:be:38:b4:
c3:bc:1a:a2:64:c3:bd:65:93:b2:5c:17:f7:05:33:
83:2c:9b:b6:dd:0b:ec:0d:10:bc:61:83:33:e2:79:
51:e2:3b:58:c8:bb:f3:d3:2e:0b:4c:48:75:91:ea:
b0:4f:2c:f7:c1:3b:ad:76:1a:22:bf:c6:38:5e:36:
92:4d:a2:fc:f9:bd:b9:92:19:7e:e5:de:23:51:43:
2d:36:ab:14:f5:94:12:a3:1c:d6:bb:3a:5e:b8:6e:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:60:96:73:33:46:D7:12:7D:E9:D5:4D:C3:D4:EB:E5:55:2D:72:63
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e4:54:fa:17:8a:47:f5:60:78:2a:c6:b8:c4:4e:76:4a:ab:
14:4e:5b:fe:88:09:d5:69:9d:e0:86:fa:68:5e:86:22:52:16:
cf:fd:e4:f9:6b:b9:3a:b4:41:64:89:7a:5a:bb:a1:9d:1c:47:
4a:b7:ac:0d:b6:8e:78:97:77:d3:6a:97:ba:60:2a:52:9e:2b:
0d:80:5a:01:b0:80:16:37:ab:e7:57:1a:f8:87:9f:19:a8:d6:
da:54:bb:c0:6c:50:32:df:0b:40:51:81:11:fc:23:ae:27:dc:
b5:27:34:57:e8:7a:d8:e4:98:22:1c:c0:5e:be:cd:4d:a1:ba:
1e:ba:3a:f9:a9:2c:4e:92:9e:18:e5:de:43:59:4a:ce:08:c4:
7a:fb:56:b8:75:0c:43:04:28:cd:10:44:2f:c3:67:af:10:0a:
ff:09:32:29:57:7a:59:cf:0a:3b:d3:2d:47:06:24:50:16:d1:
f1:ca:c3:1e:86:e3:98:db:53:bc:8b:86:a7:b3:65:a9:68:28:
f6:1f:0a:b7:53:69:cf:a2:42:6b:d0:65:cf:73:06:a2:1b:2d:
85:88:ff:a7:48:26:c4:cc:9d:20:b2:d0:5b:81:df:3c:c1:df:
08:ac:86:38:d1:c2:4e:cc:03:b6:80:c0:9a:88:2c:46:e8:1b:
33:61:2d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:52 2025 by rpki-client