Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: upNKggOQcd2g0nVI0aMeOJw4aI9ITLtB2ijt0TKmEhI=
Subject key identifier: F3:E7:AB:67:09:5E:78:11:E0:7C:FC:6E:40:9D:01:94:C3:61:7A:08
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 0197B7EA3F282A8BEF1ECE9D1EA666020D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 11D0
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: tIyuTsunTKt6hLQ9BqK8DPEl4vI3h51+kHrsmwwgFV8=)
2: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (hash: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3f:28:2a:8b:ef:1e:ce:9d:1e:a6:66:02:0d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=f3e7ab67095e7811e07cfc6e409d0194c3617a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:50:6a:cf:45:2c:53:97:4a:09:ca:02:fd:
f1:81:61:d7:01:f3:ae:10:1f:c0:50:b9:a9:ce:67:
4d:16:7a:c4:6d:4a:03:4e:58:8e:3a:2b:cd:ce:7b:
b9:7f:ed:8f:2d:84:78:6c:2c:e9:cf:f4:ea:64:ac:
f0:95:1b:1d:6e:c5:12:c7:0b:c6:56:04:9d:ae:1a:
53:3b:03:af:ce:67:de:38:24:66:1c:a7:60:12:70:
f4:73:ef:91:ed:06:6f:6b:98:d1:14:0c:00:a8:9a:
fa:6f:58:46:d8:10:90:44:cf:35:0f:53:9d:78:bb:
e6:00:4a:af:49:9d:f8:a9:bb:84:46:04:5c:3b:ee:
f1:63:48:ad:86:c7:3a:2b:b9:26:bb:08:ff:e7:39:
24:3a:7e:6a:2f:2f:e3:77:1c:c8:98:ed:08:f6:51:
32:f4:4d:41:4c:27:2d:1d:ad:3d:56:be:2c:bd:d0:
c3:66:9b:6e:5c:fd:70:7d:bf:64:c9:91:3d:29:48:
0f:83:b0:1e:ef:f2:30:7f:88:e2:d1:41:07:31:66:
94:7a:9b:06:ec:82:aa:4a:1e:7e:b2:18:80:18:5f:
25:4e:65:cb:e4:2b:f9:10:b4:85:a9:87:73:33:dd:
d8:b1:48:af:ea:94:22:1a:02:09:c8:9a:b4:46:2c:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E7:AB:67:09:5E:78:11:E0:7C:FC:6E:40:9D:01:94:C3:61:7A:08
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:78:14:6a:c6:c6:81:e5:29:44:66:6e:25:6e:62:13:e9:56:
85:56:ee:27:5d:50:10:f8:ce:df:37:99:b3:a7:6f:e4:0c:9a:
53:d9:fb:9d:48:0b:03:85:f1:33:7b:dc:69:b5:5c:6b:92:24:
59:f8:89:c1:73:63:3e:d0:a4:1d:b7:7e:68:76:35:dd:29:b0:
6c:42:2b:a2:44:17:aa:e2:61:89:c7:4f:b3:28:76:df:98:b0:
52:a3:7b:cb:06:0c:ad:43:ae:f0:ab:fa:4d:c9:6a:58:cd:e9:
f0:ab:4b:36:08:5c:95:21:ed:30:e3:c4:b4:6f:90:ca:e3:a1:
4b:22:b4:bb:fd:bd:b0:21:25:01:79:50:69:19:6e:4d:a2:00:
d5:df:31:57:63:f0:17:34:70:49:51:b5:82:f1:56:f5:77:01:
41:b1:b3:57:64:8c:6a:c1:15:8c:cd:20:3b:bf:d1:68:f7:05:
6d:b6:e9:02:34:f2:5f:d1:ea:1f:29:16:45:86:8e:91:85:1b:
76:08:6b:d0:43:de:ac:ef:82:1f:57:02:b9:56:ea:46:ff:e9:
18:9b:ad:3c:e7:dd:49:27:62:6e:ac:ae:93:85:ad:be:c8:63:
ea:7a:38:29:81:43:94:7d:e1:64:a2:14:10:8e:28:fb:fb:3f:
11:92:77:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:36 2025 by rpki-client