Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json)
Hash identifier: hI36kWb7J15n+kUT/MpMN4GJNDBsn9e7A8MaGFMc+LM=
Subject key identifier: 2D:46:3B:E6:DD:82:46:DF:A6:E4:62:28:FD:CD:12:E5:46:71:AE:E1
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 0197B88F3A10E90C7ED5F9A8421A427E16FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
Manifest number: 7B
Signing time: Sat 28 Jun 2025 22:01:23 +0000
Manifest this update: Sat 28 Jun 2025 22:01:23 +0000
Manifest next update: Sun 29 Jun 2025 22:01:23 +0000
Files and hashes: 1: GuJV6tWvMc7hiklHxH5EzaRwm8k.roa (hash: SFtJeLYX3k0Bqhlczs2KFJUiSZerZ8nM1VQXRCJtLKQ=)
2: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: xZmEjaNmigVWxtpAyZtcys7FlZoQuXllqrh5rHhqfKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:3a:10:e9:0c:7e:d5:f9:a8:42:1a:42:7e:16:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Jun 28 22:01:23 2025 GMT
Not After : Jun 29 22:01:23 2025 GMT
Subject: CN=2d463be6dd8246dfa6e46228fdcd12e54671aee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:f8:e6:f0:80:39:45:32:27:40:ef:19:a7:
ca:58:a7:9f:11:7c:16:a9:f5:f3:2e:0c:2b:ad:32:
ab:21:51:b3:08:4a:f2:2b:37:d3:fe:eb:a6:70:15:
38:11:fe:66:26:fe:5b:5f:6f:42:32:52:fe:a4:e8:
26:16:1d:ad:a8:6f:e2:bf:17:02:43:25:7a:d8:aa:
37:a6:8a:ed:fa:e1:41:ee:88:11:b9:4f:6f:c4:4b:
8b:5f:64:7b:7a:59:b4:f6:42:5f:f1:24:94:1e:e9:
5f:3e:e7:21:35:74:5b:a5:94:1e:50:58:c5:8b:e8:
d8:0a:b4:f6:a3:f8:64:09:7e:74:05:d0:26:8b:57:
f8:e1:17:2d:c7:79:88:77:d6:02:7f:d5:56:95:24:
83:f6:71:6e:f3:02:b3:3a:94:34:ec:31:e4:64:86:
02:48:86:52:ad:74:2f:85:89:89:6f:42:1e:4f:1f:
0a:1d:4c:57:f2:5f:c9:07:a0:d8:37:28:e3:e7:ef:
cb:0e:59:c5:fe:c4:b3:87:80:34:9f:bb:c6:b8:0b:
1e:46:74:10:e4:d8:0f:d2:97:a7:e0:fc:60:01:8b:
d6:b8:8f:7b:42:cf:e8:ca:3f:98:9d:06:9b:e6:5b:
e3:44:be:11:69:b1:67:b3:35:d6:2e:df:3a:64:c3:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:3B:E6:DD:82:46:DF:A6:E4:62:28:FD:CD:12:E5:46:71:AE:E1
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c1:65:64:a5:45:74:69:37:49:db:7a:66:76:c5:8c:2d:24:
92:62:6a:7b:ed:f6:4f:5e:06:b9:a5:50:d6:42:e8:87:24:6f:
63:3f:3c:51:4e:69:ae:d7:79:e4:85:43:18:bd:35:1e:12:15:
37:42:9f:27:18:d3:1b:c9:e8:f0:41:5d:96:84:58:43:8a:ea:
4c:e8:34:d7:22:66:d5:1e:bb:fe:0d:d2:ff:de:1b:5c:b8:02:
ef:6a:45:32:d5:e3:c9:fe:93:a0:42:14:04:20:c7:d0:83:96:
3f:3e:28:3c:92:d6:b2:72:29:ea:d8:74:0a:f6:62:1c:1b:21:
79:03:08:69:5a:74:4c:fd:a0:41:bf:56:ce:f8:16:33:a5:49:
bf:e2:6f:b6:81:1e:58:bf:cc:fb:65:ab:bc:4d:5f:59:c0:48:
f1:92:39:3e:e8:c1:cf:d6:c5:b2:ff:e8:fd:78:5b:6f:92:f1:
57:e1:09:2f:5b:95:cc:f6:ce:02:88:0a:c4:5e:1b:83:82:c6:
68:92:21:64:92:91:c9:af:ea:65:4b:32:6f:55:e4:5f:b2:71:
83:96:68:a3:1b:dd:bf:60:48:49:37:d7:4f:68:04:d5:a2:e4:
d8:69:a5:3a:82:3e:87:ef:1b:e1:ab:b9:2b:5c:e5:37:f5:c8:
58:94:7c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:58 2025 by rpki-client