Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: 8ltM/+Q07zC42H4vwql+1/n55pdQxv4LaS5QMPG5+Qo=
Subject key identifier: 28:D8:52:94:D8:A2:3A:0E:4B:75:89:7D:78:0D:0E:F9:69:E5:B7:71
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 0197B7EA8AD1A1D309ECBADD27EB469954CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:30 +0000
Manifest this update: Sat 28 Jun 2025 19:01:30 +0000
Manifest next update: Sun 29 Jun 2025 19:01:30 +0000
Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: 8oZBNyjRZLjnVPb8Ty82ueCPIN894PC0aCt03qpSUCo=)
3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:8a:d1:a1:d3:09:ec:ba:dd:27:eb:46:99:54:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Jun 28 19:01:30 2025 GMT
Not After : Jun 29 19:01:30 2025 GMT
Subject: CN=28d85294d8a23a0e4b75897d780d0ef969e5b771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:30:ee:ba:c0:ee:cd:d3:07:c1:7b:25:a0:
b0:57:54:1f:fc:10:18:bf:bf:78:9e:fa:1f:cc:bc:
f2:42:c5:34:d2:fd:7e:a9:24:67:d8:3e:7f:8c:a9:
80:91:90:a1:ce:55:9a:ef:b5:15:1a:9f:8f:c0:be:
4d:37:f8:da:ac:55:8e:73:3b:a6:88:3c:d9:d0:a5:
ab:63:c2:61:a7:d4:ab:53:36:56:4e:47:2b:5a:18:
36:21:3a:5f:c7:11:ac:b0:f8:a2:e7:d8:a0:5f:df:
6e:48:eb:4a:19:b0:bb:23:ba:3d:29:c2:79:07:2c:
5f:69:a7:68:44:55:48:32:ba:cb:7f:18:8b:3e:cb:
0b:d3:cc:e3:7a:6f:42:5e:4e:8f:33:52:f9:18:15:
f0:2a:8d:da:ec:70:ff:ab:12:98:45:aa:35:bd:ac:
81:b4:0f:14:1c:3b:ac:fe:d7:09:72:82:c0:5a:7d:
66:00:33:11:9f:0a:a0:fa:c5:2d:86:f3:10:54:b3:
04:c5:ff:eb:42:7d:46:d1:a0:6e:c5:10:0e:54:7f:
b6:25:ee:86:c4:71:4c:6c:66:52:ca:98:e3:7d:1a:
bf:c9:18:78:84:02:ee:b5:92:4c:6a:01:3f:81:87:
f6:c1:39:27:12:87:8a:48:a3:6f:7a:ee:45:40:89:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D8:52:94:D8:A2:3A:0E:4B:75:89:7D:78:0D:0E:F9:69:E5:B7:71
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a6:b8:4f:d9:47:d6:86:8d:4f:7a:e5:b7:7f:f7:a6:67:fd:
a7:a3:a9:40:3a:52:6c:97:65:98:16:18:b8:92:5f:ca:9d:bd:
47:30:23:7c:55:7e:90:70:fd:00:ee:8e:1e:3e:00:3c:4d:81:
1a:56:73:c0:0e:e5:34:44:83:e0:55:8f:7f:ad:93:8a:43:be:
a4:4d:8a:dc:7c:de:9b:96:d5:7b:5a:c1:dc:77:3a:d7:74:04:
5c:e7:64:6c:fd:e0:f0:4a:01:35:e4:1f:75:fa:01:fe:89:54:
42:75:6c:7f:c7:1c:01:35:f7:ca:23:d9:1c:dc:4e:52:1b:e8:
6a:a2:a6:a1:53:8b:98:b9:1a:c9:93:dc:94:2c:86:4a:c9:26:
73:94:e9:b6:0c:b5:21:99:01:f3:d0:a2:3d:af:79:be:dd:06:
75:02:1b:b8:36:2d:7d:e0:59:8e:af:e8:39:dc:44:ac:89:99:
51:1a:7c:fb:e0:4f:be:92:27:02:c8:a3:c1:7c:58:aa:3b:cf:
a2:64:06:16:e7:a2:a2:a0:7f:9d:cf:0d:1c:db:01:a3:65:0e:
38:b7:6b:4e:26:37:77:b0:af:d6:0c:61:12:09:d6:d7:42:bf:
50:62:2b:6c:ee:11:5c:c7:75:8c:03:fc:e4:d8:c1:1d:76:89:
48:60:e2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:36 2025 by rpki-client