Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: KsVW+Vt9LvhfCD2sxPCJonfAm92sZalWP/AA1X664oI=
Subject key identifier: C1:0E:E6:57:06:C5:CA:CC:0A:73:9A:C6:60:71:C8:CA:3E:E8:19:50
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 0197B70E7D1D573E6B428826033E33D416D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 0575
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: e4jCAzK1QxQvU21aMxZX7WawFvMRxxMghH8pMOGhVFU=)
2: hQR0mmyfCcP0k0VyVReQd9TwA2Y.roa (hash: /yk+WBXgj9/PFpjinmPki6KFsYrLmbEwlVJawiNfh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7d:1d:57:3e:6b:42:88:26:03:3e:33:d4:16:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=c10ee65706c5cacc0a739ac66071c8ca3ee81950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:3d:b5:e7:f5:dc:11:89:9a:5f:ae:a4:1a:
13:ce:57:09:a6:db:40:23:9a:80:a9:0d:0b:89:74:
f8:39:fd:fc:a2:25:8d:62:17:8d:01:7f:f5:ca:da:
ff:7f:a2:70:54:07:86:73:96:6f:83:ab:cd:47:aa:
eb:0c:3d:92:37:24:e1:c3:9e:1c:ef:00:f7:b3:64:
d1:4e:6e:d2:d4:70:66:70:99:3c:6d:8c:2f:28:35:
20:e3:42:0a:a4:26:17:78:ce:da:47:32:80:be:96:
bc:88:de:fa:4a:88:78:66:5b:0f:a2:67:89:11:bc:
3e:65:f5:78:e8:fb:93:ac:dd:10:8a:e9:55:81:8a:
dd:86:28:8c:20:b4:7b:3c:8f:b8:33:25:05:c4:fd:
49:a4:67:dc:ea:82:35:f7:c8:0c:59:b0:d2:ed:15:
a8:ce:32:35:8d:15:9b:9a:73:51:b6:3a:4a:7a:c2:
f6:55:74:81:dc:02:f0:47:5f:87:fa:4d:15:53:29:
52:2e:91:91:f9:06:3e:70:5e:1b:e9:76:93:b0:1a:
57:c8:83:2d:ba:22:ce:d1:32:48:f9:e9:f5:e0:21:
c3:ac:f4:2b:fd:b8:2d:6c:3f:3d:d1:81:2a:28:e9:
37:db:f4:76:a7:76:d3:dd:99:03:9e:08:02:d4:ae:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0E:E6:57:06:C5:CA:CC:0A:73:9A:C6:60:71:C8:CA:3E:E8:19:50
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f8:39:2b:e9:48:48:7c:6c:0a:df:54:ad:20:03:00:42:a4:
46:a7:6a:8e:49:b3:b9:1c:ad:ca:93:23:47:a2:17:b1:a7:6c:
5e:6d:ce:71:b3:96:4e:ba:49:a9:88:b1:f2:06:39:a7:c1:f7:
14:b0:37:2c:86:13:86:44:1a:a5:d0:d6:a0:54:03:41:b8:b8:
6a:93:80:03:a9:89:13:42:89:06:93:0c:79:07:e9:3c:df:b5:
18:3c:8b:8e:0b:f9:a8:a5:ea:51:67:af:55:3d:e9:12:43:58:
5f:1f:0d:a7:15:14:f5:a7:06:25:20:c6:38:6a:62:04:c0:4a:
f9:2a:99:71:ba:77:00:49:e0:25:15:ca:7c:92:0f:f8:6e:e2:
9b:77:f4:2b:09:d3:c5:36:f2:35:0f:fc:16:cf:c9:d7:ee:f1:
06:ae:34:3b:55:38:b1:75:c8:67:3a:fa:bb:e7:e0:f2:98:4c:
06:40:c6:5c:0f:76:06:1d:c3:1c:c4:ec:9d:56:52:38:55:13:
f8:d1:e4:33:69:94:3d:a8:e1:4b:ed:9b:39:2b:53:c3:da:83:
9d:67:96:e0:47:16:25:f0:4b:7f:fb:14:c5:df:7b:ad:a7:0e:
fd:46:8c:4f:73:39:08:bb:d0:62:31:72:92:d4:ea:73:bd:c0:
e2:d7:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:06 2025 by rpki-client