Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: MFJNrxCA0soPZg+UYQwXYlE3Dizkz4Yild/dvOTDc0A=
Subject key identifier: 1A:43:AD:57:BB:2F:55:8E:7C:D3:64:9B:8B:3E:F7:F5:FB:DE:8B:E9
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 0197B8907F4CE96832060CF622E2070140D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 0288
Signing time: Sat 28 Jun 2025 22:02:46 +0000
Manifest this update: Sat 28 Jun 2025 22:02:46 +0000
Manifest next update: Sun 29 Jun 2025 22:02:46 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: vXvkYOsX2rOdXeCMy2syiaD3inzeTJkCL0XXd9WGMcQ=)
2: liqpeGCwYwmu9HIJXhtRdiCnJ1w.roa (hash: PH03F8UhRKFA3g0ZorCZDIyppRrDIopkxrEtCKPjXS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7f:4c:e9:68:32:06:0c:f6:22:e2:07:01:40:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Jun 28 22:02:46 2025 GMT
Not After : Jun 29 22:02:46 2025 GMT
Subject: CN=1a43ad57bb2f558e7cd3649b8b3ef7f5fbde8be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:3d:b4:6a:f0:03:de:9e:66:15:85:c9:06:
eb:38:aa:de:d1:92:1c:00:2c:2f:1c:a1:b5:83:3a:
fe:d0:9d:97:55:9c:95:2b:a3:ea:12:a8:44:30:89:
fb:57:f5:99:48:4d:77:b5:0f:35:29:21:33:11:07:
6c:8e:cc:a1:5c:76:37:5b:53:d3:47:05:ac:c0:98:
84:1f:4a:67:15:74:c7:3a:ab:0f:f1:d6:ec:25:4c:
c0:3d:4c:32:da:5b:fb:f6:06:1a:de:79:f0:e7:5c:
d6:e0:e1:f5:95:7b:e0:38:a8:b7:e8:02:69:aa:b1:
75:4c:8c:38:6a:72:99:82:ba:bd:e3:6c:63:1f:1e:
ca:1e:f8:a4:b7:83:de:92:95:fa:f4:32:98:2e:5f:
3f:96:06:89:c8:19:a1:79:f8:6d:6b:04:db:b1:cc:
f8:19:46:d5:b7:38:14:ae:79:72:b4:d2:80:f7:a7:
37:4f:d1:1c:35:cc:cf:26:dd:46:fc:90:aa:c3:e5:
f5:d1:f6:51:28:97:02:36:36:a6:54:bd:b8:d4:3e:
81:a1:11:f5:8d:12:83:10:09:84:51:6b:98:ff:71:
74:2a:57:0e:48:31:b6:10:d1:0c:d2:2a:20:5f:1c:
9e:e6:fb:eb:ce:fe:98:31:3f:39:18:d2:8b:ac:65:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:AD:57:BB:2F:55:8E:7C:D3:64:9B:8B:3E:F7:F5:FB:DE:8B:E9
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:0f:26:0b:91:69:b5:ec:32:37:24:3d:94:24:83:ae:e1:
7b:16:ba:2a:82:0d:9a:c2:91:d3:05:17:38:f8:27:67:ee:38:
3c:3a:09:6b:fa:28:29:04:41:3d:0b:23:f8:96:70:ff:a6:0b:
42:f7:14:8d:df:8d:11:bf:fe:ea:34:04:5d:93:a6:fe:16:39:
37:9f:3c:67:29:d6:35:bb:24:0f:3e:0c:1c:29:3b:3b:2c:24:
2c:99:61:a1:05:59:5c:03:8b:2f:d0:21:63:1a:f9:bf:30:81:
e0:81:d0:81:17:55:1e:08:6c:7c:4e:09:a0:5e:ba:44:a3:64:
1b:9a:cc:0b:fb:f8:7e:55:f8:a7:48:d3:46:60:11:08:9d:30:
b8:63:7b:7a:54:f9:79:66:ce:3e:15:c1:ce:50:5c:98:3f:94:
f7:5c:03:45:c9:82:dc:89:23:56:13:87:93:18:a1:4b:39:c6:
53:58:00:c1:00:61:dc:8e:0a:a1:ae:33:ee:5b:43:b7:a4:d5:
3d:cb:a2:00:8e:e2:a2:88:62:99:a3:a6:f9:01:8a:2d:e3:0f:
93:ca:f7:a8:54:cc:09:a2:0b:b5:8a:64:97:7a:03:d5:c5:34:
2b:40:12:9f:ea:9a:12:7e:8c:de:09:44:ef:3f:a3:73:4f:dc:
d6:38:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:44:27 2025 by rpki-client