Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: dNXzTuzpWtnwmgumGJCRQiL7+f3OJR9VRi7PfSIKDaY=
Subject key identifier: 6E:14:10:6A:FE:7C:CB:1F:12:CD:0E:97:58:16:E9:CC:18:7F:12:6F
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 0197B7EA14004537015E55F1AD4C489D06D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0ADB
Signing time: Sat 28 Jun 2025 19:01:00 +0000
Manifest this update: Sat 28 Jun 2025 19:01:00 +0000
Manifest next update: Sun 29 Jun 2025 19:01:00 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: Z+xI9L+eXFcXWtuaL5MBTyTcT52Ui1ER4HiKdHRsW+w=)
2: ZGoOUwMopHkREW85RzSsR457AEU.roa (hash: ll6YKs1Lb4wcNMvOVUUEMK6peyuIPU/LPfVQcksc3+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:14:00:45:37:01:5e:55:f1:ad:4c:48:9d:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Jun 28 19:01:00 2025 GMT
Not After : Jun 29 19:01:00 2025 GMT
Subject: CN=6e14106afe7ccb1f12cd0e975816e9cc187f126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:a0:f5:c7:21:65:a5:6f:40:f1:9e:19:05:
de:3f:34:41:c8:9f:1f:d7:0f:a5:3d:a3:49:f5:5d:
4a:b1:3a:65:00:6d:40:06:fd:c6:e9:29:8c:65:b7:
8c:61:f2:ca:0c:31:8a:ae:ae:c9:6d:ce:3e:7e:33:
d4:ec:5f:bc:0f:96:ad:f7:7f:fa:f1:08:72:d6:cd:
1b:3e:b1:0d:26:4e:f6:a0:02:fa:44:08:0d:f3:81:
89:3b:d1:a1:e4:d9:3c:52:d4:66:08:bd:f0:a5:4f:
32:5b:be:a4:c7:25:6e:8f:0a:36:8d:99:df:30:2d:
e5:c4:20:2b:6f:5e:15:a8:e5:39:d6:b1:d1:d8:ae:
d5:d5:62:d5:a7:f0:59:0b:94:fc:bf:90:50:8d:03:
bb:fc:64:2e:40:a1:e9:88:57:ba:bb:87:59:de:08:
d4:7a:0b:c6:e2:a5:e6:85:a2:1c:f7:0d:80:2c:6e:
21:87:4f:26:94:9f:ce:05:d2:c9:0d:f0:39:3c:ca:
3b:f7:fa:1f:21:a0:bc:3e:fc:77:fd:d7:6e:56:99:
f1:d6:91:f6:dd:64:44:c0:0b:1e:c9:a3:ff:89:c0:
d4:5e:d5:86:e3:60:70:14:64:b9:36:42:e4:3a:ea:
de:bb:a0:d0:47:4a:bc:73:7a:d6:df:89:c8:d9:d8:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:14:10:6A:FE:7C:CB:1F:12:CD:0E:97:58:16:E9:CC:18:7F:12:6F
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:54:8b:ce:6c:c9:a9:33:41:df:ef:3a:47:bf:e1:07:e6:7b:
e5:44:88:aa:4d:9a:2e:e5:8d:bc:2b:00:c9:a2:62:60:ea:dc:
fa:a6:45:3d:44:a0:21:46:a7:c1:9d:57:71:d0:10:1c:68:ad:
af:40:ac:15:e6:e8:f1:6b:eb:b1:9e:10:8c:a7:bb:db:4a:c3:
65:91:e5:31:49:62:59:5f:75:9c:30:8b:e0:ea:ec:bb:75:17:
11:4e:e5:4b:b0:e9:6a:cc:5d:83:ac:10:95:04:89:1e:a6:6d:
5e:ad:39:ce:58:bc:77:72:b5:0e:64:9a:f7:33:0a:64:e4:6e:
a7:f9:0c:6a:0a:e1:9a:4a:e7:c4:a5:3a:5e:10:5c:76:23:0f:
ca:ec:c2:6c:86:46:76:96:ef:71:f6:d6:41:dd:e1:77:27:fb:
90:2e:80:42:b4:05:3a:9b:5c:bf:72:26:c2:c4:64:90:53:a9:
55:a5:d5:5b:53:28:52:86:eb:d7:da:1a:ab:d8:05:d1:fa:d0:
55:5c:d6:60:06:78:c2:a1:3c:cc:52:29:1b:ac:92:cd:e6:d9:
1f:da:91:96:fb:88:f8:fa:9b:58:35:e5:39:48:61:fd:e0:c2:
40:3f:eb:15:3b:11:b3:cd:2d:b2:75:37:67:d6:88:73:7d:d4:
62:48:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:29 2025 by rpki-client