Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: mKlBcWufaalDG9DzjPEZ3xHc3QTulbUl5l5uXMkyODg=
Subject key identifier: E2:AB:9C:F9:5E:04:13:4C:9B:28:54:45:78:74:DB:65:B6:FF:6D:73
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 0197B74566042D5D0C40071949717DC1CA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 13EB
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: VZSzkcv/yCHsKQfTsYnD4yqwmOsHdyoRSNd2DN5TKVU=)
2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:66:04:2d:5d:0c:40:07:19:49:71:7d:c1:ca:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=e2ab9cf95e04134c9b2854457874db65b6ff6d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:9f:fb:74:95:c6:0c:97:6a:96:a4:15:84:
09:28:50:cb:0d:85:6c:c1:71:a0:10:39:f5:22:b5:
c5:7e:90:88:6c:6f:50:c1:f7:68:f6:9a:ac:71:28:
c0:8c:68:58:29:45:0c:0e:6c:ee:29:b4:93:75:4f:
b0:24:74:cf:51:bd:df:84:a7:d2:02:a5:64:7c:49:
4f:42:e5:61:96:4c:8d:ea:ee:94:b0:35:f1:b7:3c:
aa:c5:01:ce:22:cd:2f:30:fd:4d:e0:ef:34:4f:3d:
31:81:92:7a:f5:f9:6b:64:c9:24:fc:7d:aa:a3:43:
32:a6:80:6a:ed:7d:5c:44:cc:3c:a2:db:16:b6:6f:
6d:57:25:d1:28:12:2b:05:2c:f3:38:de:a3:91:48:
58:4d:a8:ec:aa:2d:08:f5:67:12:9a:d8:01:5a:16:
6c:6c:da:67:ed:66:bf:07:7a:f7:a7:19:be:cb:30:
bf:cb:03:a3:67:7a:9d:49:b6:34:90:7e:00:97:f5:
31:77:ad:fb:85:84:08:91:d8:72:fd:37:64:8a:28:
5d:ed:53:8a:27:b5:1a:9c:4d:97:b3:00:e4:75:0e:
12:03:e8:0d:78:6b:69:ca:e3:63:2d:7f:09:4f:25:
3a:c7:ab:e8:17:d5:5d:7f:4f:44:09:e4:7b:32:ef:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AB:9C:F9:5E:04:13:4C:9B:28:54:45:78:74:DB:65:B6:FF:6D:73
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f6:75:d5:ed:b2:78:11:d7:e1:a4:9c:ea:71:a7:89:c2:54:
f0:35:73:30:1b:33:c9:01:6e:dd:76:a2:85:3c:1d:8b:7a:1f:
d2:c6:db:13:f2:a3:c9:80:d5:4c:6d:96:84:04:7f:47:42:d4:
8b:92:8f:2e:32:64:d8:d3:a1:15:ae:92:ad:ff:82:49:0a:fc:
09:a3:32:8a:0d:6a:52:c9:84:a3:1a:59:47:ff:27:44:0c:00:
0a:a9:39:21:b3:9c:d7:91:f4:e4:1f:a7:6e:e2:22:2f:e5:3e:
20:38:e0:f3:23:ae:42:f0:a1:19:74:7f:c1:35:6d:ab:e6:e7:
e6:39:cd:21:a5:ae:14:a1:14:bf:27:5d:a9:ff:fb:e3:17:d0:
c1:83:5f:71:cc:30:80:d3:de:fe:d1:58:d6:a4:c5:91:b4:c7:
5e:58:b4:7d:31:44:f6:e1:5a:2c:27:91:74:71:4a:b3:1d:c7:
69:24:d0:14:b7:b5:a9:57:8d:39:39:72:e5:b9:c9:10:f5:4e:
9d:aa:ea:9a:c2:aa:63:27:c8:f6:1a:45:94:b7:ca:54:12:cb:
23:7d:6a:51:66:50:1f:11:27:92:bf:bc:7f:f7:53:1b:fb:20:
6b:f8:ee:30:ca:a2:37:0f:d6:8c:d3:62:67:69:0d:82:50:be:
60:c3:2e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:47 2025 by rpki-client