Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: 6A+I65miI27radtEMxsclsYZCr2EbUXYsOXWyiClR6w=
Subject key identifier: CA:C5:66:70:C6:26:76:AF:5C:D3:09:9F:35:26:72:01:6E:89:73:8B
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 0197B6A1609D521C836616FDE62AD6EB277F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:01:58 +0000
Manifest this update: Sat 28 Jun 2025 13:01:58 +0000
Manifest next update: Sun 29 Jun 2025 13:01:58 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: +fksJQ9p5ijIp+eQjvSsII1HugRsom7Jb6u6yIQsthI=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:60:9d:52:1c:83:66:16:fd:e6:2a:d6:eb:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jun 28 13:01:58 2025 GMT
Not After : Jun 29 13:01:58 2025 GMT
Subject: CN=cac56670c62676af5cd3099f352672016e89738b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:9f:de:79:6a:b3:fd:90:ea:64:88:13:bc:
ac:f5:51:b2:62:94:4d:e6:a4:fb:3c:ac:c9:dd:8c:
80:b6:ba:92:eb:ae:44:74:62:01:06:43:91:17:49:
5b:f8:62:69:01:55:db:8b:02:19:23:9d:10:62:56:
0a:26:10:fb:c0:95:20:ad:7f:45:74:3b:58:2e:e8:
d5:d3:92:42:51:99:e2:e9:df:91:ed:26:73:f3:4d:
e2:31:69:cc:ad:51:1e:23:47:be:5d:fb:0b:af:fc:
fd:3d:6c:9d:77:1e:87:7b:24:e1:50:1c:57:a8:89:
67:61:c7:ae:34:3a:65:4e:07:b1:b2:9e:82:10:55:
9e:cc:45:54:36:3e:24:12:28:ca:8b:1c:b7:06:8a:
0a:20:4b:23:08:0c:9c:38:b1:8d:7c:82:66:a5:94:
b2:37:ca:08:9b:5f:42:01:ce:c1:a2:03:b9:91:77:
52:36:32:d0:ba:7f:72:65:2a:f0:34:4e:2e:38:ad:
d2:f3:02:0f:22:dc:79:79:71:a4:b9:0b:45:5f:24:
f6:41:2b:b2:dd:77:40:0b:5e:a4:5f:59:f6:d9:cb:
6e:21:4e:d4:d1:18:70:bd:db:f2:6b:f3:99:9e:7c:
18:f0:f2:c1:32:41:81:98:40:db:69:b2:77:d5:34:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C5:66:70:C6:26:76:AF:5C:D3:09:9F:35:26:72:01:6E:89:73:8B
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1e:16:6f:a0:b6:68:dd:48:ea:1c:fb:0a:82:47:29:38:3f:
60:9d:c8:87:8b:64:90:d5:fe:7e:67:76:ab:d3:40:39:67:0a:
5b:14:56:fa:ca:79:9f:09:79:a1:81:ee:10:59:a5:0c:3b:4d:
d8:50:1c:55:cc:75:35:0b:a5:0e:9c:74:7d:bd:2b:cb:bb:61:
ca:49:a1:47:c1:79:59:b3:8a:11:da:dc:dd:9f:cb:5c:68:3c:
1e:11:67:61:3b:be:10:36:90:29:6b:9f:b6:4f:68:fc:d8:13:
09:d9:5d:0d:ff:52:da:09:6e:26:64:44:a6:e9:66:9f:6a:04:
7c:88:8e:c3:fe:2b:40:2c:c1:c8:ba:ee:18:d3:6b:5b:0d:e0:
67:94:b2:a7:9a:57:7c:93:51:1e:fc:5c:5c:c0:53:f4:ad:b4:
83:4d:46:0d:38:21:5b:3b:23:55:30:2a:c4:9e:cf:6d:1a:8d:
a2:b3:64:bc:51:33:a6:cf:a7:44:ae:24:3b:48:58:c0:9b:9d:
58:2f:04:4f:0c:cf:ba:36:3b:90:4c:fb:dd:18:bf:46:e9:c7:
c4:ca:c3:2c:ab:4e:4f:6b:68:11:ee:c0:69:b3:7e:e5:82:75:
ae:83:42:c6:d1:fb:7f:dc:e8:dc:fc:a6:a2:06:50:6e:ef:5c:
9f:b8:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:00 2025 by rpki-client