Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: 0DmEx///Q56HVJzq/LpTyX0Li+7B38VEvNs2wRZYXPE=
Subject key identifier: C3:FB:20:8E:4F:24:41:20:73:AB:75:F3:16:36:C2:26:7B:61:82:02
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 0197B6D79729C81DC3F6CD8BF83B7C72D28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 0F21
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: cnk3+ckkvYj4qfcXTL2VPu11iYfqoOX7vuMZ0E7y7Bs=)
2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=)
3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:97:29:c8:1d:c3:f6:cd:8b:f8:3b:7c:72:d2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=c3fb208e4f24412073ab75f31636c2267b618202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fc:94:51:3c:3e:57:b0:04:cb:21:e6:4a:86:
8b:23:b2:e9:21:63:88:af:36:ca:1f:b7:1b:7e:21:
ca:84:71:af:49:f8:4b:a7:3b:07:93:5b:a0:3c:7c:
63:5f:d1:ac:6f:61:77:c4:00:a4:01:3c:73:25:72:
9d:a1:8a:f4:45:e3:1b:c2:90:48:58:5b:61:8b:2d:
bd:8c:6f:18:d3:83:23:a8:84:f6:8a:74:12:e5:ff:
82:8a:4b:14:da:bf:e2:50:a4:70:d6:43:8c:a4:af:
e8:e2:6f:19:b6:74:2b:38:51:13:9b:ef:76:41:25:
60:6d:06:47:6b:6a:cf:bc:98:de:d4:ec:ae:09:67:
4d:e4:6c:7d:fa:01:2b:a7:6e:4b:1f:34:84:9d:4b:
4f:a3:9a:5a:63:4e:a1:5f:c6:b6:f6:d6:55:43:55:
1b:82:5e:38:00:e3:26:f0:78:dd:4f:02:cb:56:6c:
7d:06:79:cf:04:64:0d:00:01:94:9e:ea:0d:b8:2d:
6d:b3:f2:bd:64:68:5f:09:c2:97:a8:5f:d7:f5:f8:
3e:17:ea:d2:68:f3:de:dc:40:c0:5f:11:18:6e:d6:
64:ff:1d:dd:d5:a1:0b:39:97:04:20:b6:66:a5:24:
19:b0:5e:49:e5:60:08:99:1f:73:22:5a:c4:b9:99:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:20:8E:4F:24:41:20:73:AB:75:F3:16:36:C2:26:7B:61:82:02
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:48:5a:46:e2:00:34:2c:8f:0b:df:c2:4a:5f:e7:fe:5a:d5:
9e:e1:6c:bb:c8:65:8f:95:2e:2e:a8:8d:0c:1e:b9:a6:ff:1f:
7e:28:6b:08:2d:09:9e:4c:14:45:6b:ac:32:de:52:aa:0d:36:
30:77:50:aa:5f:06:e7:f3:0e:a4:02:d9:2b:5f:aa:ea:9a:aa:
a1:7c:2e:f7:f7:76:1b:b3:85:31:22:ec:91:22:3b:3e:ee:3b:
75:5d:c5:76:db:6e:26:73:57:e8:19:9e:83:00:c4:b3:96:c6:
24:e5:8a:11:1b:97:80:65:05:74:b8:38:04:24:45:79:47:64:
08:b4:2b:fb:88:16:da:98:68:73:2d:02:51:b9:29:56:19:a2:
54:f1:07:e0:4c:83:3f:c3:a0:09:88:39:03:a6:06:64:a6:b4:
7b:55:7f:c2:01:75:a7:db:c5:74:f5:8b:fe:a3:58:a7:a9:45:
f6:c7:42:20:0d:f9:0c:c7:59:db:d5:33:85:9c:3d:3c:35:67:
eb:c4:a3:5e:f3:32:f1:7a:12:d4:78:1f:a2:0f:15:35:48:12:
d3:07:dd:68:da:42:02:e4:eb:4f:f8:ff:2c:bc:9f:11:e6:9c:
34:07:ca:8a:1f:c8:e6:78:1f:fa:fe:11:07:6c:e4:c4:53:46:
cb:d9:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:48 2025 by rpki-client