Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier: 8PqRsVpWbvR4AprjcwJhr89wlJpJXSHnbLSws8Ot1bA=
Subject key identifier: 2D:86:53:08:85:83:A1:5D:E1:D2:BE:A6:40:0C:B6:1F:03:F1:73:29
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 0197B7EA52D4C62D4AED577297E44C559B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number: 0DFF
Signing time: Sat 28 Jun 2025 19:01:16 +0000
Manifest this update: Sat 28 Jun 2025 19:01:16 +0000
Manifest next update: Sun 29 Jun 2025 19:01:16 +0000
Files and hashes: 1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: TAdk9+CrSRQ9D2lpbay7FW3B8cLBWkt1ij/QmFmk+Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:52:d4:c6:2d:4a:ed:57:72:97:e4:4c:55:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Jun 28 19:01:16 2025 GMT
Not After : Jun 29 19:01:16 2025 GMT
Subject: CN=2d8653088583a15de1d2bea6400cb61f03f17329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:ed:e4:d9:87:f9:c5:28:c5:9f:03:60:dd:
76:61:93:b4:42:bf:08:f4:f8:bb:0f:be:78:7c:5a:
68:f6:b3:99:fc:ec:3f:c8:5b:da:69:27:95:dc:b6:
46:3b:6d:b8:f0:98:d0:5b:47:71:d7:c6:ca:4e:2c:
64:7b:5e:d1:c6:ba:d8:b9:97:1b:97:b2:a0:fd:e0:
ca:c4:44:37:ca:18:48:d1:38:ca:ff:c0:6e:7f:d7:
f0:20:9a:f2:0b:ed:05:88:ea:85:58:c8:c1:7c:f1:
58:02:e0:f8:7c:34:3a:23:64:e6:55:eb:86:34:d7:
da:45:9e:2e:aa:48:9f:f5:dc:d7:41:f5:a3:23:ad:
65:64:b5:ce:a6:9d:58:de:fd:34:6b:62:df:7b:b5:
87:a2:be:68:84:84:f7:f5:31:32:7d:1e:78:5b:b1:
4f:16:e4:0e:0c:34:b0:38:23:18:6a:6e:e4:f5:59:
f1:93:02:da:10:8f:3f:84:8b:b6:28:19:57:6b:0e:
aa:4e:f0:a9:3e:82:7b:cf:45:5c:ba:7d:19:f9:e7:
ef:0b:a5:c2:2c:f6:9b:54:b2:18:9e:70:19:82:53:
d1:20:dd:75:39:70:8c:87:47:d3:d7:e2:be:d3:c3:
ba:3c:64:48:1c:e6:98:8f:a5:78:87:f0:6f:29:be:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:86:53:08:85:83:A1:5D:E1:D2:BE:A6:40:0C:B6:1F:03:F1:73:29
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:88:50:eb:58:c9:4a:b6:54:36:de:bb:43:8a:59:07:f0:c1:
91:89:b5:af:96:92:6a:ce:1d:b0:87:3b:e8:5a:69:e0:50:90:
62:22:1e:7d:a1:c8:eb:56:28:a8:fd:79:47:e1:c4:34:27:7d:
fb:04:8a:f2:d2:15:84:72:5e:63:9e:b7:12:f1:ce:73:b4:90:
73:b1:4d:3c:ab:d0:70:56:15:b3:ab:60:74:a0:a9:c2:2d:6d:
71:34:13:cd:95:e7:71:5b:57:42:39:29:3f:71:1c:1f:d5:51:
3b:71:7d:fc:92:22:c6:f3:fb:d1:b3:6c:0d:05:2e:38:cc:ce:
58:0e:0b:ba:9a:0a:67:09:02:30:f8:eb:55:1b:05:60:7e:e7:
d3:78:77:a4:39:07:3f:61:f5:67:53:16:e4:98:39:91:82:20:
3a:00:00:b4:0d:fb:9a:7a:42:c8:13:a0:ff:bb:fc:0b:9d:4f:
96:e5:7d:db:95:67:25:c1:56:ea:bb:24:08:9a:c7:a2:42:2d:
96:37:9c:e1:35:67:b3:a7:13:0c:c6:ee:46:70:2c:aa:c8:00:
8c:3d:49:64:12:4a:33:22:03:93:4d:b6:a2:b3:89:93:a9:3c:
26:42:f7:cf:1c:04:92:b7:e4:eb:a9:cf:8d:bb:ae:e6:ff:97:
83:60:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:34 2025 by rpki-client