Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: 6oT5EUXQmYJOidNZAysUEVHg3juzoriCyxZL/gsZe00=
Subject key identifier: 56:21:B8:CC:FA:BA:78:2E:97:FF:C9:D6:05:B5:88:BD:95:D6:AE:66
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 0197B70EB86C96BF3E9599AF7380DCBC169A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 064A
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: nHTpWIwX/uYq6489UqwULkRlitBTCLEp7/+GntabSck=)
2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b8:6c:96:bf:3e:95:99:af:73:80:dc:bc:16:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=5621b8ccfaba782e97ffc9d605b588bd95d6ae66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:8f:4b:ab:a3:36:c9:60:5e:9c:f7:f3:97:
08:b8:7b:e5:51:b5:b8:cd:78:c6:2a:a2:e3:19:dc:
3a:e6:c3:b8:8e:dd:09:e5:37:cc:aa:78:da:3b:a6:
7d:ae:29:fc:57:98:67:d5:21:6b:31:5c:5d:95:7f:
8e:81:fd:8f:65:b8:a7:32:8e:57:98:56:5d:2d:d4:
1d:de:0c:10:27:5d:f3:17:20:db:64:75:53:8f:65:
e4:54:b2:b5:b0:05:3d:9c:57:21:d8:48:ab:4e:4d:
e4:bc:90:12:4d:00:8d:41:3d:b2:63:90:63:de:3e:
5a:04:5c:d8:1e:cd:5e:48:f9:a1:d9:ff:90:c7:34:
ad:64:16:e3:a8:66:9d:40:60:13:cd:eb:87:ee:65:
cc:0b:47:27:f4:1b:db:6e:5b:1b:af:0b:e4:5b:a4:
c4:67:51:45:70:d2:64:88:43:a2:91:92:85:2c:b6:
5b:3e:ef:1b:e8:22:a3:25:ec:53:f8:02:15:57:06:
07:81:97:09:23:f9:3b:fc:99:4a:f2:be:02:e3:8b:
00:b9:78:e1:84:68:e1:52:a2:30:0c:10:eb:ae:35:
b9:83:04:cf:c1:47:79:82:42:34:12:d4:fd:52:11:
f8:48:ea:47:84:29:3a:21:a1:b9:55:3a:e6:5c:0d:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:21:B8:CC:FA:BA:78:2E:97:FF:C9:D6:05:B5:88:BD:95:D6:AE:66
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:80:65:ce:fa:e9:35:56:19:f7:f4:03:45:4b:85:eb:7c:59:
eb:51:d1:1f:f5:7b:58:12:61:43:e9:17:6f:e6:36:31:40:79:
aa:e5:54:7c:e0:a6:fc:a2:f4:d2:e3:05:2b:2b:22:ae:85:e9:
f1:3d:3e:11:32:25:3e:22:28:f3:ac:93:39:91:e6:04:69:2f:
ce:35:6d:ab:52:ba:f2:56:35:0e:d6:d3:b9:6d:6d:9e:fb:c4:
23:2c:5f:89:dd:c7:b6:bc:66:1f:f3:6e:7b:05:25:f1:2c:f3:
9d:2d:2a:d6:0f:02:b6:51:45:5a:6a:5a:4d:d2:64:bf:ad:4b:
00:59:1f:4b:d1:e9:07:59:51:c5:0d:52:fc:0d:a1:fa:d5:15:
42:e7:01:6d:c5:68:b0:b6:37:8e:cd:9f:3f:e3:4a:b4:25:52:
5b:5b:b9:8e:0d:29:cf:42:fa:ae:63:a1:ca:90:47:bb:a0:14:
d7:bb:96:7d:8f:d8:53:a6:98:33:21:7f:cb:35:72:6b:7c:ef:
b5:1a:0f:5f:2a:8f:ba:72:8f:46:a6:5a:f9:5d:46:9a:c1:ab:
2b:e7:1b:46:35:cf:80:a5:df:88:c4:ff:cd:78:5e:47:58:c1:
e9:1e:3d:c1:d4:d2:ec:88:49:6e:48:0a:fe:c2:eb:dc:ad:c5:
ab:8a:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:35 2025 by rpki-client