Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: Ut4cdRzUx2sN+a0wIa6rB5n2rMXkztqMV9IcgXNHONQ=
Subject key identifier: 30:07:2B:18:6A:9E:0A:8B:0A:5A:1D:96:9F:EC:0F:13:96:4C:EB:E8
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 0197B8215849A3B8D3851AE4FA071CB40149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: BB
Signing time: Sat 28 Jun 2025 20:01:22 +0000
Manifest this update: Sat 28 Jun 2025 20:01:22 +0000
Manifest next update: Sun 29 Jun 2025 20:01:22 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: b9tggDfPfWSfH0GikF9RW0hP0cQmbT+73OzjWfyxCa4=)
2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:58:49:a3:b8:d3:85:1a:e4:fa:07:1c:b4:01:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Jun 28 20:01:22 2025 GMT
Not After : Jun 29 20:01:22 2025 GMT
Subject: CN=30072b186a9e0a8b0a5a1d969fec0f13964cebe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3f:62:a2:9d:59:02:ec:8d:ef:12:0a:6b:5a:
1b:55:36:45:cd:c3:7a:8d:08:75:9b:e7:b2:87:68:
93:4f:da:2a:9d:e2:51:32:5f:32:6c:c3:ba:c5:79:
bd:f4:cf:85:e2:e3:fd:02:92:9b:7d:44:a2:f8:e2:
72:54:16:ca:1f:7e:7d:1b:26:73:3c:94:d0:7f:fa:
f6:9e:4b:e4:38:c9:81:7a:fe:7b:52:1e:f7:42:11:
76:14:9b:1d:4f:28:45:9c:e6:d0:d8:55:36:f1:cd:
39:ee:b3:7b:53:e5:0d:be:a5:9d:0c:c5:73:d5:f0:
c0:c5:32:69:aa:25:ba:3b:44:53:68:db:88:4f:7d:
e1:97:3b:d3:ac:7d:48:4b:32:84:5a:17:56:97:2a:
da:bf:75:54:5f:fb:48:65:42:8f:40:9e:2f:e8:1a:
e6:e5:89:09:13:36:c2:52:02:29:bf:a2:b0:9f:34:
81:f5:1c:9a:bd:2e:d7:50:97:08:04:f2:ee:9e:cf:
86:af:c7:94:ba:e7:ae:e0:ef:83:c9:48:f8:97:68:
23:83:36:ed:de:88:97:09:5e:89:3b:ba:a7:93:77:
94:69:4d:a0:e6:82:4c:dd:72:35:db:a7:a4:a3:13:
ed:12:92:93:92:69:11:ee:55:93:f3:d1:99:c4:4c:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:2B:18:6A:9E:0A:8B:0A:5A:1D:96:9F:EC:0F:13:96:4C:EB:E8
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0e:df:8e:4b:96:64:c8:02:dc:f3:24:7c:7c:06:9f:ec:97:
d9:b3:2d:b9:fe:d1:c5:07:77:93:cb:55:c0:39:29:03:d1:fd:
1a:cf:aa:fe:eb:f6:f2:37:72:fe:b6:9e:c8:b2:05:07:7a:48:
47:a9:76:17:bc:69:2e:07:74:1e:8a:aa:30:cb:57:ea:cb:aa:
f0:9d:18:7f:5b:39:0e:df:bf:a5:a2:6a:a4:2d:8d:de:4d:c0:
7f:b3:94:11:5c:35:49:90:fd:9c:f0:53:95:b4:0b:33:fc:d4:
80:b2:c3:2d:ff:69:b4:8f:36:83:6c:99:0c:b4:3a:4f:7a:95:
09:8c:a3:b5:b9:0a:8f:06:a4:0e:f3:32:49:6a:4f:fa:49:63:
26:d0:ad:08:8b:5b:9b:14:d9:e6:32:0c:22:3c:f3:20:22:82:
1a:8b:aa:94:f7:ab:fb:fc:b1:a5:0d:fc:8e:27:79:85:8d:43:
00:a7:b9:44:7a:19:e4:25:f6:e7:cc:b1:0a:76:1f:cf:fa:b6:
92:bd:9a:a3:f3:77:5a:51:ed:b8:c9:5c:d6:58:30:0c:a2:23:
0d:d7:01:ca:6a:d2:fe:ad:45:0b:83:78:af:d1:4c:a0:45:46:
b5:5a:07:50:47:9e:2a:98:30:aa:00:69:ba:98:a9:88:39:51:
55:e6:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:07 2025 by rpki-client