Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: R0RqSkzAfYeajbqt84vkaUyZsUFfL8Yb+SqD7fwSQFs=
Subject key identifier: DA:90:7A:E1:96:8D:C6:2E:CF:79:34:E5:92:57:C0:0B:31:A2:49:BF
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 0197B8213274F956274981FD1C94C4D32F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 20:01:12 +0000
Manifest this update: Sat 28 Jun 2025 20:01:12 +0000
Manifest next update: Sun 29 Jun 2025 20:01:12 +0000
Files and hashes: 1: 0EXTA2fh52m_pdzndlQONOR-ALo.roa (hash: 6rMWco6WBnZhVNOyIqX9uMPGJDuagIsvvOicEopd/aI=)
2: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: YehIQch+1og3VvF6oZPv9rAosxU/jYH2xWHgMD94uPw=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:32:74:f9:56:27:49:81:fd:1c:94:c4:d3:2f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jun 28 20:01:12 2025 GMT
Not After : Jun 29 20:01:12 2025 GMT
Subject: CN=da907ae1968dc62ecf7934e59257c00b31a249bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:24:7b:ff:d8:ab:20:d0:15:52:68:f3:95:
54:6c:09:d2:da:cf:e3:56:27:d9:99:ae:33:26:da:
3b:f1:62:62:2e:4c:0b:2e:38:1c:1b:cf:15:94:55:
6b:fd:47:07:18:66:6d:4b:fd:e6:5d:f7:36:e6:2f:
a6:82:25:8b:8b:f4:76:ca:82:7e:14:3b:d2:c2:66:
0a:79:df:4a:f1:75:db:6f:15:14:33:36:90:7f:19:
11:51:c7:f0:85:75:ef:91:3d:87:af:28:e6:6d:d3:
2c:21:2f:4b:2f:fd:d0:c9:10:f6:ca:7b:9e:30:dd:
72:22:18:23:60:a3:2b:94:a1:ca:1b:55:24:1c:b2:
8a:03:ad:ff:5c:ba:ce:76:3d:f9:8d:49:13:bb:0e:
27:82:85:6e:19:db:f5:37:27:73:20:3e:9a:e6:57:
ff:78:3b:94:a3:f8:8b:a8:b3:69:ee:f8:0c:e2:0a:
55:43:32:c9:a9:ad:5f:d5:f5:20:06:ef:5d:59:35:
e0:ca:61:a0:cb:56:ac:c9:30:76:a5:eb:d1:47:e5:
fb:64:39:43:1c:fe:42:6f:f2:13:b0:48:09:d3:a3:
e2:ac:dc:72:24:04:80:a0:53:26:59:6a:60:99:d8:
25:95:de:44:cf:28:80:7f:07:e3:db:93:8d:4c:7b:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:90:7A:E1:96:8D:C6:2E:CF:79:34:E5:92:57:C0:0B:31:A2:49:BF
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:d0:58:a7:a1:4f:d3:6b:fd:2f:98:09:3a:bc:67:fb:b1:
70:0b:af:c7:e1:ea:b1:c6:30:d5:0d:d7:68:5e:43:8d:09:dc:
90:82:ef:20:6b:11:73:df:74:97:c2:00:65:71:3f:da:7a:7a:
9d:3d:02:9e:c9:8b:dc:8b:23:a8:e6:44:5b:3f:04:b0:4f:9e:
ca:e4:72:19:2f:8c:c4:70:b8:a0:31:9a:48:f5:5c:95:c5:7a:
f3:2c:34:d0:e6:17:f4:e3:75:01:f7:11:99:6c:48:4e:cd:9e:
c2:30:79:ee:82:28:38:33:66:70:93:1c:e2:c1:44:a4:b1:45:
3a:28:f6:05:e9:0f:b3:f7:b6:8f:09:36:11:ef:2b:f9:7c:b1:
1b:3e:a6:62:a3:56:41:93:1b:c6:e4:51:5b:aa:52:cf:4d:a0:
16:06:d9:b6:24:80:95:1d:4b:49:8a:2c:f3:30:99:bc:47:8d:
4a:37:d2:d0:52:fc:88:40:1c:7a:9a:d9:d0:54:7c:3f:10:8f:
ab:f5:f3:e1:28:bf:8f:50:19:2f:df:12:03:26:17:e8:30:ac:
3b:7f:ea:2a:7c:b2:b9:12:67:29:cf:16:4a:e3:e3:cb:c3:7f:
03:ae:c8:19:1f:cc:1f:cf:9c:e5:68:16:db:13:7d:38:d1:11:
a4:b6:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:19 2025 by rpki-client