Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: xnswXCJYp33alAd55V6GWWouNedhH726Oy0Pb5lbEtg=
Subject key identifier: CB:6F:99:7D:A8:A6:44:63:F9:97:83:B6:4C:E4:A0:38:D7:85:60:BD
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 0197B632B93527C5C56197C0911C0C0FDC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0525
Signing time: Sat 28 Jun 2025 11:01:06 +0000
Manifest this update: Sat 28 Jun 2025 11:01:06 +0000
Manifest next update: Sun 29 Jun 2025 11:01:06 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: 9glOWKLVMXKvZpy+owtU2/IiOu1cBLr2wjWejKuIMUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b9:35:27:c5:c5:61:97:c0:91:1c:0c:0f:dc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Jun 28 11:01:06 2025 GMT
Not After : Jun 29 11:01:06 2025 GMT
Subject: CN=cb6f997da8a64463f99783b64ce4a038d78560bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:1b:f8:2f:96:a0:24:92:db:9e:be:0d:28:
d8:e4:4b:8e:5b:4b:25:cc:ea:72:89:29:11:ef:3c:
bc:f1:5a:25:af:8b:4c:47:ee:43:ab:70:2e:b0:3c:
99:a5:4f:37:85:e8:c5:bb:52:31:2b:66:3a:89:f2:
15:c9:30:3c:0d:6e:74:e0:7b:d0:b4:79:89:fd:7c:
b9:3d:88:80:bf:01:2b:cf:ea:81:e7:85:b5:64:44:
a5:df:21:fe:63:91:e4:9c:12:5b:85:61:d2:45:06:
77:82:53:c3:39:91:7e:fb:5d:8f:08:0f:b3:6b:80:
e2:47:e6:95:3c:51:ab:31:71:f2:99:c3:b1:57:b2:
97:a5:c2:16:d8:49:09:f8:97:b5:c3:23:54:ab:f2:
3c:06:45:91:64:a4:b6:31:94:dd:ae:e4:ef:a6:01:
1d:d1:e8:a1:d1:0e:28:9a:48:61:71:12:6a:ad:94:
3d:6d:30:9a:04:85:a4:dc:8b:f3:b3:b5:4d:46:17:
12:99:6e:a2:5b:68:09:6c:df:cd:5f:1c:25:9e:6e:
6a:3f:66:38:37:00:dc:c3:e4:0a:86:b3:2b:84:a3:
94:46:6b:fe:bf:f9:7c:1a:93:2d:cc:32:dc:b4:58:
63:fa:d2:0f:03:85:55:d8:7f:96:ee:19:c2:ba:dc:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:99:7D:A8:A6:44:63:F9:97:83:B6:4C:E4:A0:38:D7:85:60:BD
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:e2:7e:03:63:e3:e8:35:e3:f2:0e:67:73:82:f7:ea:22:
19:d0:b2:da:5b:89:e8:da:ed:17:37:f4:96:7e:c8:7c:6d:3e:
9f:87:6a:c3:dc:33:38:3f:36:23:c3:59:7d:d7:97:06:76:2e:
1b:55:ab:63:9a:d4:2e:c3:17:7c:4b:59:52:f0:17:02:a3:65:
43:cc:2b:9d:fe:e4:5b:97:f6:05:45:a2:9e:d5:70:0c:e1:1c:
90:92:36:39:22:8c:e5:c2:e2:07:03:6f:7c:4a:51:31:b3:08:
d2:ea:e7:26:9a:b0:ce:73:6e:a5:9c:39:b5:09:fd:55:09:b9:
70:5d:20:49:8b:8e:ac:5f:ef:41:32:d3:64:e9:e2:5b:cc:ad:
0a:a1:3a:65:c1:c7:f5:8f:a8:a7:54:ec:c3:24:f9:3c:65:c5:
2a:60:65:24:91:2d:39:25:40:50:41:bd:f0:50:b4:e1:eb:f3:
ac:9a:29:4f:51:09:03:62:b5:2a:9c:7d:61:dd:94:23:15:28:
bd:b1:92:d2:eb:bb:ba:63:58:f0:3c:b6:df:6d:f6:9d:ea:19:
fa:25:b6:98:72:be:9e:ef:f8:55:3a:94:f5:3c:7d:61:5a:61:
d4:10:01:22:6f:c2:23:93:e0:3a:dd:9c:c8:ed:14:5d:d3:4e:
31:9b:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:49 2025 by rpki-client