Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
File: HEwmJz2igh_OJgdaoKbiMB7ISSc.mft (raw, json)
Hash identifier: igWtt+aiZwDqxre335n7xcZz2yplD1KoN+F5aa6bD3c=
Subject key identifier: 78:0E:85:BE:FF:F5:82:D8:1B:B5:7C:0B:74:A3:1F:2D:F3:48:56:64
Authority key identifier: 1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
Certificate issuer: /CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Certificate serial: 0197B7EA52EDCDF8B175C726742FA77A9B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 19:01:16 +0000
Manifest this update: Sat 28 Jun 2025 19:01:16 +0000
Manifest next update: Sun 29 Jun 2025 19:01:16 +0000
Files and hashes: 1: 5MK1ewnt7LozxEmddZiWa3omfKc.roa (hash: 7+tCKj1f1iwSFAN/o1/yY8fVwb73KSasEYzwGjDKXO0=)
2: DeHazeP3A9wAumTO_Rmx5RqWaqs.roa (hash: 0hOPuiiQ+UKk5lNFYgiHmEshvjQhpp/6FLqfnT4DM3I=)
3: HEwmJz2igh_OJgdaoKbiMB7ISSc.crl (hash: hgwXPEh4BUlBK/nzCiMm174uPJyBv+CAtroitfjB/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:52:ed:cd:f8:b1:75:c7:26:74:2f:a7:7a:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4c26273da2821fce26075aa0a6e2301ec84927
Validity
Not Before: Jun 28 19:01:16 2025 GMT
Not After : Jun 29 19:01:16 2025 GMT
Subject: CN=780e85befff582d81bb57c0b74a31f2df3485664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:92:7b:a8:4d:b7:da:ba:6d:68:37:9d:a3:
3d:74:d7:0b:a5:75:58:f7:e4:06:8e:19:62:28:d2:
49:c0:c9:d5:7f:ac:62:bb:bf:75:0c:a7:73:dc:f8:
aa:b8:1f:3d:ca:2b:3c:da:94:56:68:24:ab:d5:06:
58:25:84:da:9d:ef:8e:f5:23:28:1c:fe:12:ea:56:
8f:b3:5c:79:e8:87:b3:92:3d:b1:d6:2d:8f:77:87:
1d:10:77:aa:97:ac:51:32:0a:4b:e5:da:bb:b0:a9:
5b:b8:52:4b:71:66:11:a3:16:24:56:bc:c5:cc:fd:
77:ef:5c:0a:c1:38:4b:1b:44:42:7f:03:02:eb:cd:
fd:df:27:d8:93:5d:99:2d:da:fe:79:66:19:bf:1d:
63:99:b8:70:d4:9f:94:67:d4:0f:7a:e6:10:ad:15:
54:e4:35:cc:42:bb:64:06:e9:1e:70:94:f2:0c:93:
17:28:7c:08:a6:1e:e5:86:e6:63:4a:e9:de:a1:e4:
98:04:c8:7e:d5:73:71:f4:75:cc:ba:06:eb:01:f5:
c0:ad:8d:eb:93:d8:38:5e:c3:9f:13:33:d0:94:02:
8a:5a:56:3c:c8:51:4e:17:f4:09:a7:75:0a:f5:1c:
27:97:27:68:68:24:16:81:5c:a7:fa:96:69:dd:8d:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:85:BE:FF:F5:82:D8:1B:B5:7C:0B:74:A3:1F:2D:F3:48:56:64
X509v3 Authority Key Identifier:
keyid:1C:4C:26:27:3D:A2:82:1F:CE:26:07:5A:A0:A6:E2:30:1E:C8:49:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HEwmJz2igh_OJgdaoKbiMB7ISSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/545cce-af11-4ef7-9a5d-d35b430af26d/1/HEwmJz2igh_OJgdaoKbiMB7ISSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:42:2e:ec:94:72:0b:5a:99:43:f6:53:f3:aa:0a:18:4c:76:
44:ef:21:93:70:c3:c7:a0:2e:9c:30:62:28:0e:76:4e:ff:b2:
04:ee:a0:e0:ef:28:20:42:c9:b8:fa:7f:fb:97:fe:93:00:c2:
03:04:67:70:8f:20:3f:27:fe:f8:52:06:a2:02:46:e6:c8:45:
25:b9:ff:44:8f:1b:d9:99:10:b0:58:cc:23:1f:a9:c4:c1:02:
e3:d6:28:13:31:c6:f6:f7:6b:c7:5a:f5:c6:eb:4e:49:eb:44:
a6:a7:55:39:6e:1c:ba:5e:e5:d7:8e:2b:1b:6b:6b:6d:30:d3:
b8:7e:d6:2c:fb:cc:37:03:4a:1f:1d:a7:e4:7b:bd:96:92:4f:
ec:79:f3:ce:77:8b:79:17:71:85:b1:81:43:09:10:c2:4e:fe:
e0:90:cf:d7:03:40:60:e5:15:71:2b:f6:91:93:8e:b2:c2:65:
58:03:63:d0:59:a9:90:c5:66:fc:2c:9b:b6:9e:8d:16:89:52:
94:12:f9:1b:ad:46:99:aa:51:50:b7:6c:a9:e4:a4:5d:09:60:
28:70:6c:ad:31:f6:1a:02:d0:ee:50:1e:0e:b6:4c:89:48:1b:
b2:ff:8d:e4:12:b1:c7:8d:1b:95:9c:4d:a7:19:bf:0d:5a:56:
6b:c0:75:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:38 2025 by rpki-client