Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: SBASO5dYlivr6oOYnSmcoTuh7UQ8YnjWjToG+CNmNsk=
Subject key identifier: C2:E3:B1:4C:12:7A:8E:DE:52:DE:5C:11:1A:AD:92:A2:88:10:35:99
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 0197B632E9FB1F36EBACEB1693DCFD456A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 11:01:19 +0000
Manifest this update: Sat 28 Jun 2025 11:01:19 +0000
Manifest next update: Sun 29 Jun 2025 11:01:19 +0000
Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=)
2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: hzN3QFN+YgGvalJ46JohDLl7iJwwwa7km928HbDx0nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e9:fb:1f:36:eb:ac:eb:16:93:dc:fd:45:6a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Jun 28 11:01:19 2025 GMT
Not After : Jun 29 11:01:19 2025 GMT
Subject: CN=c2e3b14c127a8ede52de5c111aad92a288103599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:09:70:b4:1a:b1:e5:e1:37:3a:4f:dc:15:
cc:25:67:93:ab:5a:a1:0b:af:aa:0e:52:5a:14:10:
38:e1:87:b4:36:20:dc:28:41:ad:99:d9:d1:80:3e:
64:96:0d:6c:fd:93:ce:b6:5c:de:f2:3f:22:45:e4:
9a:aa:0b:38:b5:9d:40:b2:d0:e5:32:59:de:48:bc:
ea:3d:ae:33:04:ea:66:6a:89:db:87:49:c2:64:77:
e0:b8:ae:87:0b:c7:d1:95:f3:25:ea:20:cb:29:43:
d6:c6:a7:16:46:92:4c:de:98:dc:61:3a:fd:5c:da:
0c:ba:ea:79:a7:b4:d6:03:3a:6e:56:e9:65:a9:a1:
9d:a1:9a:1b:3b:e8:cf:1a:88:61:d8:84:a4:fa:f8:
fb:f3:0c:f9:67:d7:c8:74:b0:e3:f4:60:c6:a7:dc:
70:95:29:59:cf:a7:52:8d:34:a3:fe:b7:7a:8a:a2:
70:6d:04:bd:7b:31:45:9f:96:42:bf:51:54:be:e8:
b6:05:f7:df:8d:96:f2:3c:52:cd:df:52:5e:23:53:
7a:05:f4:45:9a:46:dd:b5:10:f8:eb:b5:72:38:b0:
ff:da:f9:8c:ee:c0:48:76:ad:e7:7b:03:41:25:aa:
83:ef:56:a2:97:5c:eb:bc:e2:9e:97:9a:c8:d4:33:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E3:B1:4C:12:7A:8E:DE:52:DE:5C:11:1A:AD:92:A2:88:10:35:99
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:67:00:db:4b:05:8c:22:35:cd:d3:ec:6a:6f:95:90:8e:f3:
df:45:8f:9c:92:1c:c5:61:4f:42:34:e1:24:2a:6a:86:7b:0d:
59:fa:13:fe:f0:f6:11:2b:06:86:85:e0:45:dd:8c:45:2b:e5:
1b:af:8a:fd:f3:aa:31:c7:af:a8:c6:a8:5e:71:d3:18:98:66:
36:af:96:80:28:c1:22:f0:9c:53:a9:8a:5b:0f:51:94:23:46:
66:75:1b:5c:3b:ed:9d:cb:f4:26:eb:52:90:bf:a8:79:77:da:
c0:23:6f:df:ab:78:ad:bb:9d:73:28:08:a2:0b:da:17:15:fe:
6c:eb:82:79:e4:3e:03:4f:1d:7f:27:13:7b:d4:71:74:2d:a2:
05:e8:32:ff:ff:75:76:52:d9:cc:3d:6b:a2:f2:c2:95:c1:fa:
4f:cd:29:56:4f:a7:ed:fd:96:1f:d6:af:ff:47:70:30:27:b0:
68:98:69:06:35:f0:69:3f:21:86:85:e3:44:ec:da:48:f2:c1:
74:8c:d8:f4:13:39:3e:51:7e:ca:4f:3a:fd:3a:d8:f5:ad:86:
72:a4:e4:8c:fc:6e:8c:54:00:a5:b0:14:4f:7f:07:b6:19:2a:
ce:9e:06:22:16:c5:4c:c6:7d:8a:65:01:78:45:26:41:97:8b:
e4:34:f8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:54 2025 by rpki-client