Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: 6ncO66iiJTiRU+l4xw+s1nC4PYH3qGjrVgDzDpbVjfU=
Subject key identifier: 2D:92:C5:48:B3:5C:7A:B2:F3:E7:01:AE:84:7C:FA:5D:B6:FA:AE:DD
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 0197B6A24A36B09F72F74B7C67272C000CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0EC0
Signing time: Sat 28 Jun 2025 13:02:58 +0000
Manifest this update: Sat 28 Jun 2025 13:02:58 +0000
Manifest next update: Sun 29 Jun 2025 13:02:58 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: FH9urdFXZQt2u/rupJQ+ugsQaZScCX8IX4Tv5npttAk=)
2: nWIGQEEDzaoVvT_y5hPxRiP1qn8.roa (hash: uGDWeypcq1B/eKXj8B8fn9FgOmQqtHY/Hs+n7XduT00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:4a:36:b0:9f:72:f7:4b:7c:67:27:2c:00:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Jun 28 13:02:58 2025 GMT
Not After : Jun 29 13:02:58 2025 GMT
Subject: CN=2d92c548b35c7ab2f3e701ae847cfa5db6faaedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:fc:99:07:7c:77:f2:86:1c:f8:f3:61:ed:
c2:88:fc:c0:bf:ec:8f:4e:ac:63:ee:f6:aa:c9:4c:
38:3e:8a:4c:5c:f0:20:03:bc:e8:dc:cd:0c:7f:95:
4c:bd:74:f4:13:a9:f5:37:ec:c4:42:0b:1e:30:fa:
0e:c8:a4:61:b9:95:96:f9:a2:e4:84:59:5c:38:d2:
01:b8:fd:fe:b9:de:c5:95:ee:9f:bd:b6:a4:78:78:
5f:bd:35:47:ee:65:73:6b:72:75:7d:b9:3b:17:49:
a1:4d:ce:0c:f4:d6:3c:4c:bb:91:ef:35:ad:2a:49:
ca:b6:3f:d2:83:44:f2:bd:ac:95:a0:f4:58:49:ef:
27:a8:fd:21:9c:ea:d0:ef:bc:74:cd:ce:68:49:34:
d6:09:45:b0:b3:e9:2c:1b:b6:ba:09:f8:fa:4a:37:
5f:8b:c0:6e:f6:a7:92:47:77:7b:2e:58:88:b1:d1:
ba:30:5c:2b:12:dd:ed:bc:c2:61:ea:18:6a:76:7b:
30:18:49:d9:5d:56:09:13:55:5f:2c:6b:68:e4:28:
2d:cf:3e:a3:05:2b:a3:4f:86:f0:94:be:97:c1:dc:
3b:ed:a3:08:84:03:b6:17:47:05:b5:8d:38:09:f9:
ff:62:51:e9:90:45:ab:94:5e:74:b6:70:70:1a:11:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:92:C5:48:B3:5C:7A:B2:F3:E7:01:AE:84:7C:FA:5D:B6:FA:AE:DD
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:69:dd:85:e4:bb:e1:4d:ec:9b:21:3b:1d:6c:5a:5a:30:ab:
5a:43:b9:7e:a8:7e:7f:d5:c8:43:d1:91:7c:54:69:9c:1c:8d:
69:1d:03:3e:d5:a8:f2:42:a1:c8:d8:91:0e:9b:3a:a5:45:8f:
aa:e3:79:59:61:81:26:0f:06:8a:45:4d:34:a7:ff:49:46:65:
ef:00:cd:eb:20:4d:0b:f7:0e:65:77:f7:f7:2b:c8:c8:25:cc:
61:ad:3e:ae:f8:fa:36:5b:e5:fd:9d:b4:c7:ba:c3:a9:c3:8f:
b3:65:9e:6b:d2:6a:51:8a:69:fb:aa:39:f7:57:6c:82:34:24:
9d:9e:c5:74:98:7d:5e:42:34:cb:af:18:29:40:fe:7d:33:37:
d4:f1:37:df:17:bf:e3:50:49:d5:a4:7b:aa:b4:14:93:c9:1e:
ab:34:cd:b2:0b:d2:a0:25:22:9f:87:13:7b:e9:7b:fb:2d:dc:
b9:48:b8:3b:4e:99:dd:48:04:67:c5:66:aa:2a:e9:de:24:00:
ff:0f:a2:4e:cb:f8:f9:e6:6f:54:84:47:cb:c0:21:1b:e7:6f:
37:0b:28:b7:59:d6:e7:42:8f:d6:1e:18:b5:2c:cf:41:79:2f:
97:a0:b7:71:1c:e5:dc:77:cf:13:4a:ab:bc:23:28:2a:01:2e:
b9:b4:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:29 2025 by rpki-client