Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier: 4IfaTiMgK6Ol+i3NBzQ20FqvpROn39qqUOb2xGfqpfM=
Subject key identifier: B7:01:1D:00:9A:6C:E3:39:33:F6:29:0C:A3:46:82:27:D6:EF:8C:1E
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial: 0197B7453C19D4CA4AFC8AAA36F899A7838B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: 6Ru9vlfSYJp1uEp0RjcuAGUYrpLbhSPD7Zgnonyk4d4=)
2: ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (hash: HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3c:19:d4:ca:4a:fc:8a:aa:36:f8:99:a7:83:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=b7011d009a6ce33933f6290ca3468227d6ef8c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:d8:ba:4f:9b:80:c5:1f:84:65:16:32:5f:
e0:35:c5:df:9c:aa:65:91:6a:67:30:a8:4f:2e:3b:
b3:df:e0:7d:1c:c4:ea:e9:fb:63:3b:96:fc:8c:9b:
a3:56:da:61:1a:3e:33:e0:48:9f:b5:5f:f9:98:6e:
e5:67:7d:33:79:2e:7e:5a:24:c3:88:9d:89:63:00:
1e:2d:5d:24:43:aa:74:77:27:8e:90:53:b5:60:60:
d1:d6:c8:97:a6:00:16:38:3a:46:1e:20:65:b7:73:
2c:fd:50:37:36:fe:9c:12:b8:96:f8:17:d7:5b:b4:
69:74:1c:c0:e3:4c:d8:e4:63:44:dd:dc:56:97:d8:
2b:23:62:12:5a:4b:16:ee:42:bc:19:3f:d2:8e:50:
9f:b9:a6:ac:b0:13:20:06:11:3d:4c:b8:44:1b:31:
a3:3c:26:78:ae:f9:dd:cb:82:63:8c:25:a7:99:e2:
85:89:44:d1:14:f5:20:9e:24:0b:4d:b5:90:9b:b3:
76:30:25:c8:79:f8:64:19:c9:da:fc:31:35:39:b6:
8b:88:23:fb:94:f9:49:ce:90:1f:b9:60:d8:be:f2:
af:b9:1a:c5:02:a2:18:db:23:cf:ed:7f:61:83:a1:
a0:da:1f:7e:f2:a1:bf:54:2e:4c:e3:67:18:ad:85:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:01:1D:00:9A:6C:E3:39:33:F6:29:0C:A3:46:82:27:D6:EF:8C:1E
X509v3 Authority Key Identifier:
keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b8:9e:46:68:3a:2e:49:27:f9:ab:ad:b3:d3:f7:63:be:c4:
9b:a4:48:79:b1:c8:75:b3:a1:94:21:21:77:a9:1a:13:ac:cd:
7d:f7:8d:1d:17:a5:c5:0a:4e:20:1a:9f:08:07:d9:cd:b8:b9:
3b:e9:f6:52:c1:80:af:33:5c:ef:65:e9:d1:d7:d3:84:24:53:
7d:a2:ef:a9:c0:1a:04:d8:f8:92:97:25:2e:7e:8c:98:62:56:
e6:d6:d3:a9:7f:63:ca:3e:96:82:2a:b4:dd:5c:19:60:49:5d:
c8:c7:25:6e:9e:53:08:56:a0:cb:38:01:53:cf:ff:01:4f:26:
aa:ba:14:7b:d4:c4:15:83:4e:66:92:27:c7:8d:94:fa:16:37:
83:f9:b8:89:fa:e8:b3:b4:0a:e8:46:7e:7b:00:f3:0c:ce:8d:
9b:6a:82:4a:56:fd:2a:a9:f7:63:dd:88:f2:8c:4a:33:68:8b:
e5:6c:4e:bc:d5:74:2c:97:72:c7:6e:da:49:1e:5b:ae:34:44:
12:6d:63:31:eb:de:6a:be:e0:90:4f:63:09:36:ad:f1:b8:b3:
14:e6:46:bc:ed:74:10:64:dc:de:cb:d2:d3:40:0f:e4:7c:c6:
ec:72:ab:45:e8:85:4f:27:3a:d7:eb:c1:36:73:6b:ab:3c:3d:
d5:c2:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:24 2025 by rpki-client