Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
File: hXLVrMJRZ2mcf886G4BOoyWsTl0.mft (raw, json)
Hash identifier: HSCrPtjl6JFfzOCfMcF1ldE4hWCMLGjyvFiA9uCADyU=
Subject key identifier: 62:3F:85:3A:AE:FE:68:51:8E:E5:A3:ED:42:EC:72:7D:01:AC:B1:02
Authority key identifier: 85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
Certificate issuer: /CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Certificate serial: 0197B6A11AF5D818D749685C193EF92FC98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
Manifest number: 14E4
Signing time: Sat 28 Jun 2025 13:01:40 +0000
Manifest this update: Sat 28 Jun 2025 13:01:40 +0000
Manifest next update: Sun 29 Jun 2025 13:01:40 +0000
Files and hashes: 1: E_g8JEJGx2RzSEjGgXwsnLzhYuY.roa (hash: 1/I3aoM+yKdAzYPZU70IJvPWqKBQF4IK2mBQQ0GVymw=)
2: hXLVrMJRZ2mcf886G4BOoyWsTl0.crl (hash: V3DEVKHUWj+SHixED08TGP7ZXWE4AeGeI/tx/IADHhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1a:f5:d8:18:d7:49:68:5c:19:3e:f9:2f:c9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8572d5acc25167699c7fcf3a1b804ea325ac4e5d
Validity
Not Before: Jun 28 13:01:40 2025 GMT
Not After : Jun 29 13:01:40 2025 GMT
Subject: CN=623f853aaefe68518ee5a3ed42ec727d01acb102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:5a:c3:51:9b:d4:5a:01:b4:f3:10:76:64:
de:6b:76:0e:60:39:6f:6d:d2:0e:c0:a0:f4:0b:f2:
44:97:83:f1:ed:ce:99:c4:e2:81:15:f0:9a:1f:83:
7f:8d:e3:2b:ba:fa:1b:a4:30:03:b1:25:9f:98:6c:
77:ac:8a:c7:22:52:e7:52:cf:6f:20:ca:f6:17:ed:
e8:50:5f:b3:ad:c1:1d:a6:c1:89:fe:db:a3:5b:c5:
d9:92:57:6c:77:f2:2a:a1:f4:16:49:06:71:84:a6:
c6:b6:89:7b:ff:1d:44:c8:9c:e2:3e:c9:34:77:92:
de:9e:da:8c:f4:45:c2:3a:3c:3b:09:8a:54:e5:48:
1f:fb:69:e1:55:9e:e1:cb:c3:1a:b5:e5:c8:c1:e0:
17:05:e1:7c:60:5a:d4:6c:fd:cc:f0:7d:af:a6:6f:
9c:f5:4d:62:f5:ad:6b:7c:2c:d4:28:a0:0f:e5:92:
2f:63:21:27:6f:78:eb:15:f3:63:f9:b5:e1:47:b4:
77:4a:26:01:18:53:fc:b6:36:ab:3f:91:92:dc:3a:
fa:6d:95:be:a9:62:bd:db:eb:f6:46:9e:43:d4:c2:
95:0c:28:d4:88:ef:23:bd:29:5f:f8:58:3d:4a:34:
5a:cd:28:03:28:36:15:8e:b1:4c:c8:05:38:68:7a:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:85:3A:AE:FE:68:51:8E:E5:A3:ED:42:EC:72:7D:01:AC:B1:02
X509v3 Authority Key Identifier:
keyid:85:72:D5:AC:C2:51:67:69:9C:7F:CF:3A:1B:80:4E:A3:25:AC:4E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXLVrMJRZ2mcf886G4BOoyWsTl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/011234-cfb7-4275-9f79-40dc445c669a/1/hXLVrMJRZ2mcf886G4BOoyWsTl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:eb:eb:96:3c:e9:d5:b8:87:87:e7:c7:a8:45:39:a3:8c:8b:
fc:d9:f8:30:f1:22:cb:ad:2f:c9:86:b2:96:fb:23:39:ed:db:
7c:19:ed:13:ab:6b:d9:75:d9:98:14:56:c1:e3:88:54:5a:66:
b2:e2:4d:2f:cf:ef:35:68:af:dc:21:d7:d6:6d:4e:02:09:69:
2e:8e:f6:c7:ff:10:68:df:f2:a2:3d:c9:21:ce:71:61:c6:bb:
29:db:a1:51:84:70:bf:25:b9:a0:89:d8:6f:02:c3:50:99:6b:
9c:51:55:9a:63:2a:01:e4:76:70:fe:40:b8:ab:54:1c:28:ef:
e2:46:63:b8:11:12:78:e3:26:39:d1:89:23:4d:91:08:38:3a:
6a:10:61:40:63:72:74:01:73:ec:bc:67:fc:f3:54:77:39:82:
d4:38:ba:e4:fa:eb:70:cc:b2:e3:1f:e8:d9:41:8b:c7:b0:da:
9f:dd:d7:09:9a:dc:ba:7c:b4:15:61:12:ab:82:54:79:ea:8f:
63:24:c0:9e:3d:f8:5e:22:b2:be:5f:b2:75:a0:76:ec:62:fe:
6b:d7:24:6c:37:74:92:55:16:fb:0e:1b:21:1e:a7:9c:b1:c1:
ac:1c:16:01:ca:c2:c4:3b:32:23:4c:4e:d6:d7:11:8d:e7:f1:
ce:45:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:54 2025 by rpki-client