Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: IbP+1NiyjwaiotrqJXbIU4dvkdkvaHcg1Ny9dLDLv1g=
Subject key identifier: FC:1F:D2:B1:1B:70:D9:E4:A5:F4:5A:3A:74:29:E2:F9:41:6E:33:44
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 0197B96A7041E0FE272A98AE8A021BCD4133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1548
Signing time: Sun 29 Jun 2025 02:00:49 +0000
Manifest this update: Sun 29 Jun 2025 02:00:49 +0000
Manifest next update: Mon 30 Jun 2025 02:00:49 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: GWe2MqyVd9S6FybyFlZJjmDgpiLUQQYmj1geR3lT5/o=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:70:41:e0:fe:27:2a:98:ae:8a:02:1b:cd:41:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Jun 29 02:00:49 2025 GMT
Not After : Jun 30 02:00:49 2025 GMT
Subject: CN=fc1fd2b11b70d9e4a5f45a3a7429e2f9416e3344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:04:e1:38:f3:c1:d2:41:44:19:96:1f:1d:
05:c8:6a:9d:8b:1d:b1:59:97:c7:ec:d7:b4:11:56:
ee:fe:78:13:9e:c1:2c:d2:c5:b3:70:12:53:d1:9d:
14:a2:2a:0f:13:a0:1d:3a:7e:f2:a3:ff:9e:46:c8:
fe:d3:59:6b:ca:15:5b:46:43:cd:02:f3:c7:06:f7:
d6:60:19:08:c5:47:b0:d7:ed:18:98:e0:87:f0:2e:
d6:bf:cd:aa:66:1a:28:0d:16:09:d1:7b:1e:0a:2c:
b5:2f:1f:a3:c4:11:fb:22:36:d6:47:7f:21:55:fc:
1e:e6:c6:97:f3:2a:91:42:c6:4d:58:41:75:6b:66:
75:ab:50:52:6b:5d:61:00:3c:15:5d:3d:94:be:0e:
4a:b2:60:45:d5:64:d0:ed:6f:fc:3f:62:d0:93:7f:
13:46:b1:18:b8:fb:40:45:27:2e:35:0f:72:ff:c3:
e7:1e:33:3c:b1:1d:27:23:77:4c:c3:38:46:61:0f:
2d:5b:91:5e:52:69:84:d5:50:08:5c:94:26:90:47:
7d:4d:8b:fc:cc:d9:10:a3:86:27:52:88:0a:5c:51:
8d:38:45:9e:cb:48:a4:1a:cb:ba:df:46:0f:c4:a1:
4d:fc:26:58:13:10:9f:2b:f9:13:cf:40:6d:47:0c:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1F:D2:B1:1B:70:D9:E4:A5:F4:5A:3A:74:29:E2:F9:41:6E:33:44
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4e:8f:be:5b:25:c4:3c:19:32:b0:1f:cd:db:c8:e4:6a:51:
e3:30:fd:9a:ad:6d:ca:90:6b:f0:62:e3:bd:09:04:20:e0:93:
03:f4:e8:ba:64:e5:3c:04:44:68:b5:e0:b6:fb:14:3d:46:85:
03:d3:9a:0e:c2:58:47:4c:46:50:f3:1b:6a:19:9b:3a:2c:a9:
db:bf:86:97:78:6c:e8:d3:5b:38:e1:92:e6:9a:b1:d3:d0:33:
16:22:f5:32:19:49:31:74:5e:93:ed:a7:f0:20:ef:53:7c:22:
9d:d5:04:cf:d2:4e:a7:ba:d2:80:c1:f3:98:d1:0a:10:02:bc:
a4:a5:46:44:45:bf:ac:d0:12:6f:27:98:ca:64:fa:3c:a0:bb:
c6:84:2f:ce:09:aa:57:d4:e6:61:cd:fa:96:b2:0d:8d:e7:35:
58:89:b6:2e:ed:25:33:16:5c:00:e5:a6:3e:1d:bd:ce:68:b1:
08:ea:9a:d7:1e:3a:d9:cc:97:d8:ea:c2:ba:7c:67:47:e3:a7:
08:97:0b:a5:2e:da:08:8d:6c:2c:d6:8d:75:43:b2:bc:98:49:
ab:be:6d:e7:98:a8:62:c5:f6:f3:05:eb:9e:60:c6:79:d2:ba:
20:f0:58:b1:bb:ca:6f:36:bd:cc:a8:29:01:fb:37:17:24:22:
2d:27:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:39 2025 by rpki-client