Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
File: HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft (raw, json)
Hash identifier: ZoHA8LXfndxPGdfPGu16nLAMSShUe9/hbFdwfs7MVQk=
Subject key identifier: 2A:F3:91:C4:7A:D7:1F:E5:44:55:D1:06:18:8D:40:A0:B1:EB:95:DF
Authority key identifier: 1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
Certificate issuer: /CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Certificate serial: 0197B77C19E088EEE16FD7B3F07EFB2A1278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
Manifest number: 0C3A
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: 0FwdA4ymMzmi2xIxcm9ptvfrFQY.roa (hash: qKX9mbONM6/Xx6gF2emn3N/lO2VKopekGuKmwl2j208=)
2: HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl (hash: QWoPK73hUmK6Ht/SPziicD/xNU5rSzpNh+LQLqMbW40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:19:e0:88:ee:e1:6f:d7:b3:f0:7e:fb:2a:12:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=2af391c47ad71fe54455d106188d40a0b1eb95df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:28:f7:fd:c4:83:c4:10:15:b5:ff:15:3b:
fa:f3:28:0f:03:04:52:f9:fc:c6:a3:d6:1e:0f:94:
78:27:69:e3:17:78:7c:a0:08:9c:cf:f2:4e:2b:54:
85:a6:1d:f3:b7:34:06:e9:4f:41:06:25:8c:ad:f2:
44:f3:ca:e7:85:48:a1:59:73:8d:f6:ca:4a:20:fa:
a2:de:c4:75:3a:2f:0c:21:36:b4:e2:a6:88:ac:a0:
12:65:55:06:c3:6a:2b:4f:7c:7e:6e:09:86:54:30:
76:b1:1b:01:2f:1c:3e:b4:7c:92:a6:55:de:4b:8d:
4b:6b:bc:ec:94:0b:1a:f2:5b:3b:38:9a:9a:89:46:
72:03:ca:78:a7:72:1e:03:6c:f3:8b:7a:ad:bf:c1:
d7:a4:68:75:14:4b:47:3e:7a:52:c2:ec:93:e1:f3:
e6:f0:96:9d:f3:95:87:2c:7b:87:ad:98:be:2c:53:
ec:0c:58:9e:bb:3b:18:54:b3:5e:89:8d:04:da:dd:
a0:f2:db:3e:98:54:f5:e7:18:99:77:a5:80:4e:15:
c5:d8:db:3f:4d:a8:84:32:4f:c5:f0:2d:4d:de:f2:
da:6e:48:39:8f:11:f9:93:73:fd:9a:d5:66:bd:45:
c1:74:38:99:02:ef:fa:50:7b:1c:ad:c5:d7:f5:c2:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F3:91:C4:7A:D7:1F:E5:44:55:D1:06:18:8D:40:A0:B1:EB:95:DF
X509v3 Authority Key Identifier:
keyid:1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:36:88:a8:4a:68:d2:ac:5a:65:75:6a:08:7d:80:38:8b:a4:
6d:fe:18:a3:9b:fb:f4:64:2c:0b:c3:7a:19:11:a5:cf:fd:1e:
41:14:54:1f:48:cb:a5:c0:a9:cc:06:fb:79:2b:6f:6f:e6:03:
ab:ac:ed:70:c9:27:82:aa:17:c3:41:6f:62:35:c7:da:ea:47:
be:06:ac:62:3f:bf:7b:74:23:bb:db:47:ef:3c:37:7a:1b:5f:
0f:b6:41:fe:40:84:5b:33:68:23:4e:9c:f5:9b:c3:54:c9:7b:
dc:e8:95:14:4f:32:4f:4b:dc:7d:8d:e8:36:de:42:e8:48:30:
16:51:d0:59:1b:b7:02:88:ff:ad:50:56:ff:40:ca:35:9f:ea:
ce:2f:56:d0:10:1f:58:dd:9a:52:1d:9e:02:d3:0b:3f:17:e7:
29:9b:16:91:dc:ca:ba:30:33:74:68:4c:2a:25:1f:21:5b:2e:
ce:23:02:35:91:75:83:06:c2:d5:e9:87:fc:b9:6f:20:e4:cf:
82:75:45:58:26:c0:1e:b2:98:f2:8c:a9:02:f2:6b:7c:13:9d:
10:fc:5b:a7:d1:39:8b:97:ea:d6:74:f8:8b:e6:e9:f7:e9:eb:
7f:da:cf:7f:9b:a9:b8:a4:6d:0d:b1:99:32:ea:60:0c:80:c6:
0f:31:7c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:38 2025 by rpki-client