Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
File: HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json)
Hash identifier: uhiSEZCiwp0uBfXJK2OYwWYfgBHsnjHib2DWbPajJaI=
Subject key identifier: 79:11:D8:78:44:CB:62:FB:D9:DC:81:DE:0E:1C:1F:5B:8B:C2:27:A3
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial: 0197B6A226DD2809E8A632E9286091551A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
Manifest number: 062F
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: ez7bUNLlU5wAfcZrJy9diwoKk0gk4A5lRZgmwLotGic=)
2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:26:dd:28:09:e8:a6:32:e9:28:60:91:55:1a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=7911d87844cb62fbd9dc81de0e1c1f5b8bc227a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:c7:19:e6:34:4f:36:a5:dc:c0:ea:0a:64:
f2:79:91:28:9c:7e:62:79:dd:2e:bb:71:56:01:34:
11:81:ed:ce:ef:96:b2:eb:3b:ef:87:4c:f3:b5:69:
de:25:b1:d7:ab:43:cd:27:87:7e:ba:ee:5d:a8:7f:
b5:f9:cf:9f:8c:59:46:b7:72:21:3c:0d:d2:18:d3:
2c:33:8e:a5:f3:58:a8:41:4e:df:69:be:91:09:b6:
d4:b7:70:aa:ef:cc:01:ec:d1:55:3e:01:12:ef:6c:
59:e6:48:46:db:d6:38:f1:32:99:e4:42:e4:c5:c5:
77:9f:34:00:b7:6a:b5:ef:eb:4d:a9:d2:f3:a7:a7:
af:60:64:35:ec:49:bb:b2:00:1f:c0:b4:e7:83:70:
a2:00:0b:69:fb:a9:e1:78:eb:6a:a4:5a:66:72:93:
4f:de:ef:ed:87:37:cc:25:6a:4b:0d:62:1f:21:2e:
e1:d9:5a:6e:8d:b6:1f:de:ff:0c:64:b0:88:91:07:
80:44:44:ef:e2:d0:77:27:6c:57:de:32:37:76:93:
16:d8:1c:c6:79:b2:85:bd:cf:26:82:e3:74:48:fa:
6e:44:d1:1a:cf:b9:4e:34:22:02:c5:de:4a:e1:fa:
60:76:13:34:36:1f:98:84:db:dd:1b:28:82:9c:ee:
46:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:11:D8:78:44:CB:62:FB:D9:DC:81:DE:0E:1C:1F:5B:8B:C2:27:A3
X509v3 Authority Key Identifier:
keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:af:79:3e:18:47:2f:26:c0:12:d5:89:a0:e0:a8:44:ae:58:
c0:4b:d3:d3:05:5c:6e:b4:e1:12:21:20:2c:d1:b2:9f:f5:2b:
f2:4e:07:cd:42:3f:a3:78:4c:02:3e:fd:17:bc:f7:a4:98:99:
bb:cd:9d:e4:5d:fd:ca:8d:53:4e:80:ef:59:0e:6b:c0:05:bb:
2c:a6:b8:66:6f:e4:a1:3f:46:32:d3:91:bd:6d:19:8e:93:5d:
ea:b2:a6:48:61:3f:b2:4c:2f:2d:15:b8:b1:8d:3f:98:ea:5e:
ea:f2:d9:25:83:ff:b5:9e:81:a5:ee:e4:7f:c5:67:35:65:aa:
21:8d:5d:82:97:c6:ea:b7:d8:2f:31:e8:47:00:a5:d1:9d:2d:
af:70:e9:7c:9d:64:69:8b:d0:87:36:fc:c2:12:7d:3f:52:5d:
15:9b:35:69:7d:48:0c:f2:b9:d8:06:1c:4b:5e:bd:d9:18:ee:
7c:2c:0f:6a:3a:cf:2f:98:d9:d3:54:22:48:23:f1:b8:7a:c8:
b7:5c:d1:3e:d8:09:04:63:66:64:80:cb:5d:95:d0:95:a9:85:
8c:15:db:91:00:0a:d9:31:03:b1:0c:79:21:5f:ce:4a:35:41:
e7:4c:d5:fe:73:d9:4c:51:90:2b:74:56:74:6c:5c:4f:74:00:
0e:1c:fc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:53 2025 by rpki-client