Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
File: HjXAaowG1d1k_nawkKPh4qSZbcg.mft (raw, json)
Hash identifier: X2Jk4xZTBNXKmBbejxUvRg3Y47RKGlCmNUmsB6MHx+M=
Subject key identifier: C9:E1:8F:F3:8E:01:E3:A3:4D:D7:C8:88:11:B5:68:69:E5:38:9B:AC
Authority key identifier: 1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
Certificate issuer: /CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Certificate serial: 0197B7B37B0304930E69D5C88FDCD0E6B235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: HjXAaowG1d1k_nawkKPh4qSZbcg.crl (hash: My4sx2mcDE+im8HaC7oAKeKHc7PnDCZMeyjCXXy+7RQ=)
2: R12AgdneGd4IinauuD2IQCzaNdo.roa (hash: 0Vf4DfoprRpqIbS3viTk0elhBi8JnCMTTU8OHnzZBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7b:03:04:93:0e:69:d5:c8:8f:dc:d0:e6:b2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e35c06a8c06d5dd64fe76b090a3e1e2a4996dc8
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=c9e18ff38e01e3a34dd7c88811b56869e5389bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:d0:d6:d2:24:5a:65:52:b8:2e:b8:dd:ac:
e5:3c:b1:ae:fb:b7:75:c5:45:0f:3b:41:b7:1e:b2:
67:9d:69:61:46:dc:46:db:d6:2e:86:60:98:f9:2e:
f4:d1:06:3b:b4:49:f2:95:bf:27:b0:a9:c2:34:ea:
db:af:61:26:45:a2:c6:3e:69:8c:5a:e9:7f:d8:f1:
6a:e5:05:94:e4:18:ec:81:11:7d:16:3f:7d:01:b3:
ff:32:47:a6:51:26:87:39:59:a4:7f:a1:43:0d:c4:
51:87:72:ff:f0:38:fc:e1:68:7f:f1:43:0b:e2:0e:
2d:42:c7:2c:93:17:35:01:c7:c3:21:57:9f:6d:8f:
7e:d5:76:45:9e:a0:2b:7f:3a:c2:07:4a:40:26:eb:
98:21:be:97:ed:6f:ac:f8:79:62:6d:12:6f:89:5a:
6a:23:d3:6a:93:68:41:cf:2a:7f:2a:91:0e:c3:2a:
f4:fe:65:3e:a2:50:ec:4a:54:9e:36:9e:76:e9:d8:
78:f9:26:e9:60:e2:ee:77:d2:4f:1d:8f:b5:2b:b3:
6e:fd:71:11:cc:f6:08:49:5e:d0:9f:c7:19:0a:11:
2b:2a:4e:06:a3:e5:6a:80:27:2f:9e:3d:b0:f9:15:
7f:bc:9a:e4:19:ac:c8:06:80:96:81:86:97:0f:11:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:8F:F3:8E:01:E3:A3:4D:D7:C8:88:11:B5:68:69:E5:38:9B:AC
X509v3 Authority Key Identifier:
keyid:1E:35:C0:6A:8C:06:D5:DD:64:FE:76:B0:90:A3:E1:E2:A4:99:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjXAaowG1d1k_nawkKPh4qSZbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/HjXAaowG1d1k_nawkKPh4qSZbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0f:42:02:95:68:17:58:78:99:ae:01:10:44:f2:b5:1b:4b:
41:dc:04:db:d1:f0:54:ec:e3:a5:f8:08:0c:25:37:3e:c8:f4:
e3:a2:7c:cc:3f:48:1f:78:23:62:20:64:f5:9c:09:db:f5:69:
11:01:67:bb:a3:be:00:3f:55:e9:d1:cb:c1:de:c1:3b:cf:ae:
97:40:26:63:a5:d7:05:b7:f4:d9:7e:d9:ca:31:a1:50:c2:1d:
ce:b3:ab:07:4c:d7:32:d2:4b:38:ed:9d:be:61:c1:11:1a:cb:
6f:cc:e2:4d:fe:f9:22:fd:d9:5a:5c:2a:04:7c:0a:86:99:bb:
bf:93:40:72:52:16:df:6b:ae:77:f8:25:08:37:3a:fd:22:51:
44:9b:1a:30:a4:88:1b:6e:3f:c3:13:93:06:a6:c5:53:98:d5:
65:18:e8:98:90:ba:7c:ac:14:c4:24:e4:1f:1d:d5:b8:91:7e:
96:1b:8a:0b:65:08:ed:6e:ce:85:dd:d6:45:b8:4f:c4:dd:d4:
ab:24:4a:32:ed:af:6b:b5:60:11:02:63:65:ce:8c:25:96:b5:
5a:40:d6:ac:47:15:5a:25:17:d8:fb:d8:e6:ad:f1:5e:8e:2b:
bd:94:50:40:dd:25:60:cd:62:0a:51:05:86:fd:86:fa:24:25:
3d:ff:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:23:07 2025 by rpki-client