Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: mdmWkSy6zwgMchyChivUrMgttDaPkwjRwbb+C3YeDlw=
Subject key identifier: 89:60:3D:C3:1D:43:D2:24:6D:51:A8:97:DF:D8:CB:92:3A:CE:86:EF
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 01984C6615371458B98EA0C7F72DA4742F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 15:00:15 +0000
Manifest this update: Sun 27 Jul 2025 15:00:15 +0000
Manifest next update: Mon 28 Jul 2025 15:00:15 +0000
Files and hashes: 1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: /eG54A6VC5qNQ0KVF0zOAD0ylwtQYTOb0GA+O5tLHx8=)
2: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:15:37:14:58:b9:8e:a0:c7:f7:2d:a4:74:2f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Jul 27 15:00:15 2025 GMT
Not After : Jul 28 15:00:15 2025 GMT
Subject: CN=89603dc31d43d2246d51a897dfd8cb923ace86ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:2f:45:5d:2f:08:88:92:5a:a7:93:a0:0f:
6b:2d:1d:d5:0c:d8:87:d8:0a:2c:1c:aa:e2:93:b9:
45:9e:df:80:89:40:cb:fa:b7:8f:8b:79:f9:ee:71:
c3:e1:a1:8a:a7:53:a3:95:0e:15:57:b9:f2:72:8d:
7c:c7:3b:48:3c:7a:1c:0d:31:02:51:38:1d:f8:5e:
90:52:40:56:2b:22:c3:ca:b0:80:3c:80:3d:c9:4b:
a0:c8:81:41:12:ec:b1:80:e3:26:a4:a3:35:c9:1e:
31:0d:88:66:41:85:83:e9:93:84:21:90:06:ec:2a:
f2:67:69:c7:63:96:92:59:61:c1:ef:7e:39:93:c7:
36:3d:b3:4d:a7:2c:8f:f5:cc:c5:12:bb:8a:65:ed:
0d:7a:de:78:85:38:d3:dc:1e:c9:eb:a4:29:7c:10:
d4:bf:39:8b:8e:08:fb:e7:d9:04:be:09:1b:48:ff:
1e:d6:96:99:ed:95:2a:a2:e2:3a:56:b3:d2:63:25:
2a:34:91:a5:3d:06:43:31:b5:db:a5:7f:fa:93:f5:
9a:4d:f7:4f:5c:28:8d:96:73:24:1e:60:80:14:e9:
50:11:ab:61:7d:c4:c0:a2:1a:20:56:e0:ad:d4:f3:
12:49:01:8b:28:51:09:a3:f9:12:b3:c6:70:50:d1:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:3D:C3:1D:43:D2:24:6D:51:A8:97:DF:D8:CB:92:3A:CE:86:EF
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b6:70:50:f1:eb:1c:48:3a:56:f1:90:c0:32:85:7e:2f:24:
de:38:b8:8d:5c:24:6b:44:d7:ab:8a:4c:a1:aa:2a:d6:65:c0:
10:db:0e:8f:4b:e6:76:04:0d:79:2e:51:3d:7a:6f:3b:c4:fe:
f4:ed:79:ac:30:f6:fb:b2:4a:d8:73:16:2e:00:d6:a5:0a:c6:
00:cc:70:e9:2c:b8:61:06:0f:98:a4:77:42:34:78:78:fa:d8:
63:d0:f6:70:5a:3a:70:b6:f8:d1:f3:41:86:b7:3b:3f:7b:90:
7a:fc:2c:0d:1f:db:30:da:d2:de:ac:b1:16:34:f6:cc:bd:ba:
c8:51:55:8b:fe:4f:b7:69:ef:6e:04:2f:f6:89:27:5f:d4:b3:
94:55:a6:aa:21:5c:20:36:63:b2:3d:56:90:06:86:0a:09:74:
c1:18:f6:c7:67:d6:25:0e:ab:41:a1:be:5b:7f:8d:5e:1f:87:
a3:e3:50:9f:33:9b:35:f1:23:83:c1:76:0d:f1:72:72:2a:e1:
7b:72:85:e0:c0:23:2d:6f:31:9c:6f:f3:36:f8:50:28:01:7e:
1d:d6:cf:af:de:3b:bc:80:78:2a:42:8c:22:79:c7:4b:e9:7f:
d3:45:e7:56:23:ae:97:6c:87:d9:a8:63:10:af:b8:ab:04:9d:
1d:fb:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:10:09 2025 by rpki-client