Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
File: HlcDhG16g2S-wwMDTbkay_9C2gw.mft (raw, json)
Hash identifier: 8LaEFR2SVb2nSNxgksJzz8mGvy80DlahrFMwN+JZemc=
Subject key identifier: DE:3F:11:3F:8C:CD:0B:87:43:CB:B6:76:A6:61:A3:81:7C:01:96:35
Authority key identifier: 1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
Certificate issuer: /CN=1e5703846d7a8364bec303034db91acbff42da0c
Certificate serial: 01984A77BB9B0DEFCDA32B6E3110B0411D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
Manifest number: 09C2
Signing time: Sun 27 Jul 2025 06:00:17 +0000
Manifest this update: Sun 27 Jul 2025 06:00:17 +0000
Manifest next update: Mon 28 Jul 2025 06:00:17 +0000
Files and hashes: 1: 4PNlkOPWAaPkvxKKyZ24ywHUUNs.roa (hash: eaQPOrhXnd6IgLBTpKSTCgVJBcG3spHBZu3BsMLZw3g=)
2: HlcDhG16g2S-wwMDTbkay_9C2gw.crl (hash: t01I794SjcVb7dD0Yd2iwdwSo60GqHbxrtm2LY8zxws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:bb:9b:0d:ef:cd:a3:2b:6e:31:10:b0:41:1d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5703846d7a8364bec303034db91acbff42da0c
Validity
Not Before: Jul 27 06:00:17 2025 GMT
Not After : Jul 28 06:00:17 2025 GMT
Subject: CN=de3f113f8ccd0b8743cbb676a661a3817c019635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:1e:0f:82:c5:3f:0a:98:5c:92:0c:16:23:
c5:23:54:09:6d:76:08:87:d6:64:64:ff:8b:a5:65:
84:be:fa:42:33:c5:b7:21:af:30:c1:e5:cb:56:96:
f4:0c:14:6f:3c:b0:7c:c3:20:fe:05:bb:44:a2:ed:
b4:61:93:1d:c1:f6:1d:2d:aa:08:b7:b7:a7:b3:f3:
57:56:67:e8:51:b1:9a:f3:b0:a3:7f:40:8c:d2:1c:
1d:04:b8:50:6c:f6:1d:60:27:b4:c6:ec:e2:1d:6e:
2e:17:52:d4:d9:8a:b3:c8:54:bb:26:f5:a2:43:b0:
e5:ed:83:65:68:66:77:36:38:3f:dd:06:05:ab:aa:
43:f6:cc:b7:a9:bf:23:56:0c:e6:a8:36:8b:28:f1:
cd:92:1f:53:58:a9:d3:7b:a3:a2:86:50:1a:4a:73:
a2:fb:67:73:f1:11:51:ed:b7:52:10:e4:92:08:7d:
9a:b4:0c:fc:4f:54:05:3e:aa:8b:64:65:c2:ce:5e:
0f:99:fb:a0:a9:af:0e:57:4d:97:86:ce:99:0b:8f:
66:e3:92:6e:da:24:00:2f:c8:72:d6:49:3c:8f:2f:
41:4e:94:b0:82:11:1e:03:04:d9:e3:a1:fd:74:b9:
b5:63:ae:31:2c:73:c8:88:5a:a2:ee:e8:87:18:5a:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3F:11:3F:8C:CD:0B:87:43:CB:B6:76:A6:61:A3:81:7C:01:96:35
X509v3 Authority Key Identifier:
keyid:1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:85:3b:a9:31:91:27:a3:05:53:3e:10:71:da:7d:df:c8:3e:
0f:3c:8b:d1:2b:66:01:14:b8:1e:f8:0a:b5:f8:fa:1c:bf:d9:
69:8e:9e:6c:34:0a:e5:f1:03:e4:e2:27:a6:51:a7:dd:6e:c2:
0c:3e:90:b2:c1:8e:ff:a1:b0:0a:fa:6e:f8:b3:67:76:17:e1:
a9:1e:27:fc:a2:bf:ae:e4:37:97:cd:59:12:ab:90:55:75:ba:
e3:50:51:4f:59:a0:af:d1:08:15:00:df:69:5f:91:f6:d8:50:
a9:3d:c3:2c:1b:c5:c5:e2:06:75:c9:18:fc:0a:ac:e6:8c:af:
72:90:3c:bb:b7:10:88:7f:84:f8:c3:d8:e0:ab:0b:c9:5f:4e:
cf:37:20:d3:ce:97:c2:fa:67:38:fd:6a:e3:73:76:5b:ff:e4:
dc:30:f2:d2:2c:bf:20:4b:35:ad:78:b7:be:f6:66:53:c3:75:
d3:9d:c0:d4:5f:50:1e:32:9b:e4:0e:a2:ba:01:5d:b9:d1:cc:
2d:59:b6:67:c1:2a:2c:1b:7e:2e:21:c5:13:f9:92:ab:75:af:
fa:bb:19:7c:31:e6:07:92:37:ab:a5:6a:c7:d3:05:34:9e:0e:
da:1b:29:ef:16:8d:32:84:2a:38:82:90:60:fb:49:54:ac:1b:
47:e9:61:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:35 2025 by rpki-client