Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: 6m2pDS8JLZSL/FAlQn+cc4puuLs63PxRzn5qimVp2FY=
Subject key identifier: 67:D3:AA:E3:60:19:B1:6D:53:4C:63:9A:09:9F:78:1E:1B:CC:15:24
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 0198499BF0B988E5EA8F40093FACF1FF47E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 02:00:13 +0000
Manifest this update: Sun 27 Jul 2025 02:00:13 +0000
Manifest next update: Mon 28 Jul 2025 02:00:13 +0000
Files and hashes: 1: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: JBl/p51pJRMBEKm9KFzlxN53euGLsdZ+T/4D9IctSfU=)
2: S8E-qbm1BXEqIdetmmA1nZNgj7U.roa (hash: 3uwA4cyu+agvPaXd967UOebPOsNVk53AsWpnmfz8XsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:f0:b9:88:e5:ea:8f:40:09:3f:ac:f1:ff:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Jul 27 02:00:13 2025 GMT
Not After : Jul 28 02:00:13 2025 GMT
Subject: CN=67d3aae36019b16d534c639a099f781e1bcc1524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:8d:a9:4c:55:b0:bf:ab:5f:05:e0:8a:86:
0d:9c:ce:32:5a:5c:6e:81:a1:b0:53:77:4e:d2:d6:
6a:0c:0b:e8:60:e6:6a:4e:28:11:2d:32:71:6f:2e:
9d:58:54:65:6e:74:fd:8d:44:b9:0d:10:d2:30:ce:
46:e0:e1:45:73:c8:d6:f5:08:80:a8:80:9f:fb:56:
36:39:37:87:aa:65:ac:91:a5:a6:b8:de:09:0b:40:
a7:25:55:c3:7f:76:e9:06:ef:0b:15:64:c8:08:21:
2a:18:59:1e:bf:cd:0f:7d:ab:e1:11:95:e0:6b:60:
dd:e7:94:ce:18:63:40:15:8f:a6:cf:3f:fa:2a:e7:
6b:b6:45:92:4d:13:58:e8:b8:2a:cf:17:57:34:c3:
e4:31:cf:71:f1:fb:66:a9:60:4c:ba:6f:d3:1b:76:
fd:94:cd:c3:37:bd:8c:a2:03:24:e0:7a:89:54:71:
b2:9e:6c:53:d0:70:d0:f2:a0:ce:0e:83:66:64:42:
38:ea:f9:d3:f1:4f:91:af:52:0a:b6:be:b9:e6:7f:
db:ab:b9:61:fe:58:1e:cd:47:50:58:9e:94:d0:ca:
c8:a0:6d:b5:b8:57:60:85:7e:09:28:b1:bc:3d:da:
85:c9:db:df:ee:8e:e5:51:7b:5a:f8:cc:78:2d:b6:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D3:AA:E3:60:19:B1:6D:53:4C:63:9A:09:9F:78:1E:1B:CC:15:24
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:7a:df:b0:3b:c5:73:70:68:ee:4e:d0:e0:1b:44:23:b7:06:
4d:80:cf:8e:2f:8b:89:22:14:84:fb:14:e3:34:ac:1c:a4:69:
4d:dd:b9:e9:82:37:0c:fe:d5:f2:9b:cb:44:78:a4:89:90:33:
41:03:a5:dc:2c:9c:ef:5e:69:df:1e:7f:52:d9:89:dc:80:9a:
9d:cf:68:23:9b:27:47:10:4c:3b:47:5b:e4:d8:8d:79:4b:2a:
99:77:36:c6:1d:9c:27:8c:53:a0:26:bc:34:8b:a0:40:91:6c:
2e:51:74:10:ae:80:6d:6c:da:2f:78:07:9b:80:89:bf:65:ce:
1e:77:09:09:c0:96:8d:a8:3c:c6:3d:8b:2c:bd:74:35:53:84:
21:2a:7a:4b:45:e3:d7:bf:c6:00:2c:f5:a1:11:4d:73:b1:99:
dd:83:0d:66:e2:06:e7:78:b6:ec:3c:85:6c:9d:cd:85:7d:69:
e0:c2:f5:9a:a7:0d:34:71:d4:60:2f:b2:29:8a:ed:b8:b1:fa:
1d:48:79:54:39:dd:e1:6d:b5:56:ef:4f:c9:1c:97:2a:64:2e:
84:78:e4:03:a5:26:fc:28:78:7c:34:51:66:24:94:0b:21:0d:
ff:a5:5e:f4:ad:86:cf:d1:24:79:a7:8e:a7:c0:65:f6:27:23:
2e:34:46:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:21 2025 by rpki-client