Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: 9bKVdGihmTjplQJCAqpZ2IfzOaNQXba9DxAmeYfoYtc=
Subject key identifier: 72:65:7A:BA:61:28:E2:8F:22:4B:D8:0A:0D:3F:A2:DC:E9:22:3F:A1
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 019849D2E15F3C3879F0E9B76F88FB2296AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 03C6
Signing time: Sun 27 Jul 2025 03:00:13 +0000
Manifest this update: Sun 27 Jul 2025 03:00:13 +0000
Manifest next update: Mon 28 Jul 2025 03:00:13 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: R4tjVDhtbQmt6TKbLcuZkb0e9cELA+MNZYJOey+opMY=)
2: o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa (hash: zzahS3EyrX+jIVg6yGR2kDs1UzlqtPtkB9ukn8PHDT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e1:5f:3c:38:79:f0:e9:b7:6f:88:fb:22:96:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Jul 27 03:00:13 2025 GMT
Not After : Jul 28 03:00:13 2025 GMT
Subject: CN=72657aba6128e28f224bd80a0d3fa2dce9223fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:24:b2:39:b2:59:8b:a7:97:d9:6a:0a:dd:
ee:9f:3d:8d:d7:fb:c8:be:f6:cc:e9:cb:a0:ae:9d:
a5:6d:3e:a3:4d:f5:14:27:0b:12:07:25:95:4a:3a:
9e:72:ea:bd:b2:f7:d1:43:80:8f:49:89:1c:de:c0:
33:19:c2:8a:bf:59:7b:4c:4a:54:d3:0c:53:1b:c2:
9e:3a:bb:fe:df:b9:71:6f:9f:2f:86:cb:06:0b:dc:
01:5f:3a:d6:a1:44:9d:99:f5:8f:94:40:ea:ba:ca:
27:27:d3:eb:c2:b7:20:90:d7:f6:fe:99:f0:b2:b7:
0c:a4:80:50:6f:d3:04:14:ca:ab:f0:60:6f:83:a4:
bb:c9:f1:6e:90:25:d7:36:fb:a5:a9:dc:77:c4:2a:
c2:33:a6:2a:49:a7:04:35:6c:ac:32:35:86:60:6a:
27:14:3f:64:5b:49:7c:01:b2:64:2f:66:ac:6e:23:
b3:51:bd:57:c3:de:39:9b:d3:de:08:e9:47:47:35:
55:16:8e:16:94:c1:31:81:b4:97:af:38:42:ed:62:
03:dc:f3:f4:7e:79:08:c7:b8:dc:75:57:8f:2e:f6:
b9:47:51:42:2a:08:ca:4e:05:da:62:af:3c:6a:75:
f9:49:93:e4:77:9f:59:55:03:ca:1f:27:a7:b8:c2:
af:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:7A:BA:61:28:E2:8F:22:4B:D8:0A:0D:3F:A2:DC:E9:22:3F:A1
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e1:66:cf:4a:1c:3f:7e:8e:50:38:24:c9:88:09:90:1b:31:
60:0b:61:b9:02:71:13:59:c8:00:8a:f5:76:1c:6e:91:2f:2b:
be:9a:95:29:b7:12:cf:d5:35:8f:9a:02:7a:3f:b6:7e:05:48:
77:e7:6c:bd:43:f9:3f:9c:ef:36:17:81:e2:b3:16:54:f9:25:
9b:b2:26:01:62:4d:44:af:2e:38:43:28:cb:cc:f7:46:7b:dc:
85:6c:37:5a:f0:56:b1:e6:c9:cc:bf:43:fb:48:45:71:88:e6:
d9:28:8b:75:bf:e4:cd:8c:b1:08:59:80:5a:79:5e:a5:8f:08:
82:b1:ec:f4:88:95:cb:fe:52:17:9a:f6:ed:a3:fc:2e:b6:95:
0d:6c:64:81:d9:bd:a7:82:b0:35:81:e6:32:a8:54:ab:49:16:
86:27:da:94:e3:ae:26:63:20:98:6e:f4:da:78:8e:3b:12:6a:
5c:3d:a1:e4:cb:c3:c2:75:b1:73:ce:d1:14:86:e6:3f:73:89:
88:42:fb:78:3d:1b:d9:7f:83:78:41:12:00:3a:cc:f9:a0:03:
64:48:3b:c9:ed:4f:4f:18:c2:df:e6:5d:17:7e:b9:a3:5d:cc:
db:cb:a7:44:8f:bf:88:ad:ec:e2:3f:df:13:94:b2:ac:4f:bf:
84:7a:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:51:40 2025 by rpki-client