Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: Og7n3K3d8/uNbSLm2oC7ColBsW8IoQlqWKAFWtfozt4=
Subject key identifier: 56:C4:6F:AD:73:43:5D:FD:E4:70:09:C8:7A:A6:C7:BB:BA:F4:2E:DB
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 01985344300967165F61CA297B54C9FB5724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 0F72
Signing time: Mon 28 Jul 2025 23:00:34 +0000
Manifest this update: Mon 28 Jul 2025 23:00:34 +0000
Manifest next update: Tue 29 Jul 2025 23:00:34 +0000
Files and hashes: 1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: mDx6mZj4n7WhzK7jRrjQwWPd5uHVYHRF83aDju2YRcg=)
2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=)
3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:30:09:67:16:5f:61:ca:29:7b:54:c9:fb:57:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jul 28 23:00:34 2025 GMT
Not After : Jul 29 23:00:34 2025 GMT
Subject: CN=56c46fad73435dfde47009c87aa6c7bbbaf42edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a0:43:f0:8e:4d:c7:08:31:9f:a9:05:ad:34:
ae:c6:c0:91:75:96:52:de:25:2a:ab:19:b8:f5:44:
30:ee:8b:4a:a6:1d:0e:3f:eb:7b:5d:18:e4:bd:ec:
89:63:2e:1d:e1:1b:44:73:3f:a7:ca:73:29:59:29:
1a:b9:d7:d8:ae:5e:33:bc:09:69:9d:2f:05:84:43:
8c:8b:0c:60:92:b3:65:ea:e3:b7:be:4a:e9:bc:ec:
61:2b:b3:92:4b:55:5d:03:fa:e1:f6:36:d2:71:bd:
b3:17:a6:20:23:f3:72:ef:50:83:f7:36:46:2f:3b:
1b:9a:14:40:c3:e9:22:17:71:1c:ab:cb:31:c9:a7:
64:51:87:09:90:74:a8:cc:8a:c7:ad:bd:86:11:54:
2a:11:c7:e7:9b:2e:09:c1:aa:0d:d4:f5:ae:bf:27:
0e:7b:58:aa:d9:26:d4:cf:fd:73:55:d1:03:6b:15:
90:66:02:ae:c5:c8:1d:7f:77:3f:1b:35:05:93:bb:
e1:b4:e5:9b:ba:20:0d:71:20:17:8b:fd:a3:53:60:
ed:eb:7b:f5:8f:1b:1e:31:6c:11:dd:93:36:74:bf:
4e:e7:91:25:21:74:e1:6b:de:91:4f:84:9a:53:c8:
bf:d9:fe:6f:a8:9d:f9:1d:af:bc:b8:82:55:be:41:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C4:6F:AD:73:43:5D:FD:E4:70:09:C8:7A:A6:C7:BB:BA:F4:2E:DB
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b7:26:76:32:e2:8d:2d:f2:a1:8d:2c:93:ba:df:61:8f:69:
7e:b1:dc:28:5d:5f:e9:bc:5c:99:63:52:74:dc:8d:ec:ed:4a:
58:b7:66:af:e7:73:ae:4b:4f:a1:f4:76:93:29:cb:7d:01:ae:
a6:d2:d7:25:a1:d8:9b:d7:c4:62:3d:ba:ed:c1:a6:02:cf:d0:
1e:60:f6:13:dc:6b:aa:20:de:1f:84:51:75:54:d1:e3:b1:1e:
6e:df:8c:3a:04:16:89:d6:f5:39:f3:96:66:9a:60:33:03:ac:
5a:29:51:d4:70:70:73:b5:f1:8a:e6:c9:d3:05:f5:26:2f:83:
45:cf:a7:b0:ce:b1:2e:55:9b:41:77:d4:3c:ce:26:6e:f5:71:
69:56:13:71:b1:cf:38:a4:19:3d:e4:2c:c0:f6:41:b6:2e:0f:
9c:4d:96:7f:ab:28:10:2a:14:b1:72:e5:a0:89:32:3b:97:01:
86:6e:76:e9:35:50:95:24:c3:ca:6f:d9:43:71:17:d4:f1:4b:
b7:0f:a4:45:45:86:10:2d:55:66:0e:d2:b2:c4:1a:38:6c:14:
65:46:23:20:88:cc:8f:ef:c6:c6:25:d6:ad:31:b7:3c:5f:ca:
13:30:40:9e:ee:26:28:88:0a:d0:4d:fb:55:65:00:28:c9:20:
98:04:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:23:50 2025 by rpki-client