Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: In5fIhsRDnVBLHRbvA4Xf7n4HYh+LFmETVN9Ctblrg8=
Subject key identifier: BA:6E:DC:31:60:23:AA:6C:68:B1:75:B8:63:F8:1E:DB:97:68:7C:CD
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 01974FA12E5C000D1BA6DA492F6DED81AD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 100E
Signing time: Sun 08 Jun 2025 13:00:52 +0000
Manifest this update: Sun 08 Jun 2025 13:00:52 +0000
Manifest next update: Mon 09 Jun 2025 13:00:52 +0000
Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=)
2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: gln21AaUbjU1qHznBYsEilqrGxvSwO9O348c34tSLtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:2e:5c:00:0d:1b:a6:da:49:2f:6d:ed:81:ad:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Jun 8 13:00:52 2025 GMT
Not After : Jun 9 13:00:52 2025 GMT
Subject: CN=ba6edc316023aa6c68b175b863f81edb97687ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e1:b5:74:01:0f:db:6b:a5:e3:fc:85:2d:d2:
73:f3:35:84:fd:e6:f1:64:11:35:33:c2:c9:c5:55:
c6:a7:87:c6:6c:9c:f8:41:6b:79:c8:18:41:16:2c:
ff:21:30:02:e4:87:a9:eb:64:c1:0b:fc:07:53:8b:
f4:fc:dd:d5:02:c5:2e:ab:08:01:3f:03:2a:a7:96:
0c:4b:df:fe:10:2b:35:7a:75:8a:0e:dc:2c:52:47:
a2:91:cb:03:aa:35:7c:1a:b6:51:07:78:46:eb:ab:
da:18:a1:1d:27:07:78:a0:ec:de:c4:40:3c:dc:5b:
d7:0e:37:88:ce:e1:a4:c7:be:5f:88:96:e7:41:42:
b1:5f:e8:ca:bb:9d:b3:f3:35:43:20:76:6f:77:fc:
b4:03:ee:5a:79:d3:db:db:97:d9:b5:6a:34:5a:bb:
c1:e9:df:79:56:93:f3:a8:03:92:4c:9f:a2:c8:2e:
55:5c:9b:91:ad:34:4e:5d:75:ad:3b:97:ef:eb:38:
a1:6f:7d:4b:9a:79:b5:89:b1:89:46:77:5d:8b:c5:
06:e4:ca:cc:f0:ed:51:5b:62:cf:c2:2b:9c:fa:13:
40:cc:cc:cc:19:b6:54:7e:86:38:c4:9c:78:f7:fe:
1d:50:b6:68:12:0e:79:4d:c0:3b:df:83:a7:f4:02:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:DC:31:60:23:AA:6C:68:B1:75:B8:63:F8:1E:DB:97:68:7C:CD
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ed:61:6d:3f:c8:ec:0a:57:38:2c:ab:90:11:1a:02:19:a5:
69:d8:36:71:88:9f:1d:2a:6e:af:b1:1f:18:5c:e8:23:c8:39:
84:5d:b8:a4:3c:a3:27:6e:58:06:42:43:a3:56:cb:06:18:4d:
d5:81:37:6a:f4:55:20:bc:75:66:ac:65:18:77:b8:e6:56:ff:
f2:8d:cd:c1:1d:f9:36:9c:bd:00:5c:bc:33:d4:ea:6a:e3:bd:
0f:41:ba:11:51:d2:af:79:a9:d0:57:7b:eb:29:9b:40:fb:41:
91:d0:63:2f:44:43:69:62:60:15:0b:65:46:72:95:97:e0:24:
a4:77:35:96:fc:19:e5:14:bf:91:42:fa:ed:a5:cb:e2:2f:05:
69:b2:16:e8:91:ad:03:ae:a7:54:99:09:05:d5:5c:64:86:c2:
c8:c2:02:d2:c7:9f:56:9a:c0:fd:4b:e3:e0:3a:6b:70:55:07:
18:14:04:48:fd:af:8b:88:17:87:5b:90:65:00:44:28:cd:a9:
0a:c1:79:85:a9:f8:3c:34:51:96:3d:a5:7e:15:c9:c0:ce:6f:
63:94:93:e0:fc:27:6a:41:e1:63:cb:5f:3b:9f:a4:82:8b:25:
cb:24:55:c2:c1:d5:42:0b:25:27:40:90:41:08:6d:74:c4:a1:
da:15:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:53 2025 by rpki-client