Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: s6JcFGMkKjV0/NDLt285nt5vAa7R678NjSHkf877jMM=
Subject key identifier: 88:35:A5:4D:86:82:96:9A:57:19:32:D2:0D:B7:31:6D:12:5E:AF:69
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 019747E799657F1C424D8D88200CF974792B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 01:00:49 +0000
Manifest this update: Sat 07 Jun 2025 01:00:49 +0000
Manifest next update: Sun 08 Jun 2025 01:00:49 +0000
Files and hashes: 1: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: 3B6et3As42KsqVQpB91fAVA5AXs2zuDqBtmUTO5xSOM=)
2: iM7SCQycar1nudDnDJd9cpfWE14.roa (hash: 7fSKbbU/ayenSU9Vz0FeCegebZtfdQUaQXiUz4lT3zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:99:65:7f:1c:42:4d:8d:88:20:0c:f9:74:79:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Jun 7 01:00:49 2025 GMT
Not After : Jun 8 01:00:49 2025 GMT
Subject: CN=8835a54d8682969a571932d20db7316d125eaf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:54:66:be:c7:90:5e:09:31:2e:20:df:50:
d2:55:a9:c5:b8:cf:92:b2:1b:67:46:b2:31:02:d6:
f4:66:02:fb:39:e4:ad:6b:cd:16:eb:16:44:5b:9c:
50:24:a8:2e:20:e1:f9:d1:d1:57:20:81:46:c1:e5:
30:de:d7:cd:7d:30:a3:b9:cb:9e:b4:39:f1:b1:11:
6e:72:10:9b:45:46:f7:2d:ec:0e:e2:43:e9:15:3d:
ac:67:15:39:bb:b1:29:31:32:71:d3:aa:d7:32:2d:
c2:44:89:da:36:ba:be:98:91:a9:32:fc:f8:8b:ce:
52:00:92:22:54:b7:03:91:a5:fe:80:cf:2b:10:e4:
d6:f5:53:04:e1:48:e9:08:86:a0:0a:c0:4f:00:c2:
34:83:da:7c:df:4e:64:4e:34:4c:84:34:69:af:45:
83:6c:d4:c5:ef:00:96:ca:d3:53:9b:6b:fb:dd:1c:
08:e6:8d:0b:0c:3c:c9:62:7f:c5:6c:97:42:46:7c:
9d:d8:97:0a:7e:9e:13:86:0a:6c:db:44:25:5a:d7:
a0:0e:68:a7:98:7f:d1:e9:23:97:ab:59:f9:e6:3c:
57:01:a1:63:49:9c:ff:d8:1c:c8:18:9e:21:ee:fa:
78:93:29:bd:85:a3:7a:bc:8d:ee:59:cc:58:76:1c:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:35:A5:4D:86:82:96:9A:57:19:32:D2:0D:B7:31:6D:12:5E:AF:69
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2d:bb:79:cb:5e:76:ce:e2:cb:21:80:0b:8f:9c:88:6b:76:
9c:30:7a:64:11:9a:a4:36:bc:0b:e9:9f:86:0e:17:67:36:22:
64:ab:93:77:43:28:6d:eb:6c:4f:72:d3:0e:4f:dd:eb:4a:4a:
df:26:17:02:3b:ef:74:10:4d:c6:c7:51:15:91:60:85:52:71:
d6:f9:6f:18:c6:b5:86:fb:e9:ef:b9:61:b4:9d:34:7e:7e:21:
3e:74:67:92:cc:18:c6:8a:03:f9:68:9f:c4:0f:95:e2:7b:fa:
24:01:1a:17:58:11:45:b8:b5:4a:48:71:35:a0:f4:68:ee:f4:
11:3a:b0:38:32:52:a9:c9:d0:40:c9:72:51:97:4c:28:30:43:
4d:0c:44:4c:38:3c:dc:33:7d:71:ec:76:12:9a:ce:f8:71:77:
00:a7:e5:49:8f:42:d5:c6:c5:ce:66:a3:c8:2a:28:b6:fa:22:
5c:dd:f2:b7:7d:e0:5e:6a:65:6b:4d:1a:08:fc:1a:37:31:bb:
9f:69:ed:17:9c:bd:51:2e:ea:14:43:40:cb:c8:28:a0:d2:cc:
a3:d2:b3:44:1c:75:1a:7d:ca:d8:02:3a:eb:a9:b0:5d:ab:46:
1f:49:99:0b:a7:ac:15:6c:ba:55:08:f3:ee:2d:93:da:d1:f1:
b9:66:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:07 2025 by rpki-client