Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: k6LdZkDzq3Bq/22rz+0iKT0aBLvr3vuFRiebcjYlqHU=
Subject key identifier: 61:A3:75:18:53:DC:E9:25:C9:D2:71:5A:F6:9E:7E:B7:FF:C8:30:57
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 01974B568BCFFD6C577FA850E7BA512888F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1497
Signing time: Sat 07 Jun 2025 17:00:52 +0000
Manifest this update: Sat 07 Jun 2025 17:00:52 +0000
Manifest next update: Sun 08 Jun 2025 17:00:52 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: 5xY/C0PuPrkg527zvnmjurehkguD9qHAqiCcbGWrYbg=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:8b:cf:fd:6c:57:7f:a8:50:e7:ba:51:28:88:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Jun 7 17:00:52 2025 GMT
Not After : Jun 8 17:00:52 2025 GMT
Subject: CN=61a3751853dce925c9d2715af69e7eb7ffc83057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:2a:c3:2e:28:36:48:b5:b4:12:6d:52:b0:
4f:6e:b7:b7:d9:3c:83:3c:f1:5f:43:21:f2:0e:2e:
a2:40:a4:da:6d:d1:e7:ca:f8:4e:bc:50:d6:d1:46:
64:ba:67:4c:db:df:46:32:b1:b5:61:a4:8f:10:33:
10:59:64:da:bf:d8:d5:a4:a1:f8:e3:13:90:1d:b7:
00:10:54:5c:ab:f3:ba:fb:19:7c:6b:b3:3c:df:29:
c0:82:f3:cd:a7:ad:16:a3:91:ca:14:c0:7e:19:b1:
2f:91:67:09:16:90:67:03:7f:3d:a9:a3:ce:a9:47:
8f:f4:b3:87:fb:1d:0d:f3:64:ed:13:f0:fd:67:53:
55:ce:e6:fc:c1:3b:0d:7c:e7:6d:85:02:fa:b0:78:
b9:93:1c:da:74:3d:f8:35:16:57:ee:58:43:2d:70:
ee:93:9b:2c:c5:cc:3b:f3:c3:0f:15:59:6b:49:a9:
c0:fe:65:b9:7f:a4:b1:85:62:e8:c7:23:32:1f:d8:
4c:44:b6:c1:81:3a:6f:78:ca:6c:60:54:31:32:9b:
a0:8e:bf:95:d5:f4:13:48:1d:d9:9b:b2:a9:ce:77:
27:73:4b:92:7a:51:af:89:d6:18:3b:6e:56:b8:47:
54:81:7a:d6:f4:01:ba:1e:70:62:7b:37:66:d9:a2:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:75:18:53:DC:E9:25:C9:D2:71:5A:F6:9E:7E:B7:FF:C8:30:57
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d5:71:62:bc:7f:2d:1a:0d:c6:27:bf:dd:d2:13:71:e8:8e:
6f:3c:f5:ba:b3:3c:3a:30:9e:5b:21:5b:7c:5b:91:3c:ac:af:
f6:17:3f:4f:d2:7b:c8:81:e4:1a:75:77:e6:20:71:ec:ea:3b:
88:57:39:bc:ac:67:ee:88:11:42:72:48:ab:16:e6:67:ed:4e:
2c:3f:c0:d3:77:90:ab:ee:a4:07:04:95:7a:6d:7a:0f:4c:66:
cc:41:41:17:d9:ca:91:7b:37:b6:a3:d0:76:a6:cd:65:35:e4:
b0:28:d9:89:35:5d:2d:f2:94:6d:b0:e3:f9:b0:95:e2:7e:05:
e5:cb:ed:7e:d7:fe:0c:0f:95:ab:66:69:b8:9e:1e:4c:33:59:
09:df:29:6c:27:7b:58:52:fa:a5:71:af:f6:1d:09:7f:b7:d5:
84:0a:b9:ae:48:21:c2:62:d6:5f:87:27:42:f6:29:ed:8e:19:
c9:31:24:7e:dd:9d:a5:8a:b4:c0:83:46:6e:b6:80:d6:ef:1e:
b0:05:f0:41:19:3d:6e:0c:55:44:b9:1f:28:57:59:26:25:54:
9d:20:62:b2:71:0f:b5:d2:f3:f5:9a:20:1a:90:bc:9f:71:56:
e6:de:e0:56:bd:d6:bd:e8:6d:3c:90:cf:8a:13:db:8f:fc:2a:
f0:76:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:11:44 2025 by rpki-client