Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: KvHck6sVYS/qQiSw18JVT85mLq7O+sZb2oZbi9RmAk8=
Subject key identifier: 77:AD:C6:C6:9B:B4:07:3B:B1:B1:AC:65:AA:E9:13:C6:B2:3D:4C:F2
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 01974779543E7AC3F42FC683007CA5E52027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 11CA
Signing time: Fri 06 Jun 2025 23:00:23 +0000
Manifest this update: Fri 06 Jun 2025 23:00:23 +0000
Manifest next update: Sat 07 Jun 2025 23:00:23 +0000
Files and hashes: 1: 6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (hash: Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=)
2: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: vvfvR8ULHgkJVzcrf5mrVY8w5KptlzQpHpwVAncCYuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:54:3e:7a:c3:f4:2f:c6:83:00:7c:a5:e5:20:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Jun 6 23:00:23 2025 GMT
Not After : Jun 7 23:00:23 2025 GMT
Subject: CN=77adc6c69bb4073bb1b1ac65aae913c6b23d4cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:88:a3:76:bc:ea:03:0c:0e:e2:05:c2:48:
dc:96:09:8f:ef:1f:af:ea:d9:49:9f:7a:b9:96:dd:
dd:e3:b6:d0:39:c3:57:2b:57:de:aa:63:a4:e4:9e:
f9:89:dc:1b:4c:dc:86:2e:49:59:f7:3c:09:e4:e1:
6d:59:5c:23:30:c0:e4:03:b1:a5:2d:71:27:82:f6:
f7:be:04:11:82:41:81:55:5f:aa:8f:71:9f:41:6f:
85:3f:63:3b:58:fc:2c:5e:e6:44:4d:d9:9d:a7:1d:
af:1a:93:d2:0a:e4:f0:8b:9a:23:e4:d2:e5:b2:ce:
01:dd:ae:0d:c7:df:3b:4b:80:b0:25:c3:ce:76:d0:
32:be:d9:2f:66:4b:6d:9e:3b:13:77:16:71:ef:38:
79:10:ee:c3:30:cd:7e:32:09:eb:cd:70:95:35:77:
e5:7f:e5:0f:68:b8:d2:84:f9:25:8c:57:73:cc:c9:
d7:d1:89:e2:bf:84:30:a8:0d:3a:b1:44:6e:0a:7d:
49:76:c5:36:4b:14:cc:57:f9:96:69:5b:15:e2:e9:
c1:88:81:a1:46:90:b1:95:5f:93:a6:54:4d:61:2a:
97:8f:04:c4:93:3a:0b:a6:3a:17:25:33:de:c2:78:
5b:3a:8c:3c:13:d4:54:98:0f:74:ee:db:e8:a6:94:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:C6:C6:9B:B4:07:3B:B1:B1:AC:65:AA:E9:13:C6:B2:3D:4C:F2
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:61:ae:8d:ac:c3:79:6e:4c:f0:b2:57:86:21:3c:90:2b:11:
23:d0:44:6e:c2:b0:e5:2f:99:36:1b:cf:53:b5:5f:2d:55:e4:
4e:44:08:77:08:b3:f5:0c:91:6d:51:9e:6f:e1:ea:17:28:74:
f1:e7:f9:e5:43:eb:12:f3:2a:4c:8d:f5:97:3d:9a:65:a3:80:
0b:74:64:e0:03:81:a4:7e:6c:4a:2b:b5:0c:cf:0d:66:47:8c:
d0:73:a7:96:14:91:77:ec:41:d0:60:82:fa:e0:3c:54:d1:a6:
9a:36:56:45:4a:3e:e0:c4:dc:bb:63:c3:b7:a4:03:b0:f9:b6:
b3:99:e4:b7:a4:9c:ed:3d:f1:cc:10:aa:df:44:84:a5:65:ae:
b7:81:a5:94:0c:1d:62:0b:14:b6:b9:8a:7d:8a:10:30:22:f9:
66:57:79:a0:b1:6a:1b:22:4e:a2:78:b9:ea:70:9d:3b:19:e4:
b0:34:20:e3:1f:a7:5c:c0:d5:f1:6d:06:f4:25:fa:5a:37:ba:
18:d4:75:2d:d0:38:d2:11:51:87:7d:7c:e9:70:59:03:49:64:
54:83:04:4d:e1:5e:e6:85:71:04:00:27:bd:e4:a5:47:3b:a1:
e6:22:cc:91:00:6d:49:ee:6b:6d:47:cd:c5:f8:c9:e1:d2:cc:
94:f3:49:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:25 2025 by rpki-client