Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: nrCA8+omaGQEcoXhaUviUY5QZCbR4MxDR5UY6L7dU9E=
Subject key identifier: 50:69:CB:23:9A:2A:C0:FD:13:AB:74:DE:00:85:8F:B3:41:F3:0B:BA
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 01974E5710803DC92DBF4229E77DDEE50204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 10D0
Signing time: Sun 08 Jun 2025 07:00:17 +0000
Manifest this update: Sun 08 Jun 2025 07:00:17 +0000
Manifest next update: Mon 09 Jun 2025 07:00:17 +0000
Files and hashes: 1: DLIEmy-lWsyrr-sd36twYuEevio.roa (hash: aUcurTUu0ie7YyEr+ll+2DTq3WZheC8vTveKU2r56C8=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: RWFRK/xS0DBLGceyqHwSc6F1jINFKPJQ5rpoP6hVHwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:10:80:3d:c9:2d:bf:42:29:e7:7d:de:e5:02:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Jun 8 07:00:17 2025 GMT
Not After : Jun 9 07:00:17 2025 GMT
Subject: CN=5069cb239a2ac0fd13ab74de00858fb341f30bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:62:8c:39:87:82:46:21:02:57:9a:05:d4:
ef:36:d1:e7:e7:7e:8e:80:4e:65:f8:12:43:03:c8:
4a:03:d3:0e:f3:03:1c:f7:77:0a:16:ca:49:1d:6c:
57:be:74:37:9a:9c:6c:e6:c1:fb:b7:24:93:44:61:
13:b7:bf:5b:43:c2:ff:d2:d7:c0:f0:d9:28:d4:d7:
9b:72:91:82:b7:85:ae:43:65:45:62:1a:50:28:80:
12:a3:a2:33:5e:1d:c0:a6:4c:fd:3b:b3:42:ae:4e:
ac:8b:9f:c6:dc:2c:1d:7c:bc:a1:fd:1b:d9:28:fa:
d9:26:63:81:89:6c:6d:62:dc:df:9f:ac:91:b6:9e:
00:5b:99:3a:cc:ae:2b:85:e4:02:43:ef:e0:f7:b5:
82:bd:09:64:b6:4a:ae:bd:94:c1:64:45:c0:61:7c:
c3:7d:35:06:0e:62:74:58:aa:05:ae:f3:56:d1:f0:
ce:16:c9:88:67:74:2a:9a:40:dd:48:17:9a:de:3e:
89:33:58:65:01:10:eb:8d:e8:1a:ad:26:5c:75:4d:
40:58:fe:2c:1e:d9:ac:85:5c:7e:87:87:b9:d5:2b:
2a:79:b0:df:07:a8:7a:b0:2d:9b:48:f9:35:2e:93:
c7:c5:94:f4:15:bf:fc:f3:fc:56:d9:a2:ab:2f:58:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:CB:23:9A:2A:C0:FD:13:AB:74:DE:00:85:8F:B3:41:F3:0B:BA
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:98:ac:42:d4:67:b3:e1:c5:36:e5:7a:6b:8b:b8:53:38:07:
f7:be:0e:84:9b:49:13:44:a3:71:23:9f:b1:d8:cc:4a:d8:de:
18:1c:73:ec:34:bc:b5:d8:ac:7c:17:29:e5:02:c7:3d:07:9a:
07:11:20:7e:11:59:e9:31:24:e4:0e:cd:41:c5:7b:c1:f3:aa:
5c:a5:af:ec:a8:9d:c0:71:2f:9b:52:6f:0c:c9:20:a7:fc:56:
2a:66:06:13:b4:17:c0:ed:f8:5c:38:02:7e:9b:4b:ab:78:b9:
71:cf:04:d1:af:eb:c7:2b:bb:a5:55:b5:9f:60:be:fd:0b:81:
62:cd:8e:1d:48:d9:ca:07:4c:99:e8:b6:18:46:00:3d:45:f5:
82:b3:f8:9a:67:2b:28:e4:c5:8b:df:3f:93:be:84:cc:af:e4:
c2:a7:f6:b2:f4:be:55:ed:1d:ea:62:33:27:0f:1c:c7:b5:ca:
a1:2a:c0:6d:26:83:97:15:a7:71:4d:df:91:cc:96:55:55:51:
c1:fb:39:ff:d5:80:67:29:16:ab:0f:79:85:52:f0:24:51:7f:
48:7d:77:8c:03:0e:88:e7:fb:53:16:e9:3b:5f:79:68:cc:c0:
4d:9f:fb:40:d4:56:37:cc:2f:e5:94:ed:39:4b:b9:e1:13:52:
b4:86:2b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:35 2025 by rpki-client