Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
File: HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json)
Hash identifier: NtV3Dzv6FkLWICj8EWBY6Coes5v4GWg1t3A2a1ufvlY=
Subject key identifier: 6B:B6:DD:F0:7F:DE:4F:2D:2B:83:B2:29:C0:D9:C6:2C:39:35:C2:0A
Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Certificate serial: 01974AB1CAF8D14AAEA43D20037CA2365938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
Manifest number: 128C
Signing time: Sat 07 Jun 2025 14:00:55 +0000
Manifest this update: Sat 07 Jun 2025 14:00:55 +0000
Manifest next update: Sun 08 Jun 2025 14:00:55 +0000
Files and hashes: 1: 3x4lyNPFV_PxlA3wI9Ks-6pzfts.roa (hash: /RTGCKhsNS1R75WUzsn5pnztjjekAC7jsZZLRjCrE5s=)
2: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=)
3: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: lya2U8VGTOW9j7qE5Ekn44HVwxGagnvffGob3oC5yRk=)
4: u1_Gd7VlEhZ3QqgjEg2OEC7gm14.roa (hash: NHFnan+4Era3/L1csOitqJI62J77zZalfXkxncagMSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:ca:f8:d1:4a:ae:a4:3d:20:03:7c:a2:36:59:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b
Validity
Not Before: Jun 7 14:00:55 2025 GMT
Not After : Jun 8 14:00:55 2025 GMT
Subject: CN=6bb6ddf07fde4f2d2b83b229c0d9c62c3935c20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:4e:f1:de:29:c6:24:de:8d:c9:99:35:2b:
ab:ae:ad:f2:cd:29:ab:13:66:94:96:eb:90:5d:cc:
d9:ab:a4:3f:d0:f1:f9:0e:29:85:38:96:df:35:ac:
ad:76:ca:1b:dc:76:aa:ef:08:41:56:d4:42:b7:47:
16:da:4d:e7:62:3b:72:6e:f3:3d:6d:ab:95:c5:95:
64:4c:6e:bf:dd:4b:eb:c2:78:18:6b:27:d8:62:c4:
79:21:f5:9d:c6:d9:1c:2a:57:98:2a:e0:9a:2c:96:
50:cb:cd:4a:b0:5a:88:7f:42:9e:d6:c7:72:6d:cb:
cc:84:ab:7c:09:13:c5:1a:7c:c1:0e:c6:16:62:72:
bc:25:bf:d9:c9:29:a7:0a:f9:1d:ce:56:29:20:09:
ab:f6:43:a4:34:42:38:5b:df:06:00:ca:1b:a3:f6:
d1:a2:81:fa:33:03:6f:b4:94:f0:f3:44:ee:a4:8b:
f8:23:de:ff:d5:3f:9b:d8:7d:c7:6c:23:c9:db:cf:
fc:47:30:6f:6a:f6:36:31:77:46:53:4a:4c:68:2e:
fa:d4:f6:75:2c:f7:f9:35:5c:f0:7a:d4:92:f6:40:
2e:c7:7a:dc:3e:35:c3:c6:4d:e1:c6:cd:1b:83:a8:
0a:06:18:05:90:43:6c:ec:a8:e4:b5:38:5b:a3:98:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B6:DD:F0:7F:DE:4F:2D:2B:83:B2:29:C0:D9:C6:2C:39:35:C2:0A
X509v3 Authority Key Identifier:
keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5b:7b:30:8b:28:d1:ce:ed:2b:7c:0a:d3:e1:92:49:f4:5a:
4d:23:a2:b5:62:eb:c2:9a:b0:69:dc:e4:c6:c7:65:6e:e7:b0:
1c:ac:bb:8f:e5:1d:23:be:f4:ad:e3:ad:83:09:66:68:5f:66:
b2:0e:da:d8:0b:e6:ef:7f:e1:b4:95:ff:4e:84:92:d9:85:03:
49:89:de:c7:2f:00:0e:01:1c:ba:f2:73:2c:a2:80:a7:01:c0:
b5:b2:bd:13:78:73:f1:7c:18:05:8b:d5:1a:fd:db:ac:84:1c:
3f:5e:6f:8e:3c:01:93:8f:00:46:d7:16:6e:d9:0b:bf:44:4e:
a7:32:a3:85:ef:0a:0e:9f:9e:b2:f1:54:6a:fe:35:b5:01:d4:
4a:9c:ae:89:bc:5f:d3:11:fa:22:10:be:02:3e:dd:96:d3:11:
f3:70:80:92:d6:36:95:9f:cc:f9:25:00:d4:50:ef:45:1a:30:
ef:70:82:45:b9:8f:37:2b:ef:67:b5:51:a4:be:0f:19:eb:b9:
2d:dc:5f:94:e8:b6:a2:19:b3:91:59:dd:4d:fa:c8:58:46:d7:
d1:3a:52:dc:b1:c1:8a:2b:8e:f6:c3:59:d9:6f:88:d7:20:47:
fe:d3:13:f9:cf:f8:b7:f5:d8:92:62:c3:d5:f3:c3:62:aa:f2:
48:b9:81:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:24 2025 by rpki-client