Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: A254QWM/Yt/afTr2HnHVzNx9PHHlNPqTbBCODAGXQoc=
Subject key identifier: 65:F6:2B:30:A5:BE:EB:72:F6:2D:01:40:16:7B:A1:B3:C8:9E:96:2B
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 01975158E140EAF2CDCFC3948D75A811FB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 21:01:08 +0000
Manifest this update: Sun 08 Jun 2025 21:01:08 +0000
Manifest next update: Mon 09 Jun 2025 21:01:08 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: uA4mnex/NJYnI46FLScJmVy0O6klaRtvw0qZBkCGy7U=)
2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:e1:40:ea:f2:cd:cf:c3:94:8d:75:a8:11:fb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jun 8 21:01:08 2025 GMT
Not After : Jun 9 21:01:08 2025 GMT
Subject: CN=65f62b30a5beeb72f62d0140167ba1b3c89e962b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:9e:0e:6c:87:9a:9e:2d:03:2d:b4:24:f8:
c0:6a:c6:59:10:a4:db:d0:20:9b:ff:56:70:72:45:
6a:a6:d9:a8:05:e7:ac:44:12:ed:da:22:f9:49:d6:
76:17:3c:27:b1:67:f9:f2:b2:69:c7:69:2b:ef:72:
a5:25:2e:ef:60:33:93:25:12:e1:09:b2:83:1d:d3:
00:e2:64:73:c6:b2:26:06:3a:13:91:23:4e:7d:3b:
3c:c2:2d:0c:e1:04:da:96:1c:f2:75:90:cb:87:08:
14:3f:4e:6e:a4:19:82:0b:ee:66:9d:f7:a4:6b:3a:
5e:a1:67:9f:eb:44:bd:19:38:9a:a8:af:92:30:28:
89:ee:85:a4:0d:c3:cf:3c:08:f3:87:10:2e:c1:f8:
18:20:ca:6d:42:3b:60:1d:bd:06:81:fb:89:53:a2:
2c:89:a1:6a:e7:43:e9:17:50:ce:de:16:f4:93:8a:
5b:15:97:07:b7:fd:ea:e4:ec:ef:35:50:8e:30:d3:
e1:e3:aa:27:83:03:42:92:c2:8b:81:49:05:6c:a2:
f8:13:82:1f:e7:a1:2c:41:34:95:96:43:ee:e6:40:
ff:2c:0d:09:ab:05:02:4d:e1:77:a8:b3:9d:7d:85:
be:da:d2:37:04:ce:a1:db:12:b6:50:a8:19:c9:6a:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F6:2B:30:A5:BE:EB:72:F6:2D:01:40:16:7B:A1:B3:C8:9E:96:2B
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5b:e0:c2:6f:a2:70:e6:d0:d1:a3:3f:ec:dc:e3:0f:05:7b:
5c:36:cd:bc:29:8b:5f:33:bf:d5:20:2f:c2:2e:d0:9f:13:ca:
1c:2b:e1:2d:dc:2c:2e:4e:51:12:1e:4c:d5:22:37:d7:88:af:
0f:89:89:3f:b9:33:88:fa:9a:aa:87:c8:42:8f:2f:81:26:5c:
45:9b:e1:fe:b9:94:8d:58:d3:db:9f:b8:79:19:0a:39:96:fe:
30:a3:03:2e:57:b0:6c:d9:7d:cb:d3:58:bc:cd:9a:f1:af:1e:
b9:f8:85:2a:72:17:8e:3d:8f:f1:cc:42:36:74:5d:a3:23:ee:
d0:62:b8:8f:6f:ac:36:0d:04:3a:ae:ea:f5:3b:a6:96:eb:bf:
ab:41:9d:52:2d:7f:15:11:45:71:bf:26:25:e0:82:08:a1:61:
f0:ff:54:ca:e3:07:b0:13:00:cb:73:99:b8:a9:61:4f:57:dd:
3a:88:5c:c7:fe:82:96:f8:fa:57:5c:81:44:76:ef:eb:92:78:
f0:7f:ac:f9:bb:f5:e9:a4:08:64:ed:a0:c3:b1:df:38:a5:27:
dc:71:15:43:29:16:9c:d2:c6:29:07:92:ea:31:af:c3:9e:4d:
9d:e2:83:78:f0:bd:46:1f:2b:22:d8:07:94:d5:7f:00:33:a1:
7b:36:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:32:14 2025 by rpki-client