Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json)
Hash identifier: /23Prie1uwSUoArkKroGVLKBcwfT+TTyP7kRPRb1dBw=
Subject key identifier: 28:34:94:40:67:09:63:26:14:7E:9D:05:3F:5E:42:08:15:FD:BA:3D
Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c
Certificate serial: 01974742C9D59288A06C5E74DC5B706EDF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
Manifest number: 05D9
Signing time: Fri 06 Jun 2025 22:00:48 +0000
Manifest this update: Fri 06 Jun 2025 22:00:48 +0000
Manifest next update: Sat 07 Jun 2025 22:00:48 +0000
Files and hashes: 1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=)
2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: vsP8fYaoVyRg+zl/jFXxvwMGFHgdl0nsZxBsOy/uS9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:c9:d5:92:88:a0:6c:5e:74:dc:5b:70:6e:df:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c
Validity
Not Before: Jun 6 22:00:48 2025 GMT
Not After : Jun 7 22:00:48 2025 GMT
Subject: CN=2834944067096326147e9d053f5e420815fdba3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:b5:2b:86:e9:aa:43:42:9b:28:86:bc:4b:
d5:a6:76:40:8a:39:13:ee:9a:d4:9f:0d:c6:47:69:
e1:25:a1:9e:1f:62:90:7a:d7:ad:9f:37:c0:df:3f:
27:3c:fc:29:e7:c1:37:44:c9:36:1d:39:9b:2a:ef:
89:48:74:ff:c6:76:d6:29:cf:df:6c:3b:76:69:4c:
06:2a:8a:e7:3e:dd:9a:f9:76:3d:f4:29:01:f5:b0:
7f:e1:e7:d4:5d:b2:6f:aa:6d:49:d7:a0:21:86:60:
be:ba:9f:07:26:b7:8e:95:b0:79:d3:f8:72:49:a9:
ce:98:b1:cd:50:7e:06:ec:ba:76:4b:ff:82:47:b5:
37:d7:df:68:ae:a0:b2:ae:4f:9b:9c:5d:75:1b:3b:
b8:55:55:d8:34:3a:28:50:fd:18:0a:bd:f9:d6:4b:
cc:c2:62:6b:c5:31:ad:d2:90:cd:02:90:a7:2c:f4:
5c:43:b5:91:51:d8:71:d2:cf:08:77:85:29:e9:54:
4e:49:dd:1e:39:15:35:74:07:72:64:21:8c:b0:3e:
60:14:1f:a0:31:10:d6:7d:92:4e:82:a9:c4:f2:6a:
d2:cf:8d:9f:61:65:de:04:5d:c2:0b:7b:c7:24:3a:
80:43:64:3e:ca:35:18:3b:57:cc:8d:d2:d5:fc:82:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:94:40:67:09:63:26:14:7E:9D:05:3F:5E:42:08:15:FD:BA:3D
X509v3 Authority Key Identifier:
keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:20:d1:ca:ef:21:ef:0d:1b:46:88:22:32:68:13:56:08:92:
94:44:10:13:93:53:26:1e:cc:7c:39:9a:16:c4:88:3c:10:c3:
5d:41:d1:90:be:f5:fc:2b:ff:e3:0b:34:2f:86:45:14:47:10:
56:21:72:a6:fd:c5:3c:f7:83:27:75:70:9a:9b:f3:60:65:6c:
03:cc:07:38:5b:79:36:8d:24:cf:95:6a:23:07:35:01:c7:53:
a7:ea:87:77:40:a0:30:c6:20:fd:7f:07:82:06:01:01:18:29:
72:97:1e:78:8c:4e:ae:6d:30:22:61:fa:7a:b8:08:f2:46:70:
6e:ca:74:36:e4:45:ff:8d:8d:6c:03:41:66:38:61:e8:e4:37:
77:5f:ef:da:a8:7f:7c:6b:0f:4b:70:18:38:c5:37:9d:a8:36:
9b:2f:fd:53:f3:0a:7a:68:02:ac:34:b0:d2:55:03:a0:31:ba:
a5:dd:eb:c1:69:f0:09:68:b6:a6:f3:8d:d9:13:ca:bb:77:f4:
96:6a:08:0e:40:48:30:14:85:49:f4:93:f6:24:27:ee:8b:73:
3d:01:08:84:51:77:cc:f5:d7:1e:54:c6:92:8f:fb:5c:90:a5:
45:91:0e:2f:dd:ca:e7:b8:5f:68:64:86:86:f0:a0:81:ee:c0:
17:41:0a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:30 2025 by rpki-client