Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: eqYhf+7jQpqJclSLilZegN+kPRRw3Wdx3FZVZ34pJl0=
Subject key identifier: D9:B5:77:2C:40:98:9B:9A:E4:98:DA:AF:A6:10:A6:CC:4A:9F:59:29
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 01973FF767DE526F779C9FE63BA2484654A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 13E1
Signing time: Thu 05 Jun 2025 12:01:07 +0000
Manifest this update: Thu 05 Jun 2025 12:01:07 +0000
Manifest next update: Fri 06 Jun 2025 12:01:07 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: druw5A5R2Nz/FI47IzgBsDaMy94ro6G+Yn+EhvgP3pw=)
2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=)
3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:f7:67:de:52:6f:77:9c:9f:e6:3b:a2:48:46:54:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Jun 5 12:01:07 2025 GMT
Not After : Jun 6 12:01:07 2025 GMT
Subject: CN=d9b5772c40989b9ae498daafa610a6cc4a9f5929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:44:14:99:3c:3f:27:77:d8:84:84:a1:bd:
7e:0b:51:a6:f7:c6:1e:ca:3a:0e:51:07:95:a8:22:
c8:83:34:9d:ce:6c:2c:6e:02:f0:4f:08:0e:0f:a6:
f5:33:43:14:5d:f6:62:f5:bb:53:82:61:da:2b:3a:
21:dd:b7:af:4c:4a:56:ca:99:21:4f:95:c3:19:04:
5d:94:72:1e:8a:b1:1e:8a:d6:ec:35:32:44:a7:a8:
4d:df:dc:57:60:b4:9f:9f:8a:36:66:a5:57:47:7f:
45:21:33:c1:6b:82:db:47:1b:14:0d:c4:d2:d1:47:
f6:3a:4c:00:f0:8f:48:2d:4f:9a:89:71:c3:4f:8a:
46:e9:3d:ec:27:6c:1d:22:22:fd:f3:7b:27:30:c4:
1e:a8:b6:a8:20:e0:2e:fb:b9:16:12:1c:26:10:65:
06:b9:f8:d8:1f:e0:9c:5d:60:11:a0:44:6a:52:5a:
a0:61:bf:9a:74:ff:e3:ce:6b:48:ce:40:9b:96:0b:
ce:79:cf:00:13:81:fb:2a:57:0a:b3:ca:77:d4:48:
a9:52:70:85:ba:3c:e4:d5:f0:b9:74:e5:e2:ec:71:
84:84:92:ab:cc:b5:10:ff:f0:4d:59:5b:02:41:a8:
42:39:0b:64:70:84:6f:aa:ca:86:59:fd:f5:a8:f7:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:77:2C:40:98:9B:9A:E4:98:DA:AF:A6:10:A6:CC:4A:9F:59:29
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e7:dc:19:4e:85:00:7e:63:cf:02:15:3d:89:70:ac:a4:ed:
49:ea:ec:4c:b0:2f:f0:fd:7b:ff:1f:c6:f5:1e:f1:f0:57:a4:
fc:d4:c2:e6:96:65:03:9e:84:17:d0:95:65:cd:73:3b:2a:18:
37:b4:de:0b:2c:27:92:55:d1:0e:6e:62:9c:4d:bd:25:1e:35:
a4:8f:f1:0d:db:e0:a0:98:2e:b5:2f:bd:f4:29:ca:d7:01:52:
55:cd:ac:3b:56:a0:64:f3:12:ac:b0:53:1a:a4:a0:9f:72:68:
74:27:60:90:b6:2e:9f:d3:9c:1d:fd:d4:69:44:0c:6e:92:32:
17:87:8a:da:23:5b:08:79:ea:81:6a:72:f3:38:c6:e6:be:a7:
d3:8f:78:27:19:69:22:25:b4:21:03:7e:6b:2b:d6:35:ca:42:
39:bb:94:ef:c9:08:bc:ba:ff:1b:d4:0c:f4:44:3f:e5:43:44:
94:a2:92:36:fd:ef:ee:88:ca:78:00:a3:ec:5b:b5:ab:e1:b9:
49:27:d1:c8:28:4e:c7:f6:d1:13:4a:77:9b:fa:f4:40:33:1f:
b3:f7:3d:00:20:ac:d4:7a:e4:35:35:42:b4:13:8e:9f:19:85:
a0:ec:57:92:45:03:0c:11:d5:58:99:50:27:cd:79:27:01:29:
5c:16:2d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:30:10 2025 by rpki-client