Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier: RdTHq3Gy+JncxNRtwrj8j2PfWpBNI8AIcCKp5ObIZp8=
Subject key identifier: 32:B8:3E:67:5C:DD:FF:D1:C4:B1:C1:E7:5C:52:04:52:28:E7:30:C6
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial: 01975E380C125DDAA4E177DF15ADF52D4A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 09:00:20 +0000
Manifest this update: Wed 11 Jun 2025 09:00:20 +0000
Manifest next update: Thu 12 Jun 2025 09:00:20 +0000
Files and hashes: 1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: lifpLo2Bx8w5badpsuP0ROTpq99PKeVsyRTQVmu/2Uw=)
2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:0c:12:5d:da:a4:e1:77:df:15:ad:f5:2d:4a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Validity
Not Before: Jun 11 09:00:20 2025 GMT
Not After : Jun 12 09:00:20 2025 GMT
Subject: CN=32b83e675cddffd1c4b1c1e75c52045228e730c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:b6:06:18:42:47:e8:a7:51:2c:28:42:a5:
c9:12:95:17:67:99:8c:e8:21:ce:22:7c:e2:93:03:
a0:c3:d4:3a:fc:e6:1e:30:bd:92:c5:57:33:04:17:
48:cd:68:f8:61:31:79:02:17:09:11:f2:95:3e:54:
ae:68:31:7d:6f:37:5f:64:3b:48:2b:b9:cb:76:40:
22:7c:3e:e0:f7:d7:a7:a7:2c:ea:f2:e8:67:b4:4c:
25:e0:ba:59:64:06:38:59:cb:28:46:98:1f:e8:87:
41:d7:3f:fb:9f:53:99:92:a4:3a:ee:76:51:0b:9c:
b1:5d:35:cd:9f:93:ea:cb:5f:97:f1:38:43:db:d2:
ea:af:2e:87:9f:14:b7:7b:dd:e7:ff:69:50:09:8e:
c0:2a:b3:ef:89:d3:e0:dd:81:0a:50:19:b5:27:e8:
2f:97:19:68:ff:63:6a:44:4c:86:99:f3:ac:14:65:
41:ed:95:76:79:91:10:64:a3:56:50:83:a6:fe:93:
d6:3c:86:9c:83:79:0f:61:4d:c5:80:4c:1b:a3:7f:
ae:13:e5:33:27:a3:0c:63:4e:5a:6a:be:85:ea:cd:
a0:de:95:37:8d:88:d6:ba:83:f6:e2:b1:1c:b5:cc:
cd:7e:8f:b4:7c:d5:6b:47:40:3e:9d:74:6a:fd:13:
f4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B8:3E:67:5C:DD:FF:D1:C4:B1:C1:E7:5C:52:04:52:28:E7:30:C6
X509v3 Authority Key Identifier:
keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:32:cf:fd:cd:8e:ec:8a:c8:56:a0:ee:81:dc:51:8d:24:c5:
e5:93:42:e3:0c:9d:cb:ad:6b:bc:53:42:1e:7a:9b:1e:6b:b6:
70:2f:9d:86:e4:0b:e0:1b:55:e4:bd:fb:d3:fe:a9:40:5e:b2:
0d:07:a3:c3:36:a9:78:d7:a8:f2:6a:13:1b:dc:f4:a9:2b:26:
35:65:28:ce:4a:55:95:8a:3c:bb:11:ab:bb:b8:57:a7:c1:e5:
a5:c6:06:5c:bb:d0:ee:22:bd:31:7b:57:04:44:4b:e3:b3:fe:
b8:88:cc:da:d6:8f:5b:fb:11:8b:68:af:c8:05:0e:e4:28:97:
3b:91:06:ff:96:e3:b5:57:33:4d:cb:2b:d9:fd:97:8f:a4:89:
44:31:15:72:1a:d2:ad:34:a5:43:77:45:e1:14:ac:4f:ae:a1:
4f:d0:9b:80:38:b7:3f:db:f5:3d:8a:3d:94:66:26:a6:54:de:
cb:1c:8d:cf:b8:cf:d4:73:36:a6:81:21:90:63:c9:ae:95:a1:
b1:47:1c:72:4a:dc:24:bc:38:e4:45:29:43:7e:1d:01:28:e6:
d3:12:ec:7c:7a:05:e0:8e:87:2a:73:65:71:91:64:7d:c6:c6:
7f:e6:3a:95:1a:97:fb:2a:06:65:5a:07:b3:f8:3a:a8:a8:31:
bd:bc:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:09:05 2025 by rpki-client