Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
File: HCiwfBV6XcYTySZNr4nnyGDjPmM.mft (raw, json)
Hash identifier: P2Uq6hef0PyT/EWVliTFhw0yUh/C6bSrbQkHFoPARFw=
Subject key identifier: DC:7A:46:63:6F:A3:FB:9A:AC:E9:E0:09:0F:70:A6:AD:C2:D2:57:53
Authority key identifier: 1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
Certificate issuer: /CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Certificate serial: 019746D474B229C360619EA5DB6C6281E7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
Manifest number: 1587
Signing time: Fri 06 Jun 2025 20:00:18 +0000
Manifest this update: Fri 06 Jun 2025 20:00:18 +0000
Manifest next update: Sat 07 Jun 2025 20:00:18 +0000
Files and hashes: 1: HCiwfBV6XcYTySZNr4nnyGDjPmM.crl (hash: 553PV+S1Kj7IcZTk8vNtw6hSmKBmErMVZr1tPdqtdyE=)
2: ppcwt792_0fJ4KuVU5oh5bBxCK8.roa (hash: aGVLz4AJdDai2w17wkg6qcb6wYCOJ1V940AR2tF2zrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:74:b2:29:c3:60:61:9e:a5:db:6c:62:81:e7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28b07c157a5dc613c9264daf89e7c860e33e63
Validity
Not Before: Jun 6 20:00:18 2025 GMT
Not After : Jun 7 20:00:18 2025 GMT
Subject: CN=dc7a46636fa3fb9aace9e0090f70a6adc2d25753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:71:64:47:53:61:60:5e:0b:2c:8f:ad:1d:
19:95:3a:25:16:20:08:fe:77:15:10:54:3d:97:e7:
81:ae:2d:30:05:e2:89:8a:c2:de:45:39:f2:e5:06:
82:3c:a3:7b:a8:c0:ab:27:0a:3b:04:68:fe:51:18:
5b:f3:6c:5a:19:75:5f:fe:4c:f3:79:d2:f3:f6:63:
62:7a:09:3f:ff:b7:08:52:6c:52:a4:e4:6f:14:13:
d8:84:48:d0:ea:af:b1:1b:9c:4c:80:70:88:03:9e:
29:8d:14:69:1e:65:8e:b6:6d:9d:b8:59:bf:97:53:
47:8f:a1:d5:10:c4:7c:ee:4b:43:2a:9f:03:b0:69:
1b:70:4a:51:2f:a8:27:94:89:f2:c1:a9:45:7d:57:
3f:55:c6:39:fb:3a:76:3a:3f:ec:50:10:04:2e:8a:
ae:74:ff:3f:3b:e3:12:da:77:fc:6b:6b:14:5a:99:
e0:f5:7c:c3:1f:5f:fb:71:b9:4b:a9:63:99:c9:f4:
73:ca:6b:6b:1d:d1:91:4e:0c:ae:50:44:35:a4:e3:
ff:14:c2:55:bf:42:da:69:77:9f:60:3d:59:1e:53:
5a:6a:03:b8:fe:4a:77:6e:76:61:71:67:7c:45:45:
a5:a1:9e:12:e1:68:98:d5:3a:e4:a8:61:3f:b0:54:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7A:46:63:6F:A3:FB:9A:AC:E9:E0:09:0F:70:A6:AD:C2:D2:57:53
X509v3 Authority Key Identifier:
keyid:1C:28:B0:7C:15:7A:5D:C6:13:C9:26:4D:AF:89:E7:C8:60:E3:3E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCiwfBV6XcYTySZNr4nnyGDjPmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fe7dfc-1264-4c94-9bcc-96333489e855/1/HCiwfBV6XcYTySZNr4nnyGDjPmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a3:02:58:c6:cd:39:ab:31:47:52:a4:2c:2e:a8:db:8e:55:
b2:1b:c9:b1:6a:60:7e:ca:3c:2f:f6:57:9d:14:f1:80:21:13:
0b:f7:e2:6c:51:8c:02:46:61:45:3e:4e:a9:d2:af:1e:1d:38:
92:ee:86:d5:71:80:bb:20:81:57:92:3a:2d:94:17:8a:a5:f8:
4d:9a:ac:a2:be:d4:4a:82:a2:24:f0:65:db:7f:75:22:90:5a:
8f:d9:11:94:05:6a:e3:08:8a:de:a5:76:8c:3e:d6:f6:19:3b:
62:49:f3:7b:17:4b:2e:d0:a5:c2:ff:ef:b1:56:a5:ec:3b:ef:
6c:fe:3f:14:e1:14:68:f4:36:ed:5c:76:c8:e9:25:3c:5c:09:
5b:0d:ad:f2:ac:00:e1:09:f4:b3:3d:77:c8:f5:d2:ce:c8:4f:
24:8e:64:5c:bc:92:c2:63:db:55:7c:d0:6f:db:d6:79:d0:00:
d5:b5:9a:db:75:63:63:2f:4b:a6:9d:25:36:53:f1:51:74:6b:
05:cc:be:52:3c:c1:76:d2:43:74:22:fd:21:01:cd:e8:f4:9b:
fb:27:b8:23:df:65:8b:90:09:31:c3:85:ca:cd:8c:1e:7e:bb:
de:74:71:40:05:59:c6:70:dd:c1:56:bb:21:b3:a6:90:9f:7f:
cb:05:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:36 2025 by rpki-client