
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
File: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft (raw, json)
Hash identifier: Hjq8PStD392IJ2F0bfmOIN9Fr3IIBjlzPMBFPq2fIsA=
Subject key identifier: F0:B0:35:10:C6:94:9F:C0:4C:DA:D5:7F:73:1C:A0:16:F1:CB:54:30
Authority key identifier: 1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
Certificate issuer: /CN=1e54b80723921cdd51da53325f12b3dbc6782664
Certificate serial: 019750B367B8ED28BC1DD100860B19445126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
Manifest number: 0345
Signing time: Sun 08 Jun 2025 18:00:24 +0000
Manifest this update: Sun 08 Jun 2025 18:00:24 +0000
Manifest next update: Mon 09 Jun 2025 18:00:24 +0000
Files and hashes: 1: HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl (hash: C2h3CzYklbWThMAbUGuwFHIafPwhKRI4EbmDAm3/kyk=)
2: o3Nghoyrq0VU_9LJuoCR7_VhfaU.roa (hash: zzahS3EyrX+jIVg6yGR2kDs1UzlqtPtkB9ukn8PHDT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:67:b8:ed:28:bc:1d:d1:00:86:0b:19:44:51:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e54b80723921cdd51da53325f12b3dbc6782664
Validity
Not Before: Jun 8 18:00:24 2025 GMT
Not After : Jun 9 18:00:24 2025 GMT
Subject: CN=f0b03510c6949fc04cdad57f731ca016f1cb5430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:b5:db:ef:a5:4a:61:f0:b4:ad:b4:d5:ca:
b0:50:61:53:ad:5c:5b:8f:6f:99:24:2f:e5:b1:39:
de:7e:b1:e6:e2:7e:56:f4:6a:01:51:c7:55:4f:43:
b1:6b:d1:67:41:3e:05:b7:62:42:38:28:34:0c:56:
7f:a1:a3:47:d7:6c:36:f9:ba:48:82:06:93:30:d3:
fa:09:2e:60:23:41:b1:9d:36:63:3b:fe:c8:75:dc:
2a:74:cb:6b:2e:fb:ba:2e:a4:da:68:fe:2e:a6:80:
92:68:cb:d4:34:11:65:52:40:c3:f3:c0:21:fc:98:
43:28:db:3d:87:86:1b:53:8a:80:e0:60:ac:7e:2d:
0a:aa:9f:cb:f8:79:c3:52:37:ee:cd:5f:de:18:33:
32:2b:68:31:fc:74:f9:73:e0:aa:d0:53:d5:35:03:
f3:21:c9:90:8f:c1:08:a0:94:0d:4a:b9:40:ac:ea:
f1:11:68:5b:ae:63:fc:6c:ec:e3:eb:ba:e7:e3:27:
99:ff:d5:b2:07:73:65:19:c7:7a:1b:25:fa:81:9a:
14:f2:b1:33:4d:45:7f:73:5c:3f:a8:af:80:14:1a:
87:ba:c4:e5:f1:0d:45:52:cc:6e:15:ef:be:21:73:
44:70:00:47:23:56:9b:9c:d0:f8:15:c1:c4:35:26:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:35:10:C6:94:9F:C0:4C:DA:D5:7F:73:1C:A0:16:F1:CB:54:30
X509v3 Authority Key Identifier:
keyid:1E:54:B8:07:23:92:1C:DD:51:DA:53:32:5F:12:B3:DB:C6:78:26:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/46a38c-5d73-42b4-afeb-de80791a1386/1/HlS4ByOSHN1R2lMyXxKz28Z4JmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:61:fe:cb:c2:74:9c:df:30:f6:27:fd:e2:64:28:75:48:79:
e9:c7:d8:c6:87:c6:f9:ff:2b:49:6c:3b:f5:1f:cf:11:0a:35:
8e:7b:8d:ea:5e:00:6b:e3:62:b8:32:44:7f:44:0d:9e:b3:ec:
27:86:80:5f:49:62:e6:59:59:d6:69:99:5d:44:6b:89:48:88:
c7:05:aa:d4:90:a8:42:6e:6f:b2:7d:9a:ea:fe:dc:c9:d6:79:
13:93:42:a6:91:06:20:6e:ab:9b:53:9b:19:a9:c9:6d:ea:25:
f2:5e:72:f7:e0:29:3c:c5:ef:88:44:8e:74:52:61:fd:8e:c3:
db:09:93:41:1c:84:90:84:e4:93:de:9f:9e:19:d1:27:37:a2:
77:c5:fd:5f:48:29:40:ba:47:6b:96:9c:43:db:f4:32:a6:25:
39:2c:b2:2c:78:ba:f1:94:c0:f2:09:19:ca:7f:26:c2:1e:ca:
29:58:ee:1c:bc:4b:4d:c2:97:00:5f:4d:85:45:f6:9f:a5:02:
5e:f3:cd:68:1b:07:3b:57:eb:18:50:7a:0c:dc:dd:49:15:7f:
eb:02:40:53:31:b4:46:2a:c5:17:77:f0:d4:b1:10:e1:98:fa:
65:c0:e2:f0:14:a5:75:ec:31:4d:f6:c0:99:c0:1c:f4:b3:3b:
d7:b4:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:28 2025 by rpki-client