Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: Ryx6WLvwMZQe89nYm6SFDcEQyVGzG9xYC9iM7Qh+VUQ=
Subject key identifier: DB:B6:00:4B:42:0C:CE:C1:FB:09:FF:E2:BE:F6:83:71:F0:8F:C8:5C
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 01974AE889F8235A933881F6E55022F98771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 14F7
Signing time: Sat 07 Jun 2025 15:00:42 +0000
Manifest this update: Sat 07 Jun 2025 15:00:42 +0000
Manifest next update: Sun 08 Jun 2025 15:00:42 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: +ncRAy1tpwoku7pupmHX8PjpoWqbT8uzeC2hbxNd4yE=)
2: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (hash: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:89:f8:23:5a:93:38:81:f6:e5:50:22:f9:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Jun 7 15:00:42 2025 GMT
Not After : Jun 8 15:00:42 2025 GMT
Subject: CN=dbb6004b420ccec1fb09ffe2bef68371f08fc85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:4c:0b:bb:19:44:62:f7:aa:80:f4:01:6c:
b3:4f:be:06:d4:2f:17:7c:c0:02:31:60:fe:c2:5f:
9d:7d:f8:23:5c:25:2f:eb:b0:de:9e:6c:9d:a0:15:
39:c8:ab:a0:d4:61:ca:0c:c1:43:2b:f9:a4:40:5f:
39:3d:cd:62:da:76:2c:2c:95:b2:32:3d:23:55:58:
82:cf:54:bf:54:00:be:7b:3f:2b:03:dd:a9:8c:d3:
b1:db:20:e8:37:75:75:72:20:b0:28:ff:56:cf:48:
ba:f7:57:d9:da:29:f5:6a:57:26:ca:05:37:1d:b0:
51:97:fe:06:79:08:6d:c2:6d:ba:69:80:8d:9d:3c:
9a:51:1d:f9:f3:30:3c:df:29:c5:b4:4b:b4:dd:a2:
2e:fc:a0:ec:b0:e8:1f:16:c8:c8:d6:e4:6b:32:84:
2b:ec:99:d3:ff:a9:c0:34:51:65:60:6f:a4:42:a6:
3f:4d:67:a3:77:4c:67:34:15:d7:b4:e4:ca:63:4b:
5c:be:d7:fa:5d:41:26:eb:01:4e:88:f0:2c:25:81:
b2:c4:ce:9b:3c:98:04:40:97:de:44:d8:16:38:5a:
0d:f6:73:34:5e:2e:9f:f8:de:ad:1f:3e:5e:0e:92:
0e:73:04:1e:cd:ba:b7:a0:76:89:3d:83:1a:db:19:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B6:00:4B:42:0C:CE:C1:FB:09:FF:E2:BE:F6:83:71:F0:8F:C8:5C
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c1:eb:13:b7:5c:64:9c:56:c9:dc:18:7d:09:4a:99:1e:8d:
2c:fe:ca:dc:e2:f9:94:1d:e8:aa:b2:8e:2d:63:a2:08:80:84:
26:fb:5f:cf:73:f4:c1:02:9b:96:c1:a3:ab:12:49:2f:a0:ec:
4e:89:b5:97:ca:5f:99:6b:fa:f3:bf:12:af:7f:f5:ff:d4:54:
23:a0:5f:93:ea:11:3e:24:cf:76:e3:65:ad:0a:73:11:55:29:
64:67:87:4c:42:de:08:8a:82:29:28:fc:c5:18:6a:4c:05:30:
93:53:f1:79:de:ee:07:87:f7:1b:10:9f:50:39:6e:7d:f7:54:
9f:31:66:c8:97:0d:ab:6c:da:6f:3f:a8:c4:b7:4a:d7:07:af:
a1:6d:a6:11:19:cc:e8:aa:f2:87:f6:a7:17:16:71:85:ef:73:
02:73:b8:48:4e:94:a4:bc:e2:1a:cd:7f:e1:be:e2:f3:65:1d:
4a:22:6d:cc:90:c6:13:57:b7:dc:41:f3:b5:15:bd:79:0c:f1:
16:47:d1:4f:3b:d6:d2:46:a9:74:72:c1:43:a3:45:a4:27:df:
a6:b3:36:d9:47:42:56:5d:9e:57:fc:3a:1e:93:81:36:ec:f7:
77:82:ab:d8:1e:a5:5e:82:99:12:f0:f7:6f:1c:b5:af:ef:af:
b8:fa:1b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:19 2025 by rpki-client