Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: 3ZbKveVpvroT8wF4L6o57e/8l899ZcIOe6lpLxWbJIE=
Subject key identifier: D0:2E:A0:5F:C8:03:73:05:C3:83:35:41:FF:8B:DE:12:05:BA:01:E9
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 01974C68E302D68E1AF897819FDBD9A2789E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 1198
Signing time: Sat 07 Jun 2025 22:00:31 +0000
Manifest this update: Sat 07 Jun 2025 22:00:31 +0000
Manifest next update: Sun 08 Jun 2025 22:00:31 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: UzQ5b2FAbodlIvn2ybnnP5MLkF6TJR62Zk2MXZTKuYg=)
2: Jz9OReni23tlAFlv2GW25Ecf7IU.roa (hash: GvIndfLunXr32q+mQyRE3wlkyEX+dK/mibzNsCJj8Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:e3:02:d6:8e:1a:f8:97:81:9f:db:d9:a2:78:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Jun 7 22:00:31 2025 GMT
Not After : Jun 8 22:00:31 2025 GMT
Subject: CN=d02ea05fc8037305c3833541ff8bde1205ba01e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:e5:2f:06:2d:9f:a5:20:36:dc:7a:21:79:
6d:e6:29:65:0f:8a:0b:58:28:96:fe:27:33:a5:9c:
f9:4b:db:9d:45:14:9e:22:ca:43:07:f0:b6:9d:99:
fe:22:29:2c:51:1b:ee:95:3d:8f:c2:51:9a:00:78:
a5:fe:7d:97:a7:e8:50:1d:da:fd:35:a9:0e:bc:33:
8f:81:da:fd:9d:fd:ee:80:5b:89:cf:36:ca:72:21:
1d:8a:c5:6b:bb:4e:0b:74:73:cc:4e:ea:b7:b1:1e:
6e:83:6f:a8:85:bc:8c:05:34:43:80:ab:44:45:f4:
58:81:a2:f0:7c:41:93:eb:da:67:f7:3a:4b:f2:5a:
e1:e0:a2:13:a9:dc:2a:0c:2e:dc:44:79:16:33:84:
cb:f0:10:b4:1a:9f:e4:4e:39:ae:bc:12:05:b1:64:
bd:48:b1:83:9a:d3:63:f2:8d:22:ac:3b:e9:7a:61:
5f:f8:9b:ef:d3:f9:4a:06:0b:8b:2f:5c:d1:3c:65:
e5:52:08:35:61:bd:6c:0c:97:2a:96:5e:96:10:bf:
c8:5e:59:05:52:39:6f:75:8a:82:77:d8:9a:41:0d:
8b:e2:88:25:0d:3d:2c:53:1c:92:26:56:f0:4f:86:
43:8c:c5:03:1a:96:9f:4c:46:91:3c:ed:d4:19:6b:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:A0:5F:C8:03:73:05:C3:83:35:41:FF:8B:DE:12:05:BA:01:E9
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f9:89:94:94:22:82:fe:19:5e:8b:3a:da:69:d1:1d:df:7e:
a4:4c:ea:8f:b3:9e:29:b5:88:c9:7d:3f:2e:7f:70:96:19:96:
11:00:71:90:03:29:4b:48:15:d3:41:ee:ae:8d:1d:4d:6e:2c:
eb:40:e0:0e:58:53:60:bb:64:91:4a:bd:34:f6:fb:f6:0e:c1:
04:c8:21:21:40:ff:c1:05:56:d9:d9:3f:40:a2:b8:0d:23:9c:
61:b1:d9:85:63:be:cf:f2:97:65:1b:ce:4a:fe:3a:ab:93:a9:
ec:50:63:27:c1:09:2c:f3:79:ae:f7:ac:b9:6e:a8:4f:ec:b6:
c7:b3:4a:dc:57:ad:21:01:23:13:f8:93:cc:90:db:67:a7:6c:
e4:79:08:8c:67:cd:30:a8:de:08:dd:7e:df:d2:d1:de:95:34:
34:1e:55:2e:c7:90:94:1d:b6:cf:de:9c:1b:a1:31:79:63:0c:
32:74:9d:4b:17:9a:35:93:a2:52:8b:5b:2a:8d:f8:3b:aa:8a:
36:a2:c0:f1:1f:d3:8f:d3:35:b3:9e:9d:33:55:9a:cd:83:d6:
8c:74:d8:ad:b9:bb:de:3d:c2:bb:94:a8:cc:0e:16:60:f7:0a:
fa:c2:79:f3:cb:7d:fc:15:79:75:83:b8:4f:e6:3f:fa:9c:38:
ee:08:4e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:23:53 2025 by rpki-client