Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
File: HK8vo44dGk0OBmCb8pdugcUKrQo.mft (raw, json)
Hash identifier: ZvMfVX4DLy7yQunB0DN0iUPtBf3JQm6BM+oJQstCLSg=
Subject key identifier: 0E:0C:76:1B:7B:A3:BF:2A:7B:ED:02:40:F3:09:BC:57:87:D7:EB:51
Authority key identifier: 1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
Certificate issuer: /CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Certificate serial: 01974A43960B495941A9809E69CA4EA84188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
Manifest number: 1232
Signing time: Sat 07 Jun 2025 12:00:32 +0000
Manifest this update: Sat 07 Jun 2025 12:00:32 +0000
Manifest next update: Sun 08 Jun 2025 12:00:32 +0000
Files and hashes: 1: HK8vo44dGk0OBmCb8pdugcUKrQo.crl (hash: NNfi/I574g1ZVMPLQjycjQsVBDNbx1KCKVdVWwYyI0Y=)
2: lmgzBptHHcGR1jAKHjpS47zLYEQ.roa (hash: t/2vEU4hMx7G3HXdySNq/pjezwcUhKsGwxxqSv/Bf/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:96:0b:49:59:41:a9:80:9e:69:ca:4e:a8:41:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Validity
Not Before: Jun 7 12:00:32 2025 GMT
Not After : Jun 8 12:00:32 2025 GMT
Subject: CN=0e0c761b7ba3bf2a7bed0240f309bc5787d7eb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:12:37:21:e7:6d:a4:1f:cd:10:51:65:db:
cd:9e:a2:3b:a2:17:17:fc:cc:80:fc:5b:f2:68:29:
3d:b0:16:bb:d1:01:31:e8:70:63:75:7c:e2:ab:7c:
ec:d2:99:79:91:6b:63:db:16:a6:0a:77:8b:86:ba:
38:4a:ce:c9:b6:de:90:ab:a7:16:be:5e:a9:7e:62:
15:5e:77:7e:e4:af:08:e1:cc:f2:b7:cc:75:4f:7e:
ac:fa:ca:76:f8:bf:68:83:cc:96:7b:df:92:d4:a9:
4c:34:e6:ad:35:18:f3:0a:05:a7:a6:df:8a:9c:a7:
6e:59:fb:1e:f3:da:5b:b1:68:8e:3d:0c:19:55:1b:
99:33:38:25:67:ec:d1:b2:3f:72:af:6e:1e:5b:cd:
ed:b7:67:a7:35:55:d3:a1:ed:7f:63:fd:0d:70:e8:
00:24:df:fa:ea:9f:04:96:94:29:ae:93:be:09:d9:
7d:ec:21:91:3a:1c:30:af:63:02:af:54:02:09:10:
88:db:49:bd:55:76:50:f5:6e:2c:2d:96:a9:e8:aa:
e5:9b:53:ac:ae:42:8d:76:61:22:ac:be:4b:e3:8b:
69:92:72:64:96:66:34:35:95:1f:ec:78:3d:d4:e1:
71:d1:c1:53:4f:5d:90:a1:1a:5e:d8:23:72:77:0f:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:76:1B:7B:A3:BF:2A:7B:ED:02:40:F3:09:BC:57:87:D7:EB:51
X509v3 Authority Key Identifier:
keyid:1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fc:b7:c4:52:6e:f9:31:74:7f:a6:6b:cd:e0:6b:b1:25:cd:
4f:dd:ce:5b:6b:91:34:6b:78:79:fa:74:02:ff:c4:d8:cd:a7:
e5:2c:e9:82:5d:f1:6e:9d:53:fa:9c:5b:a2:51:27:8e:45:5d:
e8:56:6a:3c:b1:78:77:44:9f:30:c5:8f:f4:51:b6:19:26:73:
a1:27:86:1d:3e:73:8a:a7:81:b8:a3:93:13:10:ba:4c:9d:01:
de:a6:ed:c8:17:c5:32:7b:c3:6d:19:60:df:1e:31:64:4a:a8:
7e:8f:47:d1:9e:03:5c:68:e0:55:79:76:06:ef:cb:4f:16:f7:
08:22:e1:0e:1d:ac:2f:6b:0f:56:bb:fa:16:a3:1c:4e:18:f8:
c4:e2:4a:e9:2c:ed:f3:d5:0f:75:ef:41:7a:98:9a:13:ba:40:
26:6c:4f:18:70:d7:87:40:d8:b2:66:da:84:3b:53:bc:4e:cf:
ef:da:76:82:e8:2b:a0:4a:d9:f8:49:97:a6:bd:47:d1:81:30:
9b:0d:03:0b:1c:01:bb:ec:d8:6b:04:d5:14:01:ac:f6:78:b1:
ad:ee:47:db:02:ae:76:89:e1:7a:65:a7:59:c8:a5:54:d4:09:
80:c6:62:db:80:49:6f:af:29:ec:bf:f3:a2:2b:03:95:36:42:
59:35:89:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:50 2025 by rpki-client