Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: hz8dyt31z0zltWVxhGK3EOcao/IE+xVq0SMzfboTuRM=
Subject key identifier: CB:B0:5B:B3:0C:67:25:A0:A4:00:B7:BD:0C:C5:7E:89:9B:75:65:4D
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 01974A0CB2F7EB35CA898B88D7FC964AB3D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 11:00:35 +0000
Manifest this update: Sat 07 Jun 2025 11:00:35 +0000
Manifest next update: Sun 08 Jun 2025 11:00:35 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: eEQDqCwJJweai6dQqWBRoeUchEA5F8icNAWmCP1gDDU=)
2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=)
3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b2:f7:eb:35:ca:89:8b:88:d7:fc:96:4a:b3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Jun 7 11:00:35 2025 GMT
Not After : Jun 8 11:00:35 2025 GMT
Subject: CN=cbb05bb30c6725a0a400b7bd0cc57e899b75654d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:ba:a3:ee:92:06:4e:36:e5:bb:d0:c5:68:
f3:2b:69:9b:c1:38:52:1e:6d:61:92:8b:b5:25:32:
21:05:97:54:13:8c:29:20:3a:ee:92:f8:e1:75:90:
1b:53:06:03:44:45:db:ab:a5:30:ac:4a:dc:4e:bc:
21:07:cf:2f:4e:a5:fd:58:95:5b:23:ee:32:c8:a2:
7d:03:08:98:56:f3:3c:18:bc:52:cc:d0:55:e3:5d:
2f:d8:33:12:18:c8:5b:6f:87:3b:cc:96:c6:dc:5b:
70:39:61:99:b4:e5:3a:23:32:0b:47:a1:b8:dd:ec:
ac:51:5f:dd:5d:d5:90:c4:94:06:67:f1:b2:2f:14:
c5:21:30:86:0b:33:34:bb:4c:8d:6e:77:45:c8:00:
fa:46:71:22:52:1f:0f:cd:86:26:a2:e4:a4:22:94:
36:0c:7c:29:b1:b9:b1:43:6f:cd:05:2c:56:c7:aa:
1e:bb:9a:bb:e7:6e:82:d3:2d:f3:cc:e7:2b:aa:8d:
55:50:60:17:1f:d8:80:6b:7f:57:7e:1b:bf:66:01:
40:9a:ec:79:42:2c:c6:37:b2:35:05:14:07:74:68:
8b:f8:09:b9:90:b2:15:4f:01:c2:ac:a1:ae:65:45:
26:95:c5:41:2a:70:2f:47:11:7b:c5:1e:df:34:a3:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B0:5B:B3:0C:67:25:A0:A4:00:B7:BD:0C:C5:7E:89:9B:75:65:4D
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b8:4c:79:6c:32:0d:eb:b0:f4:39:88:27:76:7a:03:a1:d4:
93:76:f8:08:ba:52:6a:9a:ba:f2:0c:9e:61:62:ef:9e:26:99:
9f:89:27:ba:c6:62:ff:2c:16:52:37:88:a0:39:8f:fa:fe:59:
4d:6d:98:9a:b6:9f:3d:a1:98:fa:db:0d:8c:38:bc:86:69:30:
68:4c:c7:68:cd:dc:fc:d9:cc:b6:73:18:e1:47:d7:fe:d1:78:
75:48:a6:10:da:23:21:a0:d3:ed:6c:60:4b:c6:1b:81:0b:72:
e0:4b:bd:f3:54:e1:01:32:4d:df:42:40:f5:24:47:5b:4c:fd:
1a:c6:0c:e6:75:2f:7e:a1:46:4e:c8:29:7d:d6:94:a2:90:da:
9f:c0:43:f6:60:96:cb:03:1f:27:c8:c5:5a:93:54:ae:a4:f1:
e9:b6:a3:db:58:61:cb:c8:d2:42:7c:6b:8e:70:60:00:16:95:
c9:0e:c6:7c:fc:f5:ae:ff:07:94:35:30:4d:f9:f1:dd:bb:fb:
d5:47:8c:99:08:27:32:83:72:a1:ff:12:43:cb:6d:ab:cd:b3:
62:b6:93:c5:9c:60:c8:5b:36:51:de:50:3d:38:c4:e8:88:40:
0c:d2:e1:81:07:8f:10:1d:67:50:66:74:d9:de:af:b6:55:66:
27:13:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:35 2025 by rpki-client