Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier: LlO22RGyNsWLSUNA90q5RxRa6lf8XrsAShAIGOSxqcg=
Subject key identifier: 35:29:6D:22:5E:0F:4E:35:CD:E3:4B:07:B2:ED:D0:00:7D:C6:BB:03
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial: 0197496831FC2B3CB3012CACE4C19957DC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number: 1211
Signing time: Sat 07 Jun 2025 08:00:54 +0000
Manifest this update: Sat 07 Jun 2025 08:00:54 +0000
Manifest next update: Sun 08 Jun 2025 08:00:54 +0000
Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: Gve8YYOfg31Ws6tojhe8ue/CCNqFXQB4CAwSh5fQcUs=)
2: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (hash: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:31:fc:2b:3c:b3:01:2c:ac:e4:c1:99:57:dc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Validity
Not Before: Jun 7 08:00:54 2025 GMT
Not After : Jun 8 08:00:54 2025 GMT
Subject: CN=35296d225e0f4e35cde34b07b2edd0007dc6bb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:42:3b:71:b8:2a:00:09:54:62:c2:de:42:
5b:49:80:17:17:19:7c:32:d1:2d:7f:29:06:55:ce:
3c:fb:f5:37:6e:07:a8:b3:34:28:a1:4e:ee:fc:ee:
43:1b:c5:c9:ed:6b:c0:25:57:5a:b0:8c:55:9a:bb:
94:f1:f8:e8:fe:63:29:dc:7e:88:16:7b:01:b7:cb:
66:2c:63:44:bd:82:b0:82:ef:c9:0e:a8:bb:70:a1:
0e:1f:6d:49:93:94:00:52:e5:b2:26:3d:e9:9a:cd:
ce:8a:32:72:c7:e8:e6:f1:b1:51:2e:69:b1:10:86:
cc:4e:fa:58:0c:fe:c6:53:ea:aa:d0:00:68:a4:75:
d6:9f:1b:e2:87:e5:19:ef:02:1f:30:a5:2e:73:04:
db:ed:62:3f:5c:61:8e:11:69:cf:41:34:02:41:99:
ff:72:6e:a4:38:9b:cf:49:48:42:7f:f3:76:7d:9f:
ac:40:01:81:16:16:68:2b:63:03:64:80:6b:b3:2b:
7e:d9:f6:6d:60:61:57:1c:e9:0f:33:ca:ee:08:4a:
ca:6a:77:ba:9c:1f:70:4b:b9:2d:29:19:a1:9c:67:
e2:c1:19:2e:e7:03:16:54:10:f2:d4:47:b9:6b:82:
fd:ea:b0:b1:6e:39:b1:b9:be:c2:46:e5:07:5e:f8:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:29:6D:22:5E:0F:4E:35:CD:E3:4B:07:B2:ED:D0:00:7D:C6:BB:03
X509v3 Authority Key Identifier:
keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:68:0a:58:01:2b:6f:a0:51:b2:cd:f8:26:75:7d:e8:dc:f6:
ab:8b:af:de:79:74:2e:8a:9b:b0:f6:3e:43:e6:4c:50:2c:9e:
cb:ac:f4:1e:b2:d7:26:0a:3a:88:3a:e3:29:51:06:e6:20:e5:
65:5b:a9:05:b9:36:b4:7e:e6:67:26:c1:d9:e1:7d:9d:8e:10:
b9:7e:45:a6:11:c6:d0:40:8f:5a:85:b3:e6:fc:74:d9:f3:90:
a6:53:75:c3:ee:a4:53:7a:de:9e:7f:47:b7:b5:35:11:06:4e:
a7:17:99:df:36:14:d3:6a:ec:eb:13:8b:95:26:44:4d:33:47:
e9:7f:e7:e7:42:53:0e:21:76:94:e6:d7:9e:78:7c:26:c0:32:
e4:5b:e5:51:9b:6b:1b:06:70:29:4a:c8:d6:52:0f:27:5c:12:
82:e1:bf:4a:31:87:f6:bf:3f:03:b8:cd:80:f0:11:2e:fe:62:
a0:03:70:f6:01:61:49:2d:5f:5f:f7:ad:41:57:79:49:df:09:
23:9d:7c:99:86:5f:bd:3e:da:59:ff:09:f2:34:b7:ec:17:13:
8a:9e:8f:7c:2f:23:6c:8d:26:25:e6:ae:44:5f:80:6a:28:e8:
08:89:ad:ce:d9:18:e0:5a:77:ea:a2:ee:bf:b9:1e:1f:fa:9b:
58:9d:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:29 2025 by rpki-client