Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: T/7AWOrVWPpmoDZPQbXiC7cadO0j+D6MC0Kapm8mzXw=
Subject key identifier: F6:02:E6:70:A7:F8:9F:3B:88:D4:34:11:60:FF:A1:07:A0:5D:65:B9
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019748559D7865F2144A0377657734309454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 01DC
Signing time: Sat 07 Jun 2025 03:00:59 +0000
Manifest this update: Sat 07 Jun 2025 03:00:59 +0000
Manifest next update: Sun 08 Jun 2025 03:00:59 +0000
Files and hashes: 1: BCpGmAAybEKlV3wOuVSBe587d6A.roa (hash: OMYJrykGqoEHSJmtTAAKG/WGPSWVW40cgEc5tVnY4H8=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: 8IpxwREf5WakrCdkukhBoGLSw0WD7JkDpeQCwkufQ+A=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:9d:78:65:f2:14:4a:03:77:65:77:34:30:94:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Jun 7 03:00:59 2025 GMT
Not After : Jun 8 03:00:59 2025 GMT
Subject: CN=f602e670a7f89f3b88d4341160ffa107a05d65b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:af:73:af:30:ac:aa:3b:09:46:8d:93:ee:
20:4d:16:49:3b:ab:7d:f7:06:e1:3d:1c:52:fb:c2:
36:19:4b:2f:9b:41:9e:37:d6:54:72:cc:e8:2a:19:
92:ab:97:f8:e6:5c:ba:6d:dd:61:71:88:a6:64:f1:
8f:2a:61:56:f9:48:63:01:b8:92:1d:6b:73:2d:d6:
a0:ea:97:a3:76:9d:c4:cb:a3:a5:ad:42:1b:ab:7f:
ff:44:99:18:27:17:86:fe:a9:a7:b4:be:3c:ce:cf:
96:05:b5:77:06:c8:74:60:7e:00:b4:1b:57:60:57:
8c:b4:e6:43:33:84:c6:71:50:2d:20:d8:8c:6c:00:
09:3c:e3:d8:b0:d4:12:46:08:23:7d:4b:44:50:7a:
c4:60:e7:ff:2c:fb:ba:38:ad:5f:01:96:9b:e7:bd:
ec:e9:03:ad:93:cd:72:fc:13:f3:45:51:8d:d7:8a:
d2:82:65:11:3c:5f:6f:94:bd:06:23:76:d7:12:a5:
75:55:28:6a:d1:60:c6:c6:ab:ea:bb:89:f3:97:65:
b6:36:76:38:80:f9:7c:ac:35:ca:a4:28:d7:1b:59:
68:11:a7:c0:e7:23:fb:03:c4:b8:a6:d0:d7:0b:bf:
19:50:ca:a8:b5:84:45:63:78:a6:e6:02:7c:e4:12:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:02:E6:70:A7:F8:9F:3B:88:D4:34:11:60:FF:A1:07:A0:5D:65:B9
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:6a:f4:7b:c6:15:aa:91:f0:30:d7:8c:ca:81:bb:30:e9:ba:
5b:b5:e6:c5:d8:5b:f7:91:a5:93:7d:cb:31:90:42:ea:b5:6a:
98:0e:98:a4:c6:c1:7d:12:c7:ab:77:c7:f1:0a:09:8d:7c:5d:
8b:b1:4b:15:14:a8:69:0e:1c:1d:98:8f:56:f0:8a:d8:0c:91:
61:38:83:a2:fe:e9:11:4a:f3:13:39:a2:4a:98:cf:52:54:ae:
e6:0a:46:19:f2:3b:db:9b:6d:1b:4a:b7:e5:eb:28:e7:a2:12:
2c:06:c4:0f:e5:11:36:e5:85:26:d2:d9:da:e9:49:22:6a:cc:
07:83:73:ac:d3:00:a6:99:eb:56:24:bd:69:71:07:65:39:ad:
d1:11:3b:b5:c7:3d:d0:c9:b3:67:96:0e:32:6d:01:a8:c8:06:
a8:b5:ee:29:3d:3a:d2:e9:7f:07:52:1e:8d:23:58:79:79:bb:
7c:9a:91:df:0b:5c:70:2b:b6:50:62:e8:a3:23:62:9d:05:05:
31:54:c7:ff:8b:2d:a5:fa:ae:9c:81:13:c1:bd:d2:03:03:30:
4b:bd:eb:31:29:cc:db:17:88:c7:04:ae:54:7a:38:e7:a7:a0:
63:f0:18:98:a4:4c:c4:c9:f9:eb:cb:a9:2e:fd:72:15:10:5c:
bb:80:d4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:04 2025 by rpki-client