Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: m0VazLgDBZeiY29y4Ax7WjSkj+mA9YFavo1krVbxX5c=
Subject key identifier: 94:88:F9:B2:1C:9B:6A:8F:79:5D:B5:9F:16:03:20:06:AE:05:46:FE
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 01974AE925E9A0E26E6BBA70F3ACD3C11D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0C61
Signing time: Sat 07 Jun 2025 15:01:22 +0000
Manifest this update: Sat 07 Jun 2025 15:01:22 +0000
Manifest next update: Sun 08 Jun 2025 15:01:22 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: 7EhYvxROo5/RngkQFaWUcJgVODWo71qeSxrNYwUIPjI=)
2: obxxCWwwodKEQItq-LvA1UofY7E.roa (hash: EDnG/ruD1T9KRKhZcI5dsIBjNgSOpQ6QRSsT8ooYu6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:25:e9:a0:e2:6e:6b:ba:70:f3:ac:d3:c1:1d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Jun 7 15:01:22 2025 GMT
Not After : Jun 8 15:01:22 2025 GMT
Subject: CN=9488f9b21c9b6a8f795db59f16032006ae0546fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:3e:40:7d:73:81:3a:48:02:75:b7:ce:54:
47:87:ab:3e:e3:02:3e:95:22:a5:74:d7:ce:fe:f5:
27:7e:ce:2f:13:7a:ef:63:87:ef:35:c1:f6:ed:33:
2f:f4:48:74:f9:70:4c:cc:f3:0a:e2:46:25:28:96:
ef:fe:0b:bb:75:61:c2:3b:3b:ca:93:dd:7b:e7:64:
8b:22:70:72:10:b9:56:0c:56:45:40:97:19:fc:91:
6d:e5:82:c1:c8:5e:87:d5:8e:f3:9e:a1:eb:56:22:
36:16:0d:1b:ab:e2:e4:c8:b6:d7:5d:5f:42:ba:87:
13:d6:7c:eb:13:04:61:06:fa:51:77:9a:55:75:e8:
62:89:5b:62:a4:af:1f:aa:81:cf:af:a6:4f:c5:4a:
e1:f9:72:e2:d3:26:c7:09:46:7a:12:18:ce:da:7a:
25:f7:b4:48:ed:d5:c0:4d:d6:ad:3e:8e:d1:ab:71:
f1:1e:66:de:74:93:d0:80:cb:98:a9:68:e1:62:9f:
72:86:a0:be:9d:1f:04:e8:5f:c6:b7:ba:b6:24:3f:
8f:cb:e5:cd:3b:b3:99:09:cb:0b:9a:e0:89:58:29:
2c:bc:b2:47:62:ed:50:3f:2e:5c:09:9c:53:57:dc:
30:4a:b2:3c:b3:74:7d:70:31:17:ff:d1:5e:18:39:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:88:F9:B2:1C:9B:6A:8F:79:5D:B5:9F:16:03:20:06:AE:05:46:FE
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:08:a1:81:32:c4:b0:e5:1b:a7:37:39:98:ce:ef:2a:49:7d:
5e:d4:cf:7c:0b:36:de:d1:f5:d8:a8:1b:a4:e4:3b:74:3f:bd:
79:fa:c7:76:90:cf:b3:78:c2:77:bd:5a:00:ba:54:1c:6f:00:
27:ae:40:bb:f2:75:c4:5f:77:34:69:f6:50:69:37:8f:ab:50:
28:d7:48:56:98:af:42:db:d2:a8:6e:d5:e4:1b:59:14:36:ff:
73:8f:1d:8c:ca:bc:9d:bb:56:51:c9:04:31:b2:d2:13:94:71:
01:8e:36:f8:49:44:ef:87:60:14:ac:30:4d:bf:36:3c:d5:5c:
54:a0:4f:f6:01:75:7b:48:88:7f:75:fa:b2:db:80:48:41:67:
47:99:bf:e8:a9:7a:88:5c:57:dc:63:44:3f:c5:88:09:6e:55:
f7:d6:7e:c6:1b:38:f5:b3:45:d6:e5:73:4d:23:a1:4d:6b:5a:
18:8f:f1:6e:cd:a8:e4:22:60:6f:ea:3f:9d:91:59:0e:76:14:
4b:53:ce:54:95:60:c5:3f:39:b8:a7:66:7a:85:9d:86:22:18:
44:05:96:cc:e5:2e:ae:37:2b:8c:29:7a:b1:54:ee:1a:28:da:
82:8f:7e:a0:4e:c9:4f:8f:7b:73:cf:0d:5a:a9:4f:83:0d:6a:
98:a2:84:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:21 2025 by rpki-client