Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
File: HgClX517dTlrS_oT54lgpaEvTvU.mft (raw, json)
Hash identifier: joa/Bi4LVvKTA7dTGkerYXdCosnJjp2U+PZAHb92K84=
Subject key identifier: 3D:1F:CB:47:36:F7:1F:4E:95:9D:DF:D7:05:70:95:96:E7:C1:F4:DE
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 019751C69074FFF194FA5BADC1E8569F1CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
Manifest number: 0D37
Signing time: Sun 08 Jun 2025 23:00:56 +0000
Manifest this update: Sun 08 Jun 2025 23:00:56 +0000
Manifest next update: Mon 09 Jun 2025 23:00:56 +0000
Files and hashes: 1: HgClX517dTlrS_oT54lgpaEvTvU.crl (hash: WbH1cwus2vMUrwIjuDFx/fla5GkMWvdFt7yfX6Zi/Q4=)
2: Z9H2rikLSuyuU-ikn9teDCmjdUc.roa (hash: cRtnYLPeRJbchnmn6bYlPaowZvCX5uRJgotf5z/cank=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:90:74:ff:f1:94:fa:5b:ad:c1:e8:56:9f:1c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Jun 8 23:00:56 2025 GMT
Not After : Jun 9 23:00:56 2025 GMT
Subject: CN=3d1fcb4736f71f4e959ddfd705709596e7c1f4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:f0:54:b3:ad:2f:a4:d1:1f:51:24:a1:cb:
b2:98:66:1d:ae:a8:8f:7a:64:b8:a0:6b:97:40:de:
20:ae:6f:81:45:3e:54:5f:c6:92:97:a5:02:f7:69:
53:d3:6a:85:ed:2c:9f:80:37:3f:5b:0c:37:67:ef:
70:1d:78:cc:3b:79:2e:9b:76:cf:a1:df:8f:51:bf:
b5:d8:65:1d:2b:41:44:a4:23:f6:10:bd:b4:5a:7d:
1a:1f:3d:d6:78:60:6b:bb:7b:cc:e5:55:c3:2e:fa:
fe:55:dd:53:90:ea:d4:c7:e2:d8:e5:1b:2c:e9:3a:
9d:26:91:2f:1e:a7:09:3f:6c:92:81:b4:8f:e8:f4:
a8:3c:96:23:14:34:51:1f:d6:fd:3c:fc:8d:61:10:
c2:21:8b:3e:21:2c:0e:8d:77:be:75:a2:ac:de:f8:
8c:b5:df:41:45:81:5a:11:f5:98:0f:33:a7:50:50:
f2:37:26:7f:32:04:a0:6a:5a:c8:e0:f5:34:c0:d2:
a5:99:e6:a1:c1:b7:05:a3:2f:7f:5a:ca:3f:16:b0:
68:83:84:14:67:cb:21:8c:65:28:4d:5e:c8:e5:6b:
68:9d:b6:fe:10:ad:be:f2:e1:6f:81:12:d6:5f:03:
af:63:ce:ab:9f:b8:c8:8f:e6:db:b1:e3:13:b4:96:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1F:CB:47:36:F7:1F:4E:95:9D:DF:D7:05:70:95:96:E7:C1:F4:DE
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:88:c4:c8:96:69:70:11:9e:e9:5e:04:12:76:a4:17:bf:2f:
a2:84:3b:fa:d5:b7:9e:a5:aa:4c:3a:3c:b3:0b:05:bb:b9:82:
9c:8e:65:12:3b:42:d8:59:e5:b1:dc:37:ff:d8:6b:77:ee:9a:
67:41:07:68:83:68:50:e5:c0:f7:1d:80:5a:81:45:c9:e3:fe:
ce:fe:0f:23:80:22:38:d3:cd:0b:43:f5:9a:d2:11:11:f0:7e:
69:7f:f9:61:0f:12:6d:b2:b0:3e:77:86:7d:64:bb:38:ce:98:
f4:7a:1c:f7:86:09:72:12:d3:ee:2f:b7:ef:c8:8d:2e:be:40:
5f:61:e4:99:98:74:5f:ef:d9:42:c6:94:10:22:ad:76:e8:26:
75:43:ad:25:5f:9b:e7:57:88:34:6f:e2:94:ff:e2:dc:fc:f2:
cf:6e:cd:49:10:ca:91:c0:42:2f:67:84:f2:4d:54:d3:7d:ab:
1c:ba:5e:a8:3e:c0:6b:d1:81:e7:22:a2:85:fd:0c:32:b3:9e:
10:bd:b3:f5:82:ba:1b:d3:a1:38:ef:d7:a4:86:1b:f9:06:25:
84:4a:14:54:c8:65:39:f0:79:e1:8f:b5:1c:c3:eb:c6:c4:6b:
00:2d:49:28:8b:5e:48:35:f6:1d:9b:61:0d:e4:94:15:b5:0b:
79:2c:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:46:43 2025 by rpki-client