Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: dC7JCUgqOTkNRo5C2KRgsYXKNvZyk7Cw3/YKUFzHYgY=
Subject key identifier: 8C:6B:30:42:4E:42:99:57:19:70:9C:DD:C6:FF:68:51:FF:39:EB:69
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 01974E8E5894F8797D9576D47DEBC6F63967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 0DDA
Signing time: Sun 08 Jun 2025 08:00:41 +0000
Manifest this update: Sun 08 Jun 2025 08:00:41 +0000
Manifest next update: Mon 09 Jun 2025 08:00:41 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: PO8TLtGMJ0SEjAoBsSgaa3OHSNEzouwIDiGLUby33zQ=)
2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:58:94:f8:79:7d:95:76:d4:7d:eb:c6:f6:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Jun 8 08:00:41 2025 GMT
Not After : Jun 9 08:00:41 2025 GMT
Subject: CN=8c6b30424e42995719709cddc6ff6851ff39eb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bd:f0:f1:29:ab:40:2a:76:c5:8e:34:8e:ac:
86:06:02:c0:87:f1:49:aa:11:f6:9d:18:db:d6:38:
75:c2:29:cb:d0:c8:b8:a7:7d:d0:b6:c2:c7:10:49:
b6:ac:e2:0c:9d:fc:f8:43:d2:eb:dc:61:4e:d3:a8:
fd:d1:16:0f:53:31:f4:f2:e4:0e:df:54:fb:b1:52:
2b:90:ab:da:c6:e3:e8:f1:dd:7b:d7:0d:58:44:1f:
22:2f:1e:bc:ab:54:e3:3a:2c:a4:53:7b:8f:fe:b1:
34:fb:78:2c:c1:af:13:e5:9e:6e:f1:9d:50:ff:48:
80:b4:47:81:79:d3:9c:c5:2f:aa:95:f0:63:3b:7e:
24:8c:bd:d5:8a:de:69:f9:e5:07:1c:71:04:99:f4:
94:66:fc:0e:d0:b8:ad:e0:bb:98:47:ab:9e:d4:3f:
26:80:fb:0e:0a:56:be:fa:93:1f:e9:a6:e2:72:7e:
72:87:c1:60:7d:3a:3e:9d:22:4a:d2:6a:76:a7:08:
86:6f:31:1d:0a:62:8d:76:14:d4:60:e2:e1:96:20:
84:3b:0b:44:37:f7:09:0e:ea:ad:a4:84:eb:bc:36:
d7:cc:32:18:04:5e:46:69:01:cc:03:a0:fc:7f:aa:
1b:ed:da:45:6c:be:29:78:7e:bf:a8:d6:c6:49:b6:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6B:30:42:4E:42:99:57:19:70:9C:DD:C6:FF:68:51:FF:39:EB:69
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:f7:ef:63:14:be:be:58:f7:0f:f3:b8:ca:02:56:30:6f:
0e:66:c9:14:e2:49:49:2d:68:ed:d1:54:2b:31:f1:15:fc:53:
2a:cc:1b:8a:82:7b:c2:45:1f:78:71:64:57:c8:f0:2c:4b:3d:
c1:f8:6c:f6:d4:6d:ff:9c:97:43:78:e5:7d:0b:6c:aa:d1:5b:
5b:de:6a:bb:42:6e:f3:93:d9:19:11:e5:39:63:aa:91:63:60:
0a:c1:88:76:6c:15:9b:ba:6e:fc:c0:87:7d:36:99:48:13:49:
db:64:43:46:60:4f:37:fa:d0:59:96:2a:64:bc:65:c0:8b:45:
21:12:01:25:5f:87:c1:86:86:0f:1d:95:23:2a:18:7f:78:6c:
45:01:ca:2c:07:10:99:f4:6b:d6:39:59:3f:54:6d:37:d6:19:
20:f0:a2:5b:a7:25:19:28:53:2c:e8:45:9b:eb:93:02:08:04:
e4:cf:ca:9f:1c:01:c3:27:76:89:96:0a:ec:3d:90:d0:67:13:
5c:02:f0:bb:20:6d:80:19:37:5a:98:f8:42:67:2f:f2:95:e7:
1b:b4:2e:9f:73:68:c4:43:a9:02:d0:43:54:a8:fb:39:e0:98:
d3:41:c6:90:a2:47:66:29:11:30:89:69:ba:f8:c7:67:ff:eb:
b4:38:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:28:12 2025 by rpki-client