Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
File: HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json)
Hash identifier: ycjCeXwGcdLHMSQD5T8iUyVBagK0iKi8c9JzJLGoNbw=
Subject key identifier: 74:53:F3:3F:A7:45:7C:C3:FA:E7:BD:2E:A8:36:B0:42:0A:0A:17:B3
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Certificate issuer: /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial: 01974AE85F176B93F620A61750C8DDEA4DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:00:31 +0000
Manifest this update: Sat 07 Jun 2025 15:00:31 +0000
Manifest next update: Sun 08 Jun 2025 15:00:31 +0000
Files and hashes: 1: 1Az4dE0ZX7KAKDKykX60lhzHZkE.roa (hash: 8wvcW71BfAfRwFPQ94lUDGje+TfkTvnyVdfl40+6qJo=)
2: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: gV+WFvs4bQX7fIKYpN7fg6tfwA1K3hrP0/f1Enahw5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:5f:17:6b:93:f6:20:a6:17:50:c8:dd:ea:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Validity
Not Before: Jun 7 15:00:31 2025 GMT
Not After : Jun 8 15:00:31 2025 GMT
Subject: CN=7453f33fa7457cc3fae7bd2ea836b0420a0a17b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:59:ac:1f:7f:b1:ef:8f:0a:be:28:f7:fe:
d5:8e:c7:c8:48:e9:55:a5:57:6e:b6:64:3b:c8:c3:
f6:55:ac:07:a4:cd:4a:14:17:71:a0:8b:f6:7e:f5:
45:5f:e5:a5:8a:d0:f2:c6:98:91:31:a3:c3:58:af:
2f:69:92:74:5d:18:fb:0f:ae:76:51:4f:66:c3:49:
d2:e4:34:a7:a9:c0:3b:e9:17:94:ad:86:4d:14:ab:
49:ca:53:a1:9c:2f:64:49:c1:5b:29:e5:9b:02:e7:
00:3a:ed:ab:71:db:1b:f4:62:11:b7:be:57:6f:59:
ab:ce:8c:bd:5c:6b:c7:e3:b9:d3:a4:a3:a9:c4:fc:
2b:8e:22:73:8a:b3:1b:0e:09:5d:1d:27:32:b6:9a:
53:82:cb:76:5a:3b:5f:a1:dd:d4:26:a4:01:46:42:
79:3b:8a:91:60:75:f3:95:40:51:1b:39:44:7f:b6:
5f:6e:ea:20:90:ff:78:3b:cc:85:ad:92:ee:48:55:
a3:b7:51:c7:77:b3:91:d0:cb:97:2f:29:58:22:f7:
f8:fe:4e:14:c4:c9:48:84:e9:fd:b9:3c:dd:93:64:
21:92:4b:6b:d6:55:4c:2c:b9:ca:4a:a8:cd:38:8a:
34:54:ed:a9:f7:da:70:b3:79:72:a5:e4:05:e1:af:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:53:F3:3F:A7:45:7C:C3:FA:E7:BD:2E:A8:36:B0:42:0A:0A:17:B3
X509v3 Authority Key Identifier:
keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ba:a9:8a:90:d5:4d:26:03:e2:fb:e9:32:8c:ed:5c:83:14:
f6:a0:3d:91:95:f7:63:ef:41:2f:dc:13:68:01:14:4e:9f:b8:
23:83:7b:d5:c3:87:b9:aa:a5:6f:8d:e2:92:69:2b:23:03:b7:
da:9f:99:e8:4b:cd:86:cb:b2:ed:db:2a:8d:2d:ea:62:1e:5d:
c0:9e:a0:a9:41:04:0c:c7:55:41:82:28:b9:54:33:9b:e9:51:
c1:b5:ba:ce:dd:3c:ca:81:2e:a4:78:50:ec:d6:93:da:05:49:
9d:97:fa:62:84:d2:98:47:b9:44:92:4d:c1:e3:a4:e5:48:1a:
67:6e:76:51:c9:2f:f6:a9:99:8e:e9:7e:d6:c7:d7:bc:3d:a8:
2b:b0:fd:9e:98:05:c7:d0:6c:c4:1a:6a:28:b5:33:0e:75:13:
c2:aa:9e:04:86:89:41:df:52:c4:68:46:f3:00:83:74:30:e9:
81:dc:16:3c:d8:f8:da:e2:96:58:4f:d2:e7:a0:33:e8:92:c5:
ce:9c:6a:3e:b1:dc:07:ad:f3:ab:45:3b:b1:5e:bb:ba:84:5d:
51:25:f2:fb:68:d8:1a:7b:2e:7f:f0:12:47:08:4d:eb:6d:aa:
11:30:8c:2e:95:7c:a7:2f:52:24:d6:6d:3c:60:6e:ac:ba:ed:
2e:5c:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:05:42 2025 by rpki-client