Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: BTRv0nIPvtf/H/d5V8mXByeTMbCQHcIcs1L4EpIRuaE=
Subject key identifier: A4:8B:B8:61:D8:A5:23:A6:A6:BB:D1:05:27:DC:2E:C8:A2:94:BA:45
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 019746673E4125F0B9233BF646AF03AE282D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 18:01:00 +0000
Manifest this update: Fri 06 Jun 2025 18:01:00 +0000
Manifest next update: Sat 07 Jun 2025 18:01:00 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: xnU3A/HWF/wE4s2ufB3fMylSUhhPvPBiBGLaiRHv5Ks=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:3e:41:25:f0:b9:23:3b:f6:46:af:03:ae:28:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Jun 6 18:01:00 2025 GMT
Not After : Jun 7 18:01:00 2025 GMT
Subject: CN=a48bb861d8a523a6a6bbd10527dc2ec8a294ba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:d5:49:82:69:4c:06:b0:d2:02:54:ac:0d:
08:5e:f7:19:d3:89:65:81:c8:f6:31:fb:23:66:ef:
ad:41:3d:3d:51:6c:49:13:c0:d5:32:0a:f7:20:16:
9f:4e:29:78:db:d8:06:84:d5:20:0e:7f:1c:54:87:
d3:91:ce:0d:16:94:71:49:7b:d7:28:44:0a:dc:03:
88:1b:0a:d3:6b:84:94:ba:f7:22:7a:a6:0b:e9:c1:
fd:07:5d:29:c6:91:c8:dc:28:38:0e:b5:09:5d:3e:
e8:6b:e3:36:73:7d:5e:b2:32:c8:0e:3b:7f:94:ae:
4f:03:a0:0a:da:1e:51:e8:a9:c5:4a:d7:0b:94:fc:
48:21:3c:ef:56:83:04:36:ec:3b:0e:f3:03:4e:34:
36:2e:27:ec:d2:b2:8b:99:aa:27:52:4f:3e:d7:81:
62:65:fd:1e:ba:c8:2d:ec:1b:2e:48:aa:97:8b:30:
67:1b:cb:51:76:cd:cf:4e:86:8a:f5:2f:41:d8:95:
4c:2e:51:eb:7f:dc:1c:f8:16:0a:4a:33:3a:67:42:
b5:ee:f1:67:f5:ca:c0:74:54:7a:5c:20:9f:3f:26:
90:89:d6:fb:30:ed:1b:19:40:ce:0e:6b:20:2d:4c:
3a:b2:07:c7:55:33:3c:5a:6e:e6:99:1c:bd:49:b6:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8B:B8:61:D8:A5:23:A6:A6:BB:D1:05:27:DC:2E:C8:A2:94:BA:45
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b9:7f:e8:96:84:07:4a:55:69:26:9a:2e:c9:52:4e:5e:31:
f4:5e:09:08:a6:b1:83:68:11:00:a5:9a:40:97:3a:c2:a2:bd:
f6:ea:56:9e:04:c9:db:8d:46:a2:0d:67:be:b5:78:67:61:7d:
6c:22:a2:22:9f:6a:47:4e:d6:c8:45:b8:6f:93:39:97:c2:51:
b2:cb:9e:ab:59:6e:e3:dd:66:8e:8d:21:61:29:85:e1:67:ca:
c4:40:a1:d1:d8:d1:c1:11:eb:b5:7f:af:4b:e6:b8:23:c6:0c:
29:7c:88:0d:76:d9:ce:7f:92:1a:a2:f8:81:40:9a:da:94:d5:
95:4f:e2:e4:a8:f6:9b:71:f2:23:e5:ab:9e:cf:c4:99:dd:81:
d5:c8:f3:91:09:7b:cc:e5:8a:22:90:8f:9f:b5:43:d1:b9:69:
cd:85:83:c6:95:4a:b3:a3:b0:3e:fd:2e:79:4a:3a:93:68:80:
98:a9:46:51:9e:58:b6:d7:45:c9:a0:ad:fe:97:d1:15:60:31:
2a:9a:2e:8f:01:49:27:e9:f7:a9:16:37:41:2f:af:fc:2b:4c:
02:04:d3:21:9c:1c:2e:c9:8f:2b:b0:e0:c3:c6:81:2f:73:84:
ce:de:d0:4c:04:21:15:53:a2:99:b2:a2:e5:46:33:ae:a9:be:
ca:ae:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:10:54 2025 by rpki-client