Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier: hQ7wbs4v4k4IijxejD87r+toeOxAflhgYvWzznuQMys=
Subject key identifier: 61:9F:AC:25:41:C8:92:77:60:3E:41:8A:FA:23:D5:83:91:80:68:63
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 01974AE87D4CDF9B86E5C92B247A76AE098A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number: 08B6
Signing time: Sat 07 Jun 2025 15:00:39 +0000
Manifest this update: Sat 07 Jun 2025 15:00:39 +0000
Manifest next update: Sun 08 Jun 2025 15:00:39 +0000
Files and hashes: 1: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: ObKc8yFY4yHtdWvOFSQ/OEXbrJ7pmObWgnbRinveXWk=)
2: uaDvodSl9Qqt6SU3QvEP4PKpm0c.roa (hash: KfFNiihZ95ffen8bkT+elj9FXLgX4E04ZxK55q4T9Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:7d:4c:df:9b:86:e5:c9:2b:24:7a:76:ae:09:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Jun 7 15:00:39 2025 GMT
Not After : Jun 8 15:00:39 2025 GMT
Subject: CN=619fac2541c89277603e418afa23d58391806863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:98:e4:0c:f1:23:cc:0e:29:9e:b5:e1:cc:
be:ea:b8:d3:03:0c:fa:5f:f1:ab:af:a3:a6:aa:44:
6e:91:79:61:de:71:bc:26:c9:99:2d:28:1a:64:fe:
f7:cf:e1:8e:81:d7:a8:c4:37:3b:49:1f:18:c2:fa:
ab:1b:df:1d:46:45:fa:1a:1c:6e:5a:ed:d8:92:10:
47:28:f2:78:a8:db:17:4c:bb:3f:a9:ae:40:01:e4:
b4:c8:eb:e3:93:fd:48:ea:5a:ee:09:eb:54:fa:f7:
0c:73:24:58:a8:19:fc:fa:19:05:7d:55:8b:39:b6:
f0:c3:10:94:39:52:75:39:cf:09:74:51:e5:e0:47:
4d:95:6f:9a:13:bb:4c:9d:ff:55:5e:53:0a:6e:71:
81:34:cc:e3:1e:1e:eb:f9:18:15:9f:e1:f6:2b:ac:
4d:e4:20:2e:70:96:8a:8e:02:a9:88:c3:8b:b5:e0:
a6:56:82:66:14:26:38:fb:c6:02:33:ef:17:9f:56:
34:3a:dd:2b:62:41:50:38:e8:f8:68:a5:96:7e:11:
9b:de:07:8e:d1:4a:00:10:cb:1a:4d:0f:9a:0a:6e:
0f:de:69:49:e1:67:40:16:25:fb:b0:9b:8a:2d:f7:
71:25:18:b5:ec:34:ec:bc:a5:8f:10:8f:91:4c:32:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9F:AC:25:41:C8:92:77:60:3E:41:8A:FA:23:D5:83:91:80:68:63
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b2:44:7f:ba:3f:02:8b:18:aa:30:72:5b:5f:91:36:c8:75:
0f:e9:29:4d:ad:45:5d:81:d1:ff:e8:f9:61:a1:32:09:90:e4:
1e:78:aa:d6:ce:0b:c3:8a:03:fa:0d:97:c0:de:0e:3a:4b:42:
0b:7e:51:d6:47:44:92:6f:1e:24:4e:42:2d:f4:2b:c5:65:fe:
47:dd:59:7a:5a:0f:0a:36:11:cb:1e:76:ee:d1:5c:4c:a9:65:
9c:23:93:ab:e3:da:bf:4e:44:13:1c:53:1a:a4:44:af:ee:d1:
a5:4d:5d:f1:ef:af:f5:05:80:34:a5:79:f9:e3:ae:0a:c3:a2:
de:9b:6c:43:f6:b2:78:30:b5:25:d6:a0:a3:2d:42:92:76:a9:
ae:cb:4f:8a:fe:35:eb:69:4f:96:50:c7:3a:54:06:f9:8c:b9:
b4:1f:33:98:83:17:6b:8f:3c:00:08:4c:8a:c7:40:e9:b9:67:
ce:26:4b:55:9e:54:79:d3:10:1e:41:58:17:6a:d0:cd:d7:0f:
6c:75:6e:78:94:b1:6d:bd:8c:25:1c:35:a0:79:3e:5a:a5:2c:
4d:0e:a9:8d:38:f2:bd:54:46:37:e7:8c:39:24:90:73:35:e8:
59:7e:75:32:9d:9e:e0:fb:aa:36:b8:57:37:70:25:06:9d:33:
6b:0b:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:08 2025 by rpki-client