Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: PzcILOWGjRRySLDOdfZs+WNIgTh59POBOaJhXNB49Q0=
Subject key identifier: 46:20:9D:11:B8:1F:B5:4A:62:87:E1:AE:7A:3B:52:15:1D:F3:7B:81
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 01974FA16A739E2685623AF8892313D39DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 1353
Signing time: Sun 08 Jun 2025 13:01:07 +0000
Manifest this update: Sun 08 Jun 2025 13:01:07 +0000
Manifest next update: Mon 09 Jun 2025 13:01:07 +0000
Files and hashes: 1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: Bp2Vh/Lw7tcqFk4chjBz5nlRvRU68dkHrPFdq+d21A0=)
2: OLwYzj-fOtPupeVPjMakvIdCk14.roa (hash: w82sMMgD2hDeR96YGrYPpR7eSx7BTygOkVtPfhR7sSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:6a:73:9e:26:85:62:3a:f8:89:23:13:d3:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Jun 8 13:01:07 2025 GMT
Not After : Jun 9 13:01:07 2025 GMT
Subject: CN=46209d11b81fb54a6287e1ae7a3b52151df37b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:ad:36:38:dc:0d:97:46:d5:1f:ea:b0:1f:
57:a2:38:04:50:96:ba:53:8c:1e:ae:6f:90:7a:80:
49:df:c6:71:fb:3f:c6:52:83:13:e4:99:7e:9b:cf:
83:71:02:24:7a:0f:8c:22:11:c8:5c:da:01:6a:ad:
4f:03:47:6e:a1:d3:d2:98:ac:8a:5c:ec:23:b1:66:
76:2c:92:be:52:82:d9:56:bf:f5:19:03:09:5b:e0:
7f:82:48:10:58:b0:b2:69:4a:c0:b9:d0:d4:33:26:
b8:bb:7c:85:b5:5a:57:03:75:3c:0e:a8:61:f8:4c:
ac:e5:2c:8b:e8:ba:c1:f4:c0:33:08:ba:4d:51:df:
92:79:17:24:72:bc:a4:ea:c9:d0:e0:61:63:b3:08:
79:e3:e0:df:47:d9:08:1d:46:06:6b:0b:ae:94:88:
99:07:86:1b:ae:ce:e1:c1:bf:3e:19:00:b9:db:a7:
3f:79:31:0b:30:8b:1c:37:da:7b:08:d8:83:c1:fd:
5f:af:0f:01:e3:80:0b:3a:29:21:d7:c5:85:88:d0:
39:bb:1a:29:a5:d8:28:25:0a:3c:93:47:56:d4:3c:
9c:1a:a9:03:bf:4b:5f:1a:9f:cc:89:0e:db:83:a9:
32:0d:fe:92:b1:65:84:1e:6e:82:bf:10:c8:e2:f5:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:9D:11:B8:1F:B5:4A:62:87:E1:AE:7A:3B:52:15:1D:F3:7B:81
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f0:90:ac:34:a6:be:e1:a4:5e:6e:19:eb:a6:7b:cb:0a:f4:
14:0a:90:cd:85:e4:10:cd:23:58:00:00:a5:27:ee:04:8a:1e:
5c:18:d1:cc:ad:17:bc:44:04:1a:c7:da:86:02:25:7a:0a:78:
34:f5:43:96:8c:f0:ba:63:f6:fd:e0:8e:79:f1:26:a0:2b:05:
d2:b2:f5:de:3c:ba:ce:63:a8:e9:f4:f3:58:17:da:a8:e8:7a:
bc:78:12:ac:76:38:c6:84:35:06:07:4a:5c:08:65:c8:01:02:
95:e4:b1:2c:7e:a1:74:c8:22:a9:30:2f:b7:9f:4f:de:1d:15:
c2:9a:83:95:e1:b9:bf:d4:42:ac:a9:25:4f:62:1e:7b:ea:36:
7d:3f:d2:59:1a:48:2c:e5:34:04:eb:2c:81:5f:31:76:22:9f:
af:a1:31:2c:1f:25:30:be:17:ff:fc:e1:09:4a:3e:42:a0:df:
cf:0a:7f:d6:3b:1e:60:ea:51:dd:4e:d0:db:8e:b5:d3:78:72:
fd:df:bc:c0:cc:0f:32:19:8d:f5:5f:41:4a:b7:65:19:17:f5:
e7:09:c7:cb:f2:ea:c4:4f:a8:f4:e6:65:6e:8a:c2:14:35:ab:
4f:a9:a0:0e:2f:24:d4:06:7f:54:c4:6f:ca:6c:d4:fb:c8:88:
94:13:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:27:18 2025 by rpki-client