Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: Eb0IQC6UW/wVMPN52NYlEF4VFG+7LmRUSQjSOayt2o4=
Subject key identifier: 65:8E:54:04:80:9A:95:8E:B1:8E:BB:DD:D5:D7:69:4D:1B:80:30:D1
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 01974AE85B398AD9FE0053E53ABDFE29C573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 15:00:31 +0000
Manifest this update: Sat 07 Jun 2025 15:00:31 +0000
Manifest next update: Sun 08 Jun 2025 15:00:31 +0000
Files and hashes: 1: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: MIEnlYzyXHLiZb0AGzTx6CmgNV+JiPFVbisa4VW2KPI=)
2: zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa (hash: NeFjM/BvfaVvBPbeh43NItXZIzj0r2G0lwwaiN3R4Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:5b:39:8a:d9:fe:00:53:e5:3a:bd:fe:29:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Jun 7 15:00:31 2025 GMT
Not After : Jun 8 15:00:31 2025 GMT
Subject: CN=658e5404809a958eb18ebbddd5d7694d1b8030d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:1f:fe:49:1c:3d:2b:8d:1c:83:51:5a:58:
9d:c8:3c:f9:16:09:cc:be:da:03:84:04:fe:d9:6a:
98:36:bb:c2:b1:6c:8b:2f:e2:73:1b:ee:7c:97:ab:
9a:d6:b5:71:0b:dc:57:2f:59:bc:0e:86:b0:f1:09:
dc:03:a7:90:35:05:13:a5:a2:f1:91:e6:46:6c:1c:
36:79:f5:a2:b4:61:f4:15:0a:18:94:91:37:63:01:
a1:bf:8b:64:13:1c:ce:0f:00:f5:75:21:71:9a:1f:
40:44:07:93:40:69:9e:9a:df:58:94:e2:2c:76:ca:
cc:d3:4d:8c:81:6a:39:6b:2a:e1:7f:38:95:cf:5d:
9f:84:36:94:bc:1c:32:c9:75:74:84:f4:f4:d7:73:
a6:1c:02:55:77:fc:dd:6b:d0:4c:33:5a:68:9d:a1:
3e:49:ad:9f:a1:b5:35:b9:f0:77:04:1d:bd:b6:39:
64:97:0e:c0:54:5a:25:d2:88:27:0f:80:29:3b:01:
0a:ae:67:3f:fb:de:a9:cc:46:18:36:0a:b1:35:ef:
5c:77:ee:3f:2c:e0:fb:be:07:67:8c:97:9b:79:3b:
ba:98:42:2f:f0:42:5a:b1:3e:40:42:3b:b8:8f:19:
34:8d:03:33:eb:29:81:fb:b5:fc:06:40:22:ca:16:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:54:04:80:9A:95:8E:B1:8E:BB:DD:D5:D7:69:4D:1B:80:30:D1
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bb:22:e5:9d:62:9c:2d:a2:61:7a:50:73:46:16:49:00:81:
31:82:d2:ee:87:2d:3a:47:29:c3:ad:c6:a2:92:4d:e6:6d:e6:
9c:4c:27:a5:9e:28:53:b7:28:da:8e:95:61:b9:28:e2:93:bb:
2f:85:8b:5b:48:ed:b8:67:bd:c6:73:b4:a8:08:6b:1b:1b:11:
21:c0:92:9f:56:c8:6e:76:54:e6:d8:f2:9f:91:b8:a5:4e:51:
d4:13:68:c9:5a:19:ef:20:a3:84:81:0f:74:8c:c0:a6:b4:f5:
8c:73:15:2f:c3:a4:91:41:4f:0c:7f:74:c9:79:08:45:0c:e3:
36:1f:6e:48:2f:34:54:0e:a1:46:5c:c7:0b:b8:81:3c:0e:fe:
ba:4f:81:6c:66:34:7b:4e:a2:6a:66:59:83:ae:35:12:4f:f1:
14:4a:12:0d:a6:5d:cf:29:80:fe:03:e5:16:4a:63:a4:35:7d:
ba:6b:c0:5e:81:b3:77:3d:5e:58:f7:4a:49:fe:0d:f9:5a:d3:
c2:bd:15:bb:ca:a8:6a:7d:77:a0:1f:39:e4:03:6c:61:5d:74:
07:ab:09:cb:30:96:8e:d2:1f:25:ad:85:20:af:9d:34:a4:25:
01:8d:84:ef:06:ab:8b:d2:87:f9:e8:53:0e:f6:66:b1:43:e3:
bf:17:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:47 2025 by rpki-client