Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
File: HKrZOQiq2NJG62n35mqnDeW9Whc.mft (raw, json)
Hash identifier: WFqWa/VYFvrrhKS9oUse9wkbG2yhD+yE4FfgkZrnff8=
Subject key identifier: 1E:BE:9B:57:2D:A2:D3:DE:08:E4:7A:E8:1F:8B:1F:7F:9A:A5:2F:FA
Authority key identifier: 1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
Certificate issuer: /CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Certificate serial: 01973F1B86365C8BB4D99167CCF18A094C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
Manifest number: 0C5C
Signing time: Thu 05 Jun 2025 08:00:57 +0000
Manifest this update: Thu 05 Jun 2025 08:00:57 +0000
Manifest next update: Fri 06 Jun 2025 08:00:57 +0000
Files and hashes: 1: HKrZOQiq2NJG62n35mqnDeW9Whc.crl (hash: GrLr8Epp8U7JmRA0DGnAZY/3WWcrg2XXu9XKdR0qFZw=)
2: ackszuiJCTUVf3NL6BGlMWZR6mU.roa (hash: eS/ev9znkjBG3HaRk+tKGqjX3/CUPsNsHqj4Rs2K9+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:1b:86:36:5c:8b:b4:d9:91:67:cc:f1:8a:09:4c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Validity
Not Before: Jun 5 08:00:57 2025 GMT
Not After : Jun 6 08:00:57 2025 GMT
Subject: CN=1ebe9b572da2d3de08e47ae81f8b1f7f9aa52ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:a2:64:fc:62:f2:39:b5:3c:09:ff:1e:83:
61:9c:e6:7a:01:52:cf:0f:b9:ff:c3:08:af:6b:c2:
b3:74:fb:8e:3e:37:ce:08:42:d1:f8:85:3f:15:6c:
83:bb:49:ed:7b:16:79:c0:3a:6c:00:dd:cc:7c:8e:
0e:0f:d7:67:1e:62:a1:a2:df:6c:a2:23:d9:d2:7d:
4d:7f:04:06:18:f0:d9:fa:cd:73:1f:6a:f2:ad:38:
47:4d:69:e5:fc:9d:1b:bf:27:bc:9a:39:24:bc:27:
bb:ed:d1:79:88:de:c0:6c:9a:c4:50:8f:66:99:9c:
95:1c:d8:60:66:3a:60:17:58:8d:dc:fc:56:92:f7:
bb:df:20:b6:ab:dc:97:dd:7e:74:2f:2b:33:f9:d4:
d8:41:aa:1f:b2:70:6d:bf:c7:3f:94:fd:f4:a6:b4:
83:cc:d0:c4:53:c9:5a:1b:c4:ee:7a:bd:84:87:aa:
22:24:33:4e:6f:a2:13:6e:c6:f9:d7:16:e8:d0:eb:
63:ba:bf:a8:8d:cc:ba:09:9f:b2:33:0e:ed:04:7a:
ae:56:98:a6:ef:0c:8e:e0:70:b0:5c:cc:ad:cc:75:
3c:5c:34:17:b0:73:a0:e3:75:ca:ea:f5:90:4d:26:
15:bc:14:d2:84:3d:d5:24:a4:d5:de:80:bf:c4:d7:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BE:9B:57:2D:A2:D3:DE:08:E4:7A:E8:1F:8B:1F:7F:9A:A5:2F:FA
X509v3 Authority Key Identifier:
keyid:1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5c:3f:af:0f:75:d5:ec:4c:5f:dd:5b:2a:4d:83:bf:66:3e:
66:23:91:1d:55:4d:4f:b5:90:25:ab:5a:ab:ad:96:78:72:04:
4f:a7:cd:d6:d0:ac:36:d9:52:45:0c:f1:b2:e4:13:40:c4:cb:
02:d2:60:30:a1:da:49:1a:ab:60:43:2a:00:ab:d1:9d:bd:32:
0d:38:ba:65:4a:4c:9c:59:5f:8b:7f:62:1e:e5:52:b2:ad:16:
c1:c0:19:cf:dd:65:44:6d:1a:ba:e2:6f:ef:05:8b:89:23:42:
91:f4:41:55:cd:4b:8f:1a:b1:b6:a6:57:fc:3b:b1:62:51:9a:
90:a7:78:84:0f:26:da:bc:b7:4d:6e:04:f7:6b:ad:26:cd:cb:
0a:80:8a:3c:79:46:b6:83:c5:d0:3a:8e:06:52:ab:90:7d:ee:
98:4b:3a:eb:26:6d:6c:61:a6:4e:b5:c8:b5:23:0e:5e:6c:c2:
76:de:18:db:8e:58:f3:df:99:01:b1:a2:4c:14:19:7e:e6:ae:
23:57:7a:f2:cb:f4:47:db:7f:95:9b:42:fc:93:5c:0b:93:27:
96:e1:0a:69:68:ec:33:15:47:f1:02:0b:44:b2:0f:02:30:98:
50:38:2a:1a:ac:da:36:1b:bc:24:33:52:f6:81:e7:e8:ec:34:
57:50:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:42:46 2025 by rpki-client