Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: ept41kzkHotfucEmNpglT1sD2wNMpxC5rseCZPTt7g4=
Subject key identifier: F9:25:E7:0B:98:53:B1:4A:97:81:60:1F:D2:3D:67:B4:35:1C:93:FD
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 01974E20505DD3D7907042AB9C7CEA7D0BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 0DE1
Signing time: Sun 08 Jun 2025 06:00:29 +0000
Manifest this update: Sun 08 Jun 2025 06:00:29 +0000
Manifest next update: Mon 09 Jun 2025 06:00:29 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: ag6GgNr1ImFo7kYtNf0ItacgbcJYfzl1/P4Blv4Hom0=)
2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:50:5d:d3:d7:90:70:42:ab:9c:7c:ea:7d:0b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Jun 8 06:00:29 2025 GMT
Not After : Jun 9 06:00:29 2025 GMT
Subject: CN=f925e70b9853b14a9781601fd23d67b4351c93fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:60:a4:d6:9f:14:90:a3:d2:16:d3:0b:dd:
dd:0d:0d:2e:8e:2a:99:7f:e7:e8:2d:6a:f2:3c:79:
17:3c:e2:ad:0c:18:c3:e1:82:de:c5:48:a6:8c:92:
95:dc:f4:26:57:c3:7e:15:e4:44:ed:27:be:ef:fa:
78:2a:9e:ce:39:5c:3c:34:85:f9:a9:9e:f1:12:21:
0b:42:4c:84:44:96:98:7b:09:9e:74:ee:3e:3c:d6:
bd:7d:76:f0:df:1e:a3:f6:3d:9a:91:6d:61:8a:14:
74:c7:4e:f7:3f:57:00:67:35:ef:24:24:26:44:91:
d7:c7:82:22:fc:0a:05:f0:29:50:3b:c8:12:c5:56:
18:09:b9:b7:a2:1e:3c:f8:db:1c:63:a2:47:29:34:
e9:6c:ce:80:14:91:f4:bc:5f:96:b8:a1:65:8d:d1:
06:94:48:86:59:64:7a:00:56:92:99:23:e7:22:dd:
6e:01:0a:45:9d:e3:a9:b3:d4:c2:18:95:db:d9:fa:
49:b4:f5:b0:23:01:48:99:5c:41:cc:3f:be:21:eb:
63:8f:4e:22:3e:65:a8:66:fc:f2:c4:7d:82:a7:76:
a7:10:bc:ea:eb:48:1a:f3:9b:81:46:91:29:aa:58:
ea:6e:be:8a:49:aa:e9:25:ad:5b:92:fd:6d:a4:22:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:E7:0B:98:53:B1:4A:97:81:60:1F:D2:3D:67:B4:35:1C:93:FD
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:c0:d1:71:9e:a4:8f:8f:26:ea:bb:86:a1:51:5b:9e:c0:
13:59:33:f3:2f:6c:9e:a6:f6:29:98:de:c8:e1:8d:cd:e7:13:
68:39:f4:26:9f:f3:18:85:65:5b:f8:5b:bd:1e:9c:c9:ed:40:
62:1c:02:23:90:cc:95:b6:65:1f:fd:29:9d:58:c5:45:f9:a1:
b9:71:df:52:e5:57:ca:27:96:e6:5a:3c:60:26:41:cf:fc:dd:
75:10:23:65:95:94:1c:40:32:de:87:41:4f:7a:00:18:c8:8b:
39:29:83:af:e9:cc:06:7f:12:7d:ae:87:c1:e5:60:9d:e8:29:
ca:b0:c1:83:01:2f:c6:36:cb:13:28:e8:aa:5d:34:a8:9a:da:
d2:a0:f8:ef:8b:c9:fa:78:e9:a0:24:15:dc:e6:a8:64:92:b4:
55:8d:85:10:16:70:48:24:08:89:8b:80:fc:c6:45:d4:60:37:
33:9a:c8:f6:19:b1:e9:8f:f1:8f:25:48:af:f8:70:fa:7a:67:
d0:46:ad:87:f9:04:3c:fc:dc:78:40:4b:c5:af:fa:6d:d3:52:
24:76:8f:33:3f:97:71:1d:28:85:85:6a:c7:e3:76:62:bf:d8:
a1:58:16:fd:a1:6f:11:cb:28:56:25:1b:4a:90:c2:3e:dc:e8:
09:35:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:51:50 2025 by rpki-client