Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: jZNa3SOctZWXiv6Jwwa7htO6Je6Gg3ftDEJmCBEa3fY=
Subject key identifier: 21:41:60:A7:A2:7A:34:E9:3E:5A:EC:F9:74:A3:96:7B:D3:30:B2:53
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 0197485569FEF16C01C64DE812151353EFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 024E
Signing time: Sat 07 Jun 2025 03:00:46 +0000
Manifest this update: Sat 07 Jun 2025 03:00:46 +0000
Manifest next update: Sun 08 Jun 2025 03:00:46 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: WPhM+uuyEzrlgtIrnrTJ9vUp3QwF1cz5Y+Y3lDSLFfQ=)
2: liqpeGCwYwmu9HIJXhtRdiCnJ1w.roa (hash: PH03F8UhRKFA3g0ZorCZDIyppRrDIopkxrEtCKPjXS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:69:fe:f1:6c:01:c6:4d:e8:12:15:13:53:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Jun 7 03:00:46 2025 GMT
Not After : Jun 8 03:00:46 2025 GMT
Subject: CN=214160a7a27a34e93e5aecf974a3967bd330b253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:cb:5b:5c:e5:64:7b:63:61:b7:92:f9:53:
d5:d5:25:79:50:79:e8:04:12:80:2f:c0:c3:3b:1f:
5a:8a:04:2d:b0:52:92:56:83:e9:9e:10:a6:24:d7:
ff:5d:8b:99:6f:50:47:dc:3a:41:db:3b:e4:a5:02:
a7:45:57:c2:35:ef:30:1e:43:db:9c:cf:44:60:2d:
3f:f8:c1:39:c4:37:f8:c1:7c:54:d2:63:d0:f1:f4:
14:ef:86:9c:2e:e4:03:d8:43:50:eb:f5:39:55:e4:
39:91:b7:ff:6a:6b:a9:a5:54:6f:d0:6f:49:a3:f8:
c3:a1:eb:b3:a5:3c:26:c4:f3:fb:f2:7a:25:8f:da:
2d:0b:0d:6d:d6:ec:ff:6c:a5:7d:07:a3:58:b3:f1:
1f:0c:af:79:28:44:39:b2:fd:41:df:45:04:b4:3d:
4a:13:aa:5c:e4:be:42:96:86:23:6c:69:8c:b3:de:
c2:e3:7f:6f:74:43:11:bc:fb:76:30:b0:03:25:17:
87:70:ae:6e:e2:f1:69:29:f6:94:67:5a:8a:17:f9:
ed:18:4c:18:a8:e5:e3:4d:3b:4a:c8:44:b2:83:b8:
02:63:96:91:0b:f8:6d:2e:99:e4:5a:fb:eb:b8:35:
51:ae:88:f9:ce:6c:53:07:4f:8c:4e:b1:b4:90:b7:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:41:60:A7:A2:7A:34:E9:3E:5A:EC:F9:74:A3:96:7B:D3:30:B2:53
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8c:7f:cf:80:65:4f:c7:23:16:f7:4d:ea:c5:43:33:3b:b2:
de:70:ac:ec:85:9e:c1:01:9b:23:1c:e9:75:1a:b5:1f:0e:60:
ca:34:f8:43:ef:e6:a0:93:88:4a:bf:fa:f9:2d:3f:98:99:22:
83:8c:82:59:40:af:0f:23:ac:82:70:a5:7c:08:84:10:a6:21:
d3:00:15:e5:d4:cb:35:6e:ff:e4:58:75:dd:25:54:c5:5c:21:
d1:c7:2e:a2:84:af:6a:dd:29:40:48:0f:25:f6:f7:dd:d5:3b:
61:6b:88:95:0f:16:cd:a1:ee:dd:fb:d8:4d:b2:59:12:6a:58:
aa:58:b2:4b:2a:82:01:da:91:fa:2a:65:76:9a:20:0b:7d:75:
60:46:0c:54:38:82:bf:84:b8:6e:2c:d8:68:d0:00:69:1c:be:
04:1f:85:c7:5f:a7:7d:e3:3a:de:31:fb:19:75:46:96:1b:8c:
70:b2:c5:18:1e:1b:52:f4:42:63:5f:c1:76:bf:7c:d4:32:9a:
95:91:e1:67:8e:50:f2:5e:ee:57:24:6b:61:12:16:ab:38:17:
2b:1b:4c:68:ea:0e:5e:5d:98:93:57:8b:f7:74:a5:da:fe:db:
36:82:18:70:b1:3e:64:57:e1:3a:74:d3:1a:70:15:9a:d0:16:
30:66:17:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:33 2025 by rpki-client