Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: +aRRqo7XcO7L5bdtVoyh4UGOoDSOTNpwY32CFrXo59c=
Subject key identifier: 0A:37:F5:0E:75:25:3C:0E:7B:8F:73:92:9E:87:BD:F3:A3:3C:BC:74
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 019749314C9155C20542FE6BA1C001D08057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 13B2
Signing time: Sat 07 Jun 2025 07:00:56 +0000
Manifest this update: Sat 07 Jun 2025 07:00:56 +0000
Manifest next update: Sun 08 Jun 2025 07:00:56 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: piLji+x09Xx+s1oP4b3FjXplEPLV/CG3f9QGAQFs3s4=)
2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:4c:91:55:c2:05:42:fe:6b:a1:c0:01:d0:80:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Jun 7 07:00:56 2025 GMT
Not After : Jun 8 07:00:56 2025 GMT
Subject: CN=0a37f50e75253c0e7b8f73929e87bdf3a33cbc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:de:04:1f:c9:66:1b:0b:18:d1:0e:58:43:
33:29:86:ad:37:6a:3b:69:60:8c:36:67:b3:d5:91:
f9:74:8e:3c:6b:40:8a:d4:51:87:41:9c:6d:4c:c7:
7c:05:fe:87:1a:e2:ab:6f:57:0c:49:7e:f9:79:88:
da:74:eb:d2:b6:bf:72:d2:b4:31:3e:ef:ac:6c:ee:
43:03:d3:3e:6b:e3:d5:97:25:b0:0e:c6:aa:8e:8d:
2c:a6:3f:c5:65:68:f4:97:86:2d:72:85:fa:47:8e:
f1:5e:be:e2:4c:f6:16:2c:74:6a:b4:fe:f1:61:62:
ea:40:23:b1:5e:89:b6:60:ea:d4:15:27:d9:13:0b:
51:33:82:32:74:91:aa:ed:fa:ce:6f:49:27:f6:a1:
01:bc:eb:f5:82:72:a9:c7:e8:22:2b:1c:06:7f:70:
7f:ac:64:cb:21:f4:46:fc:3e:a4:3b:e6:30:c1:49:
10:a3:2f:ee:82:f7:a5:d2:f1:30:a8:30:49:96:9c:
85:d0:a2:44:a7:07:37:07:69:4e:e1:f0:16:df:e5:
38:02:83:14:a5:d1:e4:b8:36:ac:f0:7b:88:bf:f2:
ee:d7:7b:04:87:f8:bc:2e:f9:2c:03:43:1d:e5:45:
d2:ba:f4:be:89:24:75:74:6a:d0:20:00:80:12:eb:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:37:F5:0E:75:25:3C:0E:7B:8F:73:92:9E:87:BD:F3:A3:3C:BC:74
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ca:4f:ee:11:de:f1:a0:ed:0c:e3:9d:e4:dc:d8:8c:0c:0f:
58:46:6a:51:73:fe:a4:33:ff:e0:58:33:89:69:ad:e4:8c:e7:
05:f2:bd:4a:2f:11:a2:c1:52:c8:9f:ed:32:62:34:49:a6:4b:
af:84:ad:e7:25:91:18:08:d9:2d:c6:33:5b:ae:ff:f1:0f:e2:
6e:8f:23:ca:80:69:1e:49:f5:2a:62:4a:57:c6:24:38:e0:d1:
02:62:cb:fd:1c:1e:8d:f1:99:6a:ed:ef:31:ac:dd:82:59:87:
6a:ec:b8:40:2a:88:78:ff:29:65:0a:73:f9:7d:ab:4a:ea:c8:
11:0a:17:96:23:15:52:f9:c1:63:fa:49:70:c0:d7:a0:1b:c2:
fc:0a:42:8d:df:51:0c:9f:fc:ba:a0:02:da:44:0a:e4:a6:90:
43:98:1e:70:76:cd:a6:c4:8b:3c:25:35:53:e5:af:5c:65:a5:
ef:50:b5:04:33:9f:04:52:f1:ce:82:47:20:7c:f0:ea:93:d3:
eb:a7:d1:97:0e:42:26:5d:bf:d5:76:4c:e3:35:75:5c:b5:b8:
fd:4d:64:f1:69:92:21:75:fb:7f:1e:42:c4:dd:82:a4:76:17:
20:f9:2e:5e:84:1b:3e:21:7c:40:83:69:63:2e:2a:00:c4:7d:
fa:94:68:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:48:54 2025 by rpki-client