Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: 0+vzylYxZBq6UlYK/ufEjjv2Z6ScUksMX4Dl0fBgZ0k=
Subject key identifier: B5:6B:29:71:EE:83:A7:5C:0B:C4:FF:EB:C8:12:A8:C3:90:8F:CE:19
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 01974C323BF52BD665BEABDC2367A8B32141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1510
Signing time: Sat 07 Jun 2025 21:00:49 +0000
Manifest this update: Sat 07 Jun 2025 21:00:49 +0000
Manifest next update: Sun 08 Jun 2025 21:00:49 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: 7wl1AIo4QATqZaAfost/3j6xMP4EFWZ4Qy4L5/bYKSk=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:3b:f5:2b:d6:65:be:ab:dc:23:67:a8:b3:21:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jun 7 21:00:49 2025 GMT
Not After : Jun 8 21:00:49 2025 GMT
Subject: CN=b56b2971ee83a75c0bc4ffebc812a8c3908fce19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:99:5d:08:38:f3:6b:3b:f6:ed:27:5a:9a:
33:0b:c6:ea:83:d2:9e:3b:3f:6b:38:b7:f4:4d:a2:
7f:fd:91:bf:a8:c2:7c:c7:e1:4a:33:8e:82:2d:ab:
86:94:ac:38:f2:f1:c7:f8:66:69:ad:ba:2b:ac:07:
10:25:3b:3c:0d:d4:ec:09:dd:dc:a0:0a:9c:83:da:
44:fa:27:f0:18:ff:72:55:e7:e8:18:7e:36:bd:4c:
16:64:94:3e:0c:14:b8:fb:74:ca:db:01:67:3b:9f:
96:ff:04:d9:99:ea:e6:e3:ff:ea:4c:b9:3c:45:13:
7c:d7:3b:34:9b:86:23:8f:42:96:b3:c3:93:24:4b:
8f:72:19:ef:90:93:e5:d1:64:66:fd:a8:7a:13:ea:
ea:05:74:1c:c8:d8:01:7f:aa:72:98:a7:69:a0:63:
17:fb:00:f7:c7:cb:31:b2:02:49:42:d7:86:34:68:
a6:4a:f2:96:15:21:fe:b2:9c:e8:00:86:b4:b4:91:
1e:05:3c:68:a1:04:ba:cd:dc:a0:8e:28:ed:02:af:
ca:f2:98:32:83:05:19:ba:49:1f:31:38:57:4e:34:
1a:40:ff:f2:04:aa:5d:54:d0:fd:c3:a1:31:05:7b:
40:67:cb:96:0f:ee:6d:5d:2c:37:e3:8c:bf:12:1f:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:29:71:EE:83:A7:5C:0B:C4:FF:EB:C8:12:A8:C3:90:8F:CE:19
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b3:17:cc:3b:de:42:f9:b9:8e:7b:5a:e2:5a:a0:66:03:62:
ed:59:f6:16:14:1d:fb:cd:bb:7a:2b:19:93:99:99:d3:68:37:
ff:8c:af:ac:39:51:c1:8b:e9:ce:b4:16:f8:7f:13:3c:d2:76:
a6:5d:83:4a:59:da:4e:95:cd:7d:45:3e:09:1b:dc:fc:e8:17:
e9:e1:8f:96:4b:00:66:b0:c6:5c:e8:8b:5d:17:ab:1c:e1:dc:
59:41:30:0a:99:86:c9:f7:15:83:9d:9d:4e:b2:2b:df:33:ed:
83:22:eb:68:04:50:b9:ae:f7:9b:a3:9c:45:9e:12:7d:04:3d:
f6:2c:69:bb:97:01:4a:3f:03:16:d4:8c:eb:51:c7:19:66:d4:
24:ef:66:4d:3a:91:f4:36:6a:c7:fd:f8:b4:d1:ac:e4:88:d8:
3a:94:f2:ad:65:ee:bd:3d:1b:d8:c8:19:d7:1d:16:48:2f:20:
d6:a4:3d:c2:a0:48:fe:a3:e1:33:c1:d1:81:d3:40:31:38:0a:
80:65:a0:10:77:03:4c:db:01:f5:3f:6d:e1:4b:97:85:82:e3:
84:bf:16:6c:f3:ed:ac:60:30:5b:23:32:1a:15:dc:93:5d:ea:
d0:b3:e8:72:88:2d:2b:f4:16:ec:1a:10:c2:15:cf:f0:f2:b4:
c8:1f:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:22 2025 by rpki-client