Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: +gSWlquPrHlg0E98te8sUzSwSWbUmDDBpXxNDEDc3UU=
Subject key identifier: A2:A6:BF:EB:3E:DE:CC:02:D8:DF:C8:0C:A8:89:91:EC:7E:B1:D0:4D
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 0197462FB097EFAF4EFD255D7BE5F595C18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 150C
Signing time: Fri 06 Jun 2025 17:00:19 +0000
Manifest this update: Fri 06 Jun 2025 17:00:19 +0000
Manifest next update: Sat 07 Jun 2025 17:00:19 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: g+sdYSCaVu6dSZCRx1xsgmObfonH0ZW0p6Xh0P3+dTs=)
2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:b0:97:ef:af:4e:fd:25:5d:7b:e5:f5:95:c1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Jun 6 17:00:19 2025 GMT
Not After : Jun 7 17:00:19 2025 GMT
Subject: CN=a2a6bfeb3edecc02d8dfc80ca88991ec7eb1d04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:73:d3:6b:41:d1:64:3d:19:56:68:68:59:
f7:35:99:e5:0d:7c:6d:da:fa:7a:71:1e:77:59:49:
e9:e1:c3:3b:bd:13:04:80:32:65:6e:83:69:b3:9f:
1c:40:84:2e:88:14:08:2d:80:57:01:95:dd:bd:54:
70:0d:a9:8e:ff:5b:ae:63:32:c5:21:8a:1e:df:28:
2e:85:62:8d:4f:97:24:3b:2d:c3:de:1d:c1:63:c1:
66:7a:7d:00:75:e8:84:a0:31:ca:88:a7:4c:b0:05:
cf:45:38:72:4d:e2:04:67:a8:39:64:f0:36:8f:95:
47:58:b8:55:d9:10:44:7c:27:a8:1a:23:eb:0f:01:
b8:86:ce:89:d0:59:2e:f8:1e:a6:b9:78:ad:93:10:
28:47:2f:08:e9:30:58:5a:3a:b6:6f:d9:f0:9c:65:
54:7d:49:af:d7:2a:f4:24:37:29:9e:de:85:7e:b9:
ce:67:79:e9:4a:c7:fb:99:a3:24:84:18:82:91:ba:
4c:86:bb:af:ea:84:c6:e4:78:ba:c3:9e:da:84:51:
f2:40:03:d0:b4:3f:79:81:2c:a2:81:01:26:03:24:
2a:bf:4e:3a:40:00:fb:e3:94:62:64:4b:76:81:47:
be:48:29:9c:11:1b:5d:0c:dd:21:55:88:1a:d2:ec:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:BF:EB:3E:DE:CC:02:D8:DF:C8:0C:A8:89:91:EC:7E:B1:D0:4D
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:46:4e:04:d4:73:de:23:ae:40:73:6d:c7:d7:37:6b:d6:e9:
7d:38:57:fe:b9:d7:2a:bd:6a:4d:d2:72:98:5a:ad:09:c1:1e:
eb:b4:71:4a:ff:6d:c7:1b:ca:8c:c2:30:14:a6:af:cc:fc:8b:
f6:15:6f:8b:46:18:02:d4:db:09:95:06:bd:c6:a2:bd:79:64:
ef:f3:b4:2a:39:a6:17:fb:ef:c2:05:9e:4c:ba:a2:41:e6:6a:
c4:73:22:06:e0:fe:5e:48:cb:cf:37:b5:e1:5d:5e:12:fe:6f:
96:e4:96:21:1b:e1:03:8b:0a:b0:d6:5d:6b:a1:05:36:ca:d7:
3c:40:04:2f:32:36:6e:50:00:d3:ef:71:bf:12:33:2e:8e:4d:
7b:03:6c:49:e8:3e:5d:18:2f:62:ba:62:fd:d5:56:e3:fa:64:
40:66:89:a8:2d:33:70:2b:5a:26:b6:56:54:a1:79:99:c6:41:
7e:50:b3:89:b9:1d:64:62:f5:1f:42:d8:b8:6b:d9:7a:ed:86:
6f:36:d1:04:20:99:36:f9:8a:06:3f:2e:03:a3:38:98:b9:c8:
82:88:4f:74:8e:75:59:f5:c4:1b:18:75:86:31:d0:ac:44:0f:
32:c8:0d:d8:3a:d4:87:21:75:4e:ce:46:24:fd:ec:bf:49:34:
40:41:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:12 2025 by rpki-client