Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: lACCVAJjG5GirFV9wlMmil+GQKONSO2n+RUonXOJGns=
Subject key identifier: CC:40:58:4B:6D:AB:80:5B:95:92:F1:82:8C:06:11:C4:58:A6:C6:F1
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 01974A439FBB6BF22AC6AD95E2800F1FEE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 13E4
Signing time: Sat 07 Jun 2025 12:00:35 +0000
Manifest this update: Sat 07 Jun 2025 12:00:35 +0000
Manifest next update: Sun 08 Jun 2025 12:00:35 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: HiXjNIUOQbpyd8TjmGsq7X5bQKESsQXAuMDofZz3aDE=)
2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:9f:bb:6b:f2:2a:c6:ad:95:e2:80:0f:1f:ee:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Jun 7 12:00:35 2025 GMT
Not After : Jun 8 12:00:35 2025 GMT
Subject: CN=cc40584b6dab805b9592f1828c0611c458a6c6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:08:d6:54:57:97:a8:3f:9a:10:e3:1c:79:
4f:54:fd:ba:d5:a0:bb:ea:02:73:92:51:21:aa:39:
57:b6:82:f2:13:3b:cc:2a:d8:24:8b:e9:f5:d3:ba:
06:6c:70:dc:e5:85:cc:31:38:4a:37:7f:a9:87:46:
3f:30:c7:64:b0:07:5c:47:dc:55:1f:88:0b:92:0e:
09:ea:27:8b:b2:4b:a3:fd:8b:5a:ea:96:6d:a7:a8:
57:ef:f3:ab:36:76:a5:01:82:8f:3a:18:8f:9b:fc:
b8:c4:59:dc:1c:22:a0:e9:e7:e4:4a:74:ca:2b:b8:
a3:0b:b2:d2:e6:3f:04:07:5a:2d:24:83:6f:26:c4:
a7:b5:ba:05:3a:84:fc:79:f7:4d:57:20:23:8d:f8:
97:ed:d8:10:c4:06:6f:e2:18:35:a4:b5:15:63:65:
8b:8b:3f:ba:c2:b1:7a:01:f8:ae:7d:cb:7f:bf:65:
ba:0b:25:cf:cc:67:ba:cb:40:07:39:38:44:60:1f:
6d:24:ff:e1:df:b9:7e:63:ae:39:f7:91:4a:0c:57:
59:fb:6d:20:0a:08:1a:3a:8e:48:be:6a:a0:10:cd:
86:ce:bf:ca:ba:19:95:0a:e3:cb:bb:93:5a:14:a8:
e9:ee:b9:8a:d3:c3:89:02:75:72:90:e5:0f:7b:25:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:58:4B:6D:AB:80:5B:95:92:F1:82:8C:06:11:C4:58:A6:C6:F1
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:43:57:e7:25:2a:63:a7:9b:a3:1d:34:fb:52:a0:dd:25:be:
0a:1a:29:31:4a:4e:5e:bf:91:6f:02:04:0c:14:3b:f3:13:a7:
f1:05:02:59:f8:23:6e:0d:75:dc:4b:d6:47:dc:65:ec:c6:31:
c6:18:33:6a:22:66:b7:0c:c6:d7:34:cc:9d:df:82:0b:de:48:
88:7d:62:2c:ca:3f:2d:df:c7:38:a5:1a:2c:b2:3e:4c:03:1a:
66:4e:b9:1b:29:39:8a:91:f6:ed:e5:99:92:d6:53:f0:4a:75:
be:e0:8a:81:3a:76:98:de:0c:31:46:97:6f:5c:db:ca:78:85:
32:f3:75:70:17:7a:57:04:a1:cf:f3:42:0e:3c:55:20:70:de:
63:9f:2a:dd:b0:9d:a0:97:e4:9c:8c:88:31:1a:e8:3a:c7:39:
93:06:ef:ca:9d:39:d8:70:ae:87:5b:eb:55:99:82:a7:e7:50:
79:2e:4a:a6:e3:b1:c6:8e:c7:c4:e6:85:71:8c:01:e6:59:82:
46:81:4a:c8:59:dd:e9:68:4e:5a:73:bb:c5:7a:22:2d:99:7f:
91:c4:5f:0b:d9:62:18:76:d4:68:42:fe:8b:36:23:5d:a6:5b:
05:39:c8:17:2e:b2:ae:17:e2:1a:df:ea:10:8c:b4:17:9d:33:
43:a7:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:24 2025 by rpki-client