Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: zffj8zllEozwiYv8e9rimHdgkl20fgLv2Pq+OmJ++lw=
Subject key identifier: 4B:56:A7:BB:17:8E:F6:67:D6:7F:45:06:EA:4A:5E:84:3C:E7:97:4F
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 01974DE9A5D557258728685A2ABD62F0D9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 84
Signing time: Sun 08 Jun 2025 05:00:47 +0000
Manifest this update: Sun 08 Jun 2025 05:00:47 +0000
Manifest next update: Mon 09 Jun 2025 05:00:47 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: ZZfLIKB0ggXIrRdyqA813xb5yFPSu3eXf70k9kwTLcU=)
2: _Nik0ILMWiY-Lkg3eSFYx1wzEfA.roa (hash: QByoOOal5rCcpZU9uENOAkBjvkiFCQ20AYgJc/azBtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:a5:d5:57:25:87:28:68:5a:2a:bd:62:f0:d9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Jun 8 05:00:47 2025 GMT
Not After : Jun 9 05:00:47 2025 GMT
Subject: CN=4b56a7bb178ef667d67f4506ea4a5e843ce7974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:cf:42:71:93:4b:10:ed:d3:80:28:3c:7b:
6d:fb:86:34:d9:19:b6:50:40:97:ce:4b:a5:17:2e:
51:12:3c:a1:9a:5c:de:cc:19:0a:76:88:a0:92:95:
2c:17:6d:ae:a8:e2:59:78:cc:be:5a:60:80:59:84:
5a:79:72:6b:96:a9:ab:66:c0:70:58:18:78:3d:02:
47:c6:03:8c:f7:8c:56:b2:49:47:a9:f4:4f:85:44:
f6:a3:86:34:78:5a:76:cd:b5:d0:65:43:d5:06:9d:
e5:35:a1:f2:c8:b5:83:58:ce:66:9e:e9:72:e4:72:
4b:cd:0d:ed:89:72:9e:28:9f:e7:0a:22:3e:98:70:
77:ce:57:c0:38:f5:96:5e:3e:51:1f:e5:28:a6:48:
2a:77:1e:ba:12:b0:82:31:e3:a1:17:4c:ed:76:fd:
41:ec:fa:9a:f2:8d:13:3f:c5:e8:c6:03:96:f6:50:
53:2f:47:e9:b0:81:b4:ad:c0:50:1e:93:d2:1d:85:
85:5f:93:89:ef:bb:47:f9:e1:86:1a:08:e7:30:93:
e6:18:ee:c8:46:1d:65:3e:66:ab:a1:03:a4:0c:56:
e5:55:8d:1c:55:ab:60:50:74:da:bb:7c:c9:23:e4:
5b:08:5a:d9:ba:90:07:a3:37:90:35:a3:82:7a:e9:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:A7:BB:17:8E:F6:67:D6:7F:45:06:EA:4A:5E:84:3C:E7:97:4F
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6f:bf:e1:fe:74:21:95:09:b0:8b:2f:62:cb:b7:58:7d:12:
39:7c:bb:d7:31:12:b3:5a:2d:a1:82:c6:9e:fb:4b:97:52:eb:
c0:cf:28:ee:e4:bb:46:d0:5f:eb:bf:39:e2:7e:5a:4e:cd:4f:
29:ea:d6:78:36:a6:51:84:23:c7:d2:5b:46:06:2a:48:61:e3:
4a:99:da:f7:80:19:f3:4a:50:6b:66:8b:c1:4d:cf:50:df:51:
3f:59:91:c4:17:b0:a3:00:d9:c3:65:e6:a7:a3:3e:f8:58:92:
33:da:ec:5b:b2:34:06:4a:ec:e3:c4:ad:0a:86:e6:12:05:56:
df:ca:4f:95:12:b0:09:ba:5d:3b:a9:4d:a0:6a:44:b1:d2:11:
04:1a:8e:e3:92:b5:33:f9:0c:47:26:61:a1:e8:9d:e5:8a:a3:
b1:f9:4b:3a:88:94:c3:38:05:ed:a7:00:ad:00:85:2f:59:d3:
4a:98:4e:92:f5:a6:e1:24:8d:c3:01:71:58:3c:df:17:58:e3:
43:74:ca:80:71:07:42:21:4e:c1:4a:d8:fd:e3:c1:fb:89:90:
07:41:98:e8:76:25:cd:ed:ab:8f:d6:2a:0e:26:97:e5:41:9c:
ee:38:c8:1b:d0:f9:3f:e5:32:6f:74:f9:a9:46:e2:c5:7f:ed:
f1:f3:43:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:18 2025 by rpki-client