Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: UEu7vW5XpWOoC8g81K7YhajEbtBW+W6cs78F45Q1OVw=
Subject key identifier: E2:5B:82:8B:3F:70:6B:6E:61:BA:91:67:F0:A1:5C:4C:77:C1:3F:D3
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 01974A0CD5AD7203518B0C77D6F23ABBFF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 04ED
Signing time: Sat 07 Jun 2025 11:00:44 +0000
Manifest this update: Sat 07 Jun 2025 11:00:44 +0000
Manifest next update: Sun 08 Jun 2025 11:00:44 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: pMjPuyFT0TBA6uHPRnnl/DFRLsfF4iNEsWv9ZH8ldx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d5:ad:72:03:51:8b:0c:77:d6:f2:3a:bb:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Jun 7 11:00:44 2025 GMT
Not After : Jun 8 11:00:44 2025 GMT
Subject: CN=e25b828b3f706b6e61ba9167f0a15c4c77c13fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:b2:b6:3c:2d:50:30:e8:81:ec:da:5c:5a:
f2:e9:26:b8:c5:b3:4b:18:af:87:83:87:db:7f:3c:
6d:cc:71:f9:ae:5f:1e:f9:61:8c:8a:31:d2:a3:69:
23:48:79:a1:06:d1:8d:02:08:5f:7d:56:7b:a1:71:
00:6a:0f:ad:17:d9:45:38:99:2c:e0:8a:aa:38:c8:
41:d7:f6:00:7a:2a:a1:9e:d3:ec:9e:4b:c8:7f:0b:
35:a2:03:e4:ed:d3:8a:85:8e:6c:00:0b:43:59:24:
be:49:d4:03:e3:9c:a1:2f:12:a4:83:68:c3:6d:4c:
f9:37:d2:c2:91:9c:c5:c0:f7:58:b3:d3:93:a7:c8:
90:83:ac:0d:1a:3e:d5:fc:bb:2c:8f:53:3b:27:c6:
05:e1:3d:e5:be:bd:c4:b2:61:f4:ab:c5:bc:93:a4:
92:e9:32:e5:3f:f9:fd:9a:6b:87:7f:a6:dc:da:1f:
f7:9f:f7:a0:bd:2f:11:f7:3a:df:7b:69:b2:57:68:
3b:55:03:43:34:1d:9e:91:94:f2:be:3b:4b:73:2e:
f0:a2:47:d5:b5:c0:31:9b:cb:90:c7:fc:1f:fe:26:
bc:15:89:4d:d0:e7:28:6f:a0:a9:8a:49:8f:c6:3c:
17:cd:b1:02:a4:99:6f:39:64:96:77:c4:34:ae:e3:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5B:82:8B:3F:70:6B:6E:61:BA:91:67:F0:A1:5C:4C:77:C1:3F:D3
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:d0:ef:75:02:51:2a:50:de:80:9a:c7:92:b3:0f:27:cd:
7c:c2:07:d7:46:cc:b8:3f:62:e8:51:f2:71:e7:9f:3f:4e:c9:
18:1d:9f:3a:2e:0c:80:3c:fe:e9:4a:0a:2a:c1:bc:56:ba:e3:
64:72:7e:b2:c7:98:f7:bb:f4:c2:41:48:a8:ad:33:77:02:4f:
c0:fb:59:bb:69:82:13:90:78:69:db:46:d4:8a:c5:d6:90:96:
a4:58:70:27:db:3e:c8:c5:f4:5b:02:b3:90:9d:8b:cc:cd:14:
8f:28:61:c0:cb:17:3e:ae:cd:d5:80:94:de:bb:b1:ff:a7:01:
01:ff:1e:35:96:a8:14:ce:a9:d3:4e:d9:9b:58:72:d3:4f:d1:
b2:dd:84:a3:3b:1c:ca:ee:97:1c:9f:e4:33:59:5c:f8:47:f4:
5b:ad:22:10:ed:e7:4d:25:05:5d:fc:28:fb:04:a7:0d:4f:34:
a7:1a:00:5e:f1:c3:62:cf:ef:4a:e0:59:78:60:b9:c9:88:f6:
a3:ec:ac:7f:5e:7c:64:0e:48:4e:a4:d5:63:0b:bc:40:15:a7:
e9:01:44:9a:03:91:e0:5f:c3:fd:0c:b2:c2:0a:ef:0c:5d:0f:
22:8f:c9:a6:43:40:83:78:80:8a:c4:81:5c:ad:f4:d9:50:15:
74:a9:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:34:19 2025 by rpki-client