
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: CcE68YUfOFcK3XEFOFbcvhuzWQ7s5ZOWIXMrZ2ZXmWA=
Subject key identifier: F8:48:A3:D6:1B:25:0A:72:41:6E:03:BD:64:E5:52:33:E4:CB:E7:C8
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 0197488CB02E9E6D6309B43D695F6F407803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:09 +0000
Manifest this update: Sat 07 Jun 2025 04:01:09 +0000
Manifest next update: Sun 08 Jun 2025 04:01:09 +0000
Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: kqUn/PymXdlfXsFMDXawVEEvrIqZTLeA5UisggwHHM4=)
2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:b0:2e:9e:6d:63:09:b4:3d:69:5f:6f:40:78:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Jun 7 04:01:09 2025 GMT
Not After : Jun 8 04:01:09 2025 GMT
Subject: CN=f848a3d61b250a72416e03bd64e55233e4cbe7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:2b:b5:9c:24:5d:41:f7:3c:d2:23:69:b8:
29:c8:9d:b3:5e:a3:75:14:13:c9:2d:37:63:09:8c:
6a:77:ae:5d:d2:73:a8:b6:c8:f6:f8:14:1d:fa:32:
62:4e:6a:d2:6d:c2:b2:bf:46:27:ce:01:d4:9f:63:
3a:4b:b1:84:02:25:24:bb:86:c9:cd:a9:bd:d1:4e:
f6:b5:e3:e3:0b:b5:d1:82:41:fe:e5:ea:26:05:28:
04:e5:98:b1:23:c7:fd:31:30:25:25:5e:64:1f:1d:
7d:46:7d:d1:44:95:e0:9c:d2:48:0b:63:df:f7:10:
35:03:08:11:82:e4:20:a2:c3:6e:f1:be:8e:27:87:
5c:7a:83:16:1f:d1:af:81:ac:7c:a9:f1:6d:dc:7e:
e2:30:4f:4c:85:19:01:20:a2:0a:fe:8c:48:6e:27:
9b:c6:1b:a1:23:d1:ae:d5:c5:68:4a:66:da:bb:33:
16:e9:83:89:54:2f:9f:21:6a:ac:55:65:f6:16:31:
13:af:1d:99:94:36:8d:2d:e3:98:1e:ea:0e:d3:92:
2b:b7:85:33:fc:4b:84:de:d1:86:48:a6:c4:27:8b:
da:af:21:13:82:42:98:72:6b:3a:45:be:f3:fc:42:
75:39:95:40:99:5c:81:42:6e:00:d6:6c:a7:7e:0f:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:A3:D6:1B:25:0A:72:41:6E:03:BD:64:E5:52:33:E4:CB:E7:C8
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:54:34:2a:d8:4d:90:7a:9e:7c:d0:a9:35:0c:97:50:49:d7:
a3:2b:11:9b:3f:4e:a4:95:54:30:66:25:51:8c:55:59:2d:ef:
12:04:3e:29:f6:20:71:5f:d6:41:cb:a0:88:09:4a:f1:0e:56:
ab:cf:9c:5f:d7:b6:42:ee:f2:97:20:e2:9d:2b:5a:57:68:56:
db:38:69:98:69:30:fb:aa:dc:c4:fd:42:2e:00:43:84:7c:01:
17:d1:d9:45:7e:83:20:3c:53:c8:bf:98:ea:4f:67:70:1d:94:
d2:8c:1c:db:1c:f7:f8:5c:02:b0:90:ab:bf:bc:da:15:f1:cd:
01:d7:2b:65:4e:c9:65:9e:8e:2f:47:f7:26:81:66:a7:60:f7:
f4:27:16:86:50:72:41:5a:64:07:48:86:64:9e:aa:ed:e3:57:
2c:db:ce:27:b6:14:f9:4f:5f:1c:10:de:1c:1b:47:9a:3a:a2:
3e:14:b8:80:87:5c:d8:d5:86:7a:34:59:c7:54:2e:0d:b0:e2:
6b:08:94:1f:1e:14:93:5f:44:bb:a1:3c:1a:de:99:23:26:a5:
c3:22:2e:08:3c:f8:69:37:ff:dc:aa:89:6c:a9:8c:6f:fa:4c:
7b:9a:38:be:33:97:f9:96:16:ee:03:56:f8:74:82:c4:92:37:
30:b4:9f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:33:23 2025 by rpki-client