Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
File: HjCmImLcyyGgEEs07bgrlRXKzfs.mft (raw, json)
Hash identifier: peNodL7iTl72cXxwjtOyVHHR9no5uA2hMAEEknfol0U=
Subject key identifier: 9F:F9:6A:63:7F:2B:37:6B:DD:B3:FC:07:74:8F:11:48:2E:20:9D:B1
Authority key identifier: 1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
Certificate issuer: /CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Certificate serial: 0197481E20010B5DBF56AD64A4751D608F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 02:00:23 +0000
Manifest this update: Sat 07 Jun 2025 02:00:23 +0000
Manifest next update: Sun 08 Jun 2025 02:00:23 +0000
Files and hashes: 1: 99ovKIs7DqoXCFgMc3tY-Dn815s.roa (hash: LCqxC97TPyTHpUsMAjf+F4zipAHzhEXoBKAv7DqvaTU=)
2: HjCmImLcyyGgEEs07bgrlRXKzfs.crl (hash: ckprepO2D12tU8fS8W8FiRPNsifayEsqUQ8bx9XhRs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:20:01:0b:5d:bf:56:ad:64:a4:75:1d:60:8f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e30a62262dccb21a0104b34edb82b9515cacdfb
Validity
Not Before: Jun 7 02:00:23 2025 GMT
Not After : Jun 8 02:00:23 2025 GMT
Subject: CN=9ff96a637f2b376bddb3fc07748f11482e209db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:0c:11:2f:fa:2a:24:94:20:ab:31:24:40:
d2:44:75:53:b7:e0:91:a6:a2:1b:2b:1e:66:52:d0:
b1:72:1b:31:08:27:91:84:e8:40:44:03:25:53:c3:
82:1e:7a:e7:d5:1c:fa:64:13:be:1c:c9:c5:c2:da:
2b:45:34:16:7a:f8:f6:c8:f3:91:69:e4:cf:db:5d:
16:9d:7a:17:ce:d2:b0:4b:db:8b:95:e9:85:18:61:
c3:88:94:b4:1e:ae:b0:3a:16:f3:89:28:15:90:0b:
cf:a8:69:9b:50:22:e0:f5:3c:5b:de:14:e4:b8:f7:
4a:ca:b6:8d:a7:25:c9:08:4a:41:55:0c:b3:94:3f:
3a:67:14:bd:1d:06:4a:2e:fa:f2:64:46:a8:f4:b6:
6a:bf:33:32:df:84:27:20:91:7b:7c:02:90:86:f3:
eb:e9:13:bf:42:ef:4d:27:1c:63:a5:c4:7d:78:46:
07:f3:71:8a:c7:6a:6b:b5:f8:9d:ab:11:1d:d8:83:
6a:b6:b1:68:a6:d4:32:40:6c:9f:78:0d:48:b0:4f:
ce:44:13:62:6f:8f:18:00:97:56:71:88:2f:92:b3:
9a:47:be:10:fc:ba:54:79:c0:04:c1:d4:6c:67:34:
1b:70:a0:db:15:49:82:07:87:5b:c7:6a:29:48:8f:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:6A:63:7F:2B:37:6B:DD:B3:FC:07:74:8F:11:48:2E:20:9D:B1
X509v3 Authority Key Identifier:
keyid:1E:30:A6:22:62:DC:CB:21:A0:10:4B:34:ED:B8:2B:95:15:CA:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjCmImLcyyGgEEs07bgrlRXKzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f834ad-df0f-4505-9613-2a04d3923d22/1/HjCmImLcyyGgEEs07bgrlRXKzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:88:85:80:ec:93:da:47:73:32:83:24:ba:37:b3:7f:a5:61:
f1:bb:29:e4:77:86:9d:86:44:67:e7:db:c6:c1:68:77:bd:f3:
06:05:39:97:21:cf:f1:61:00:1c:53:0c:5c:13:22:a3:d2:45:
be:65:3a:32:87:06:a2:a1:e6:58:65:16:f0:8e:d2:6b:bb:8f:
e6:e7:78:c9:eb:a6:9d:59:c2:bf:87:e2:c2:ba:8f:aa:3f:c1:
8e:eb:9f:7e:f7:d0:3a:cb:83:57:71:fb:e0:31:ca:ff:60:15:
a9:b8:e0:a5:87:ee:fc:28:ce:a0:1f:ec:64:bd:92:f2:4d:8e:
44:85:6a:87:a7:8d:94:84:8d:bf:77:9e:1b:2d:f1:81:8e:ca:
70:c9:11:68:8c:9b:c2:51:a2:ba:75:fb:a2:2c:f3:97:07:97:
f8:e9:bd:7f:d1:25:3c:a8:7f:d0:de:0c:59:74:fa:6d:9c:84:
c3:5e:68:a7:33:c9:c4:14:d4:35:df:84:f6:3f:56:91:12:3c:
a4:a1:3a:a5:ec:42:6f:4c:98:96:f3:31:d2:dd:bb:39:86:40:
34:55:e6:22:ca:21:ca:bb:f0:a2:62:0d:0a:e5:16:19:8e:a5:
bb:55:18:d7:ce:99:2c:e9:61:38:7d:37:3e:62:a1:8e:ce:5e:
ac:13:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:11 2025 by rpki-client