Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: H63jsyCZ6iiH11UGejOIJkjQ827yfj095hdeZUmsyus=
Subject key identifier: 6A:8D:70:CD:17:70:9C:92:68:48:52:92:69:C7:80:E9:B4:BD:40:93
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 0197488D326787C8AA1259F98E7BA35E8BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0E87
Signing time: Sat 07 Jun 2025 04:01:42 +0000
Manifest this update: Sat 07 Jun 2025 04:01:42 +0000
Manifest next update: Sun 08 Jun 2025 04:01:42 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: OJLDluOUYM1t54+3tVg5nGyjx62EBR/M5gXggtXC7GY=)
2: nWIGQEEDzaoVvT_y5hPxRiP1qn8.roa (hash: uGDWeypcq1B/eKXj8B8fn9FgOmQqtHY/Hs+n7XduT00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:32:67:87:c8:aa:12:59:f9:8e:7b:a3:5e:8b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Jun 7 04:01:42 2025 GMT
Not After : Jun 8 04:01:42 2025 GMT
Subject: CN=6a8d70cd17709c926848529269c780e9b4bd4093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:79:8a:7d:ac:b4:75:4a:49:4a:b8:49:b4:
c1:af:27:60:c6:20:86:5d:be:3c:9e:f4:29:0f:53:
fd:43:f3:93:62:e8:4f:83:16:06:fb:39:21:f5:97:
9a:8b:72:21:a9:57:fe:52:8b:8a:8f:dc:f5:eb:78:
1b:37:bc:94:52:e0:a6:cb:06:6c:18:31:b2:18:48:
67:68:19:dc:26:b7:69:d7:ff:0f:4a:3d:bc:f9:51:
ea:18:9c:87:89:bf:9a:49:cb:6f:51:77:c0:8d:07:
bf:13:a3:8b:ce:10:8c:19:c2:fa:5f:b5:63:79:03:
e8:17:0e:b0:25:07:3a:44:8f:c7:5a:67:f8:2c:07:
5a:8d:ad:ea:bd:66:f0:97:21:84:e9:1a:56:e3:d6:
65:e0:4a:85:8d:4a:b4:89:e9:69:3d:23:5a:bc:e7:
f1:3f:7a:d6:11:20:d5:f6:03:97:fd:3a:35:2b:87:
2a:b7:93:87:8e:ac:13:9f:39:8a:ee:b1:19:d1:9d:
e0:bf:e7:4e:b2:9c:40:4a:f4:ca:cb:76:64:a0:0e:
4a:18:4e:48:79:5d:04:10:06:68:26:63:a4:42:4f:
ca:7d:31:01:b4:91:d7:37:e7:16:09:3c:e9:f5:31:
c6:e8:17:74:58:7d:af:3b:46:b6:f6:54:e5:9b:9d:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8D:70:CD:17:70:9C:92:68:48:52:92:69:C7:80:E9:B4:BD:40:93
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4d:71:24:95:6a:e4:2f:e6:a2:57:24:24:b3:97:67:0c:d2:
b4:fd:e7:bf:00:ca:2a:ec:69:ff:4d:83:cc:56:d0:d3:63:2b:
7f:a2:db:7b:33:09:d9:31:a3:f0:4b:e6:6c:b9:83:91:27:86:
d0:53:63:ce:c9:e2:83:1e:d6:c5:1c:2f:fa:4b:dc:f9:de:c8:
4e:d5:9c:e6:a1:50:42:3d:fb:91:0f:7c:d2:8d:78:50:03:a3:
32:7c:cc:45:d1:b4:0d:94:94:c9:36:02:e2:f2:2a:06:d1:e3:
db:4a:cf:50:ca:cd:79:fa:47:d4:93:e3:9d:3e:e2:44:cc:21:
54:ed:db:d6:60:47:8f:4f:43:b4:89:a7:7d:2b:f4:04:67:c5:
80:b9:ab:de:c0:d5:f9:da:25:ff:44:f9:64:27:bb:74:e1:af:
de:7a:f7:ab:d6:df:dc:01:43:f5:d7:b7:48:7f:2e:40:5b:7f:
02:a0:3e:4c:5c:62:49:9a:e7:f5:9f:4d:40:6b:16:22:ad:65:
d0:40:b5:57:33:87:15:30:8c:84:04:fc:ae:1d:6a:6e:1f:f2:
65:cf:e1:92:e3:20:db:b9:fe:da:20:b3:59:3d:cc:5a:39:05:
c0:28:e2:fe:10:6b:e7:8c:4e:eb:c3:b1:12:7b:a1:17:d5:ef:
8d:3a:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:33 2025 by rpki-client