Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier: MYpp4ZGh+ESMp5QE/gjOvdnz6wsYQaNM7LCXqxfdbMw=
Subject key identifier: 49:45:92:BC:04:99:3E:03:76:B1:69:A8:6B:AF:E5:EC:0B:25:81:21
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial: 019747429D523CF8F1B199F64A5C4A9BCF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 22:00:37 +0000
Manifest this update: Fri 06 Jun 2025 22:00:37 +0000
Manifest next update: Sat 07 Jun 2025 22:00:37 +0000
Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: 7K8eVgabpivBEsjaMa1jBaQwrVbzM5Ku+VfaUhEtCp0=)
2: ZFvHbKMASPTw38lOs9oWeuw1U-4.roa (hash: HZhplikQvG33rAVAtLNyD/3IfM/BXxh9qsmuRDaoo/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:9d:52:3c:f8:f1:b1:99:f6:4a:5c:4a:9b:cf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Validity
Not Before: Jun 6 22:00:37 2025 GMT
Not After : Jun 7 22:00:37 2025 GMT
Subject: CN=494592bc04993e0376b169a86bafe5ec0b258121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:97:ae:5c:80:c5:72:d7:5e:49:ff:7c:66:
41:6c:ba:70:7a:08:f1:79:2e:00:36:ed:30:80:61:
76:3f:f0:ad:59:81:24:05:6a:80:26:b7:15:f2:25:
f7:ae:f7:c3:43:33:84:25:dc:b0:09:cb:fd:21:66:
f4:f2:b0:a3:0e:54:64:f9:f1:a9:e0:e9:73:b8:3c:
a5:47:f9:31:0e:6e:7c:d6:66:8b:8f:4b:1a:63:1c:
a5:03:05:8a:97:53:d4:98:5f:aa:40:f2:74:85:ae:
11:55:20:fa:1c:e5:c1:63:f9:96:89:0e:df:f3:34:
06:b1:4b:71:d7:23:a3:22:77:00:0a:30:98:8d:8a:
fa:a5:09:93:35:04:5b:b9:cb:fc:b0:f8:d2:00:78:
8f:97:11:ff:5f:97:5d:8c:42:c0:b4:2c:04:ec:11:
fb:f9:fb:6c:18:65:4e:f1:7f:70:9b:56:0b:cd:ab:
50:2b:c6:ab:d7:51:04:af:ce:93:81:1e:ec:78:e7:
a9:c4:00:16:b1:f0:77:25:31:64:3e:42:ee:f2:ca:
04:79:31:57:fc:44:5d:a7:db:b5:7e:4f:30:7e:ef:
cf:2a:10:05:8c:6a:96:0f:84:03:40:c0:7d:49:82:
c4:0a:4c:f8:68:e4:24:5a:0a:02:ee:31:0d:5e:94:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:92:BC:04:99:3E:03:76:B1:69:A8:6B:AF:E5:EC:0B:25:81:21
X509v3 Authority Key Identifier:
keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:57:3c:91:47:d5:6f:3c:15:58:b9:39:76:f0:49:3e:f7:64:
38:b0:d4:59:da:53:a0:70:87:06:72:48:82:88:ed:06:8a:98:
b1:74:f3:61:99:ab:5f:62:b4:7e:9a:88:f1:e7:08:39:54:f4:
76:1e:4d:01:5b:c3:07:07:5a:9c:94:8c:24:15:12:fc:aa:cd:
27:67:b4:63:1d:33:84:45:b0:da:d0:32:c5:85:3f:26:f8:14:
9b:0d:7a:65:c4:c5:5c:e0:37:cf:0a:6c:85:22:9d:f7:48:20:
8d:33:0d:d0:25:dc:3a:f0:91:3e:75:e8:8e:57:ce:bc:0b:1b:
bb:48:05:ed:ac:69:c8:ea:44:a7:a3:b8:69:87:99:9b:94:19:
15:9f:d7:b5:8a:e7:4d:ca:50:67:e5:d9:1c:1f:19:01:35:12:
e9:c0:d8:52:13:26:46:ba:7c:69:77:a4:7d:59:a9:56:d9:e0:
83:95:b1:84:06:b5:31:0a:29:a9:75:7c:f8:1a:0d:e7:66:d7:
32:23:25:45:d6:68:38:a7:13:d2:72:02:5e:b2:c5:9f:50:50:
7d:0f:c0:08:66:50:bb:d5:3c:0e:a1:d1:14:e3:94:2c:85:a2:
c5:14:30:8f:c5:52:e2:02:6e:99:33:b5:ac:ea:1e:e3:a3:ef:
c4:a9:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:44 2025 by rpki-client