Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json)
Hash identifier: 2JceQvz71XfgzZRx/XSTNOWnjsGhYvoxjmkjf/LJfew=
Subject key identifier: EB:66:05:29:5F:03:42:8E:7C:BA:EE:88:1E:24:F8:CC:32:EF:09:9A
Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Certificate serial: 019748C32708DCAA15F2BDDD5529A29AFA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 05:00:38 +0000
Manifest this update: Sat 07 Jun 2025 05:00:38 +0000
Manifest next update: Sun 08 Jun 2025 05:00:38 +0000
Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: ECOo2XVAjJ4j8b0EnMM2ty4F4cRKlbAEJ5yDfC+wyJM=)
2: zraU6JUbMiPLRortKHmXEnAo1OE.roa (hash: HMXC6yKtO8g8Ym91NRBLoqlps2ZqE/0U22YJBVZue4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:27:08:dc:aa:15:f2:bd:dd:55:29:a2:9a:fa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Validity
Not Before: Jun 7 05:00:38 2025 GMT
Not After : Jun 8 05:00:38 2025 GMT
Subject: CN=eb6605295f03428e7cbaee881e24f8cc32ef099a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:02:82:e1:25:2d:d4:6c:36:63:90:c0:94:
c2:a8:65:87:61:e9:ea:61:b3:cf:5a:47:53:d1:02:
58:be:0e:6f:07:e2:e1:3a:0d:17:22:c0:71:6e:9e:
72:9a:98:f4:85:e5:49:f1:b7:2e:37:b8:93:19:c2:
98:66:7d:f8:ec:15:2f:4b:d7:74:35:bd:ef:bf:d5:
e8:01:73:e4:7b:c2:e6:5c:e6:ee:e5:1c:2e:b7:c5:
60:31:90:ae:e2:9c:45:70:35:7c:b6:e3:6c:44:89:
ba:8c:5c:1c:5b:fb:1a:61:76:1e:6b:f3:e0:39:3e:
19:ea:01:69:7c:40:9a:78:eb:1b:df:93:66:7b:db:
8b:1a:f9:42:f3:c6:24:95:ed:70:20:6d:91:f0:6f:
20:10:9c:c6:5e:fa:b9:a4:bd:68:35:52:07:59:03:
55:e1:7f:6b:22:f0:ee:f9:f7:dd:44:19:c6:ea:1d:
5c:8a:3a:f0:21:31:fe:b4:59:85:5d:97:7f:9a:e7:
3c:32:44:af:29:99:c6:d5:2e:e9:b6:48:eb:92:d3:
a4:ad:26:37:19:fb:83:d4:03:7d:a2:26:4a:be:ae:
7b:89:4d:a2:eb:1e:62:e8:2b:5c:cc:62:09:45:98:
26:4f:e1:d3:e0:98:60:02:82:0e:9b:e6:d0:d4:84:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:66:05:29:5F:03:42:8E:7C:BA:EE:88:1E:24:F8:CC:32:EF:09:9A
X509v3 Authority Key Identifier:
keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:11:92:e0:fb:d8:9f:40:cc:ff:3e:c6:ea:08:cb:67:8d:f8:
be:70:40:58:20:91:3c:b3:17:ec:a7:f0:66:47:6d:37:4b:9b:
69:11:f1:b7:ce:4c:ae:ee:37:b4:bd:0d:24:e7:ab:8c:54:ba:
2b:ea:6e:b2:de:68:a8:59:3e:99:81:aa:41:b3:e1:cd:da:ac:
31:17:44:04:e9:c4:0a:dc:2d:ed:fe:07:88:bd:bf:9f:f7:fa:
be:ed:49:45:24:0e:6f:bd:de:94:54:74:a4:0a:c6:30:9b:0f:
c8:84:be:81:16:13:42:f6:26:bc:84:22:e4:7c:e9:f5:86:b9:
04:d0:24:2a:bb:a5:2e:b8:07:d0:c4:ce:e8:60:65:df:b3:aa:
47:68:d9:eb:33:38:e7:1e:08:22:83:99:b9:f1:80:79:8a:b9:
f2:58:45:f6:2d:81:c7:68:5e:54:f5:aa:3a:aa:9f:4e:6d:02:
6c:c9:10:a0:54:a8:65:4b:bc:29:1d:50:8e:0e:e5:8b:e7:2b:
f3:7e:1d:46:a9:c2:a3:6c:48:13:f9:8b:eb:77:e9:16:bd:92:
3d:c0:20:ba:e0:50:80:16:48:c1:88:4c:9e:97:1e:b9:85:60:
41:7a:e7:e4:fb:c1:4b:31:21:55:52:28:6d:78:73:5d:a4:22:
6a:bc:ac:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwycI3KoV8r3dVSmimvoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZDNjMzA5MzliOTA2YTQ1MTVhMWM2NWMwODgzNjgyOWI2
YTMyODkwHhcNMjUwNjA3MDUwMDM4WhcNMjUwNjA4MDUwMDM4WjAzMTEwLwYDVQQD
EyhlYjY2MDUyOTVmMDM0MjhlN2NiYWVlODgxZTI0ZjhjYzMyZWYwOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MACguElLdRsNmOQwJTCqGWHYenq
YbPPWkdT0QJYvg5vB+LhOg0XIsBxbp5ympj0heVJ8bcuN7iTGcKYZn347BUvS9d0
Nb3vv9XoAXPke8LmXObu5Rwut8VgMZCu4pxFcDV8tuNsRIm6jFwcW/saYXYea/Pg
OT4Z6gFpfECaeOsb35Nme9uLGvlC88Ykle1wIG2R8G8gEJzGXvq5pL1oNVIHWQNV
4X9rIvDu+ffdRBnG6h1cijrwITH+tFmFXZd/muc8MkSvKZnG1S7ptkjrktOkrSY3
GfuD1AN9oiZKvq57iU2i6x5i6CtczGIJRZgmT+HT4JhgAoIOm+bQ1ISoDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtmBSlfA0KOfLruiB4k+Mwy7wmaMB8GA1UdIwQY
MBaAFBzTwwk5uQakUVocZcCINoKbajKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQt
MGZmODZlZjk1ZTBmLzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQtMGZmODZlZjk1ZTBm
LzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhGS4PvY
n0DM/z7G6gjLZ434vnBAWCCRPLMX7KfwZkdtN0ubaRHxt85Mru43tL0NJOerjFS6
K+pust5oqFk+mYGqQbPhzdqsMRdEBOnECtwt7f4HiL2/n/f6vu1JRSQOb73elFR0
pArGMJsPyIS+gRYTQvYmvIQi5Hzp9Ya5BNAkKrulLrgH0MTO6GBl37OqR2jZ6zM4
5x4IIoOZufGAeYq58lhF9i2Bx2heVPWqOqqfTm0CbMkQoFSoZUu8KR1Qjg7li+cr
834dRqnCo2xIE/mL63fpFr2SPcAguuBQgBZIwYhMnpceuYVgQXrn5PvBSzEhVVIo
bXhzXaQiaryshQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:20 2025 by rpki-client