Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: AaHqF2Is7w8eTh9RI5D/Q+KWG/+cfVwps/V4iVJt6MA=
Subject key identifier: 13:24:3D:39:24:70:1A:25:60:E5:96:71:40:4F:86:78:5F:60:0C:AA
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 01976C987DBA0A6BC665C1F6C53C96A4D9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 101D
Signing time: Sat 14 Jun 2025 04:00:22 +0000
Manifest this update: Sat 14 Jun 2025 04:00:22 +0000
Manifest next update: Sun 15 Jun 2025 04:00:22 +0000
Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=)
2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: 1z//EHEyHYinETOSQNmhvUrzBmQoMLk36nsO4vQW8R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:7d:ba:0a:6b:c6:65:c1:f6:c5:3c:96:a4:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Jun 14 04:00:22 2025 GMT
Not After : Jun 15 04:00:22 2025 GMT
Subject: CN=13243d3924701a2560e59671404f86785f600caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:41:ca:e4:9a:41:0a:20:86:a5:75:6e:20:
b6:a2:a3:08:f2:f9:39:74:e1:0c:59:a4:dd:be:4f:
fe:5d:87:ee:85:95:33:5d:da:a8:46:cf:8c:53:d1:
76:e4:91:a6:4a:c4:99:47:72:89:a1:a5:30:c3:a0:
ad:3c:d2:00:6a:bd:81:fd:78:68:a1:62:c8:25:5e:
f4:8c:b7:a0:3f:be:1c:8b:e2:69:78:19:aa:2e:9c:
0b:b6:a5:bf:a3:64:49:49:17:86:2b:e3:07:99:dc:
1b:59:fa:63:92:6a:f1:69:43:3e:c0:ed:1c:e3:79:
db:a1:8f:2d:d5:ff:1b:08:cb:6c:f5:c9:e5:5c:6c:
89:cc:1e:c4:1f:02:10:e6:aa:72:28:71:6b:a4:4a:
57:a7:2f:ea:b1:fb:eb:c8:1a:11:75:62:06:d8:5f:
dd:96:d1:fe:70:5c:70:2d:ad:80:3b:30:0c:43:2c:
1b:bb:b1:09:0b:38:c6:e4:33:54:69:cf:cb:f8:31:
84:b8:46:30:68:67:10:5f:c2:fb:7e:03:e9:21:25:
92:e4:dd:70:73:08:1a:9a:bf:33:3d:01:ff:ac:ea:
d8:60:94:c5:de:fc:61:4d:f6:52:7b:ee:f6:96:5d:
98:1c:32:1a:df:30:02:80:10:e3:b3:f4:cd:e8:e0:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:3D:39:24:70:1A:25:60:E5:96:71:40:4F:86:78:5F:60:0C:AA
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2c:14:4c:94:b6:44:dc:26:5f:2e:6c:18:bc:a5:46:97:f2:
5f:2b:05:74:28:83:e4:16:58:30:6d:12:83:a3:98:7b:c4:ec:
4f:09:70:aa:6c:eb:84:9c:5e:5d:91:c7:47:da:5a:78:bc:ef:
5a:71:54:4d:54:57:d2:08:13:75:ec:cf:e6:95:06:9f:37:9c:
e0:a7:73:ed:bf:72:a4:c6:9f:3a:c1:15:ea:26:13:c3:e4:bf:
d8:66:14:a5:c7:f0:ff:6d:6f:a5:dd:be:b6:69:ee:cf:70:72:
79:9e:1f:3c:2a:ab:e4:e2:d3:b0:1f:38:85:c3:5b:f0:d1:8a:
0d:ff:0d:d9:09:e8:82:da:3b:d0:03:4b:cf:64:80:eb:3e:fb:
f9:c8:4c:65:41:83:72:44:75:3f:6f:28:ba:83:83:ad:f9:b8:
3d:b4:5a:19:5a:8d:55:29:4a:32:37:f7:74:45:89:f5:92:89:
e3:e2:53:c8:a1:c6:ef:3a:61:68:42:c0:08:9d:7f:13:50:ae:
a2:4c:03:5b:95:74:9d:6a:d8:70:f6:01:de:35:27:11:11:b4:
9f:22:1a:c7:7e:83:e4:83:01:c9:45:0e:8f:8a:2d:61:4a:13:
b6:47:9c:7b:e1:28:a4:36:7d:75:e0:b1:a8:a8:7b:d1:c2:91:
95:97:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:30 2025 by rpki-client