Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: /o+Y4YWCG/7IM3CFMUckW5TIjWvCSF0EGUS4z8HaRpY=
Subject key identifier: CC:A3:74:65:98:FF:83:FC:A0:77:4C:0E:65:CC:6F:8E:20:F5:1E:63
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 0197700780D5FA1F2FF456143368C28AD736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 14AA
Signing time: Sat 14 Jun 2025 20:00:29 +0000
Manifest this update: Sat 14 Jun 2025 20:00:29 +0000
Manifest next update: Sun 15 Jun 2025 20:00:29 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: 7p3bshSBfl7JZFvo3V1B0hB4k14.roa (hash: cbZ+dbslEUIQt31Sa26Aju1jHZ6F6X9W/yVOC5Hx/IY=)
3: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: UBCdBwH/5Rb6RNzrGqLsHiG0VTXxqGGzNnudXyaGvTE=)
4: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:80:d5:fa:1f:2f:f4:56:14:33:68:c2:8a:d7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Jun 14 20:00:29 2025 GMT
Not After : Jun 15 20:00:29 2025 GMT
Subject: CN=cca3746598ff83fca0774c0e65cc6f8e20f51e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:2d:68:c1:ef:b4:de:63:01:b7:2f:fb:83:
20:ae:4c:8c:43:20:de:99:15:83:4c:3e:85:4e:96:
6f:8d:5d:79:2d:2f:e8:ae:3e:dc:fd:48:bd:9f:99:
34:f6:00:f9:87:5f:a0:e5:85:85:66:93:a0:a4:1b:
e4:36:7c:db:13:1b:2e:98:9c:84:8f:b3:1d:09:d3:
29:38:ba:cb:01:46:ab:88:35:20:e1:94:35:67:9a:
e5:b9:2b:bb:0d:73:d8:ac:53:90:d3:ab:70:d4:4d:
8f:bc:d5:0f:85:7f:57:08:fc:e1:98:ef:cf:23:dd:
c6:db:c4:ba:d1:66:d6:f2:e8:7b:d3:3e:82:7f:e0:
4a:5b:ee:59:3b:84:c7:b6:68:8f:14:5c:f7:20:b8:
01:c9:42:68:ef:33:d4:61:60:53:4e:96:54:c3:cc:
f5:9d:cc:86:76:e7:ef:8e:70:bc:9c:ee:61:ee:b5:
21:0a:44:9c:75:77:98:c7:11:47:9e:fd:83:49:38:
02:c5:36:c4:63:f7:de:a9:c7:6b:04:79:9d:45:85:
4e:1e:cb:8d:45:c2:be:ea:60:78:e8:d1:4c:15:eb:
4b:53:37:2e:70:bb:e9:1f:55:f1:4c:f3:45:20:cb:
b3:43:50:a9:53:9e:e6:50:92:61:ab:c4:ac:72:d7:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A3:74:65:98:FF:83:FC:A0:77:4C:0E:65:CC:6F:8E:20:F5:1E:63
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:f9:2d:c7:9a:56:f2:8e:ba:9b:66:f3:da:68:7c:d0:ce:
2c:9b:8d:da:00:f4:55:90:2a:4e:ff:e0:a8:80:b2:e1:76:3c:
ee:e1:90:d1:bf:c3:3b:e7:be:6d:df:7b:1d:25:f7:21:98:ed:
bb:b5:2c:c3:54:8f:44:87:ca:2b:a7:d1:38:0b:30:e9:b4:82:
fe:26:e6:bb:38:15:5d:a5:c4:4e:77:8c:6b:81:f6:95:90:64:
ca:01:79:1c:1f:11:92:cb:6c:c5:55:94:0a:96:0a:ad:c7:79:
2a:33:5b:e8:d4:85:60:c3:b0:87:36:c9:67:80:c8:4a:8d:a0:
69:d0:00:d2:45:55:1b:93:f1:b4:47:65:f1:72:24:57:de:56:
d7:bd:97:11:df:af:72:49:ee:a5:4f:ba:17:9c:31:c0:f7:60:
25:17:7a:42:6b:c4:67:de:10:af:14:f7:6e:1d:ae:1e:e9:51:
62:82:32:91:2d:4c:89:66:a3:fb:00:2b:3a:bb:73:75:bb:d4:
6b:f2:c9:25:96:2c:c4:bc:ef:d4:8a:c6:2a:7c:d0:cb:fe:ab:
1f:c0:7d:a5:ba:de:cc:36:d2:62:cc:f9:9a:1d:cf:08:19:2f:
9c:03:e5:e2:38:75:ea:34:08:73:3d:40:85:cb:02:67:df:0a:
d2:4b:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:21:00 2025 by rpki-client