Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: 0TRfKUz+fbT8Tk8sb2u6hDigBQdCT1cBTQ1nKlUdYXI=
Subject key identifier: 88:1B:34:C7:73:4C:4E:95:23:C9:C5:A1:1A:3E:3B:1D:3D:AD:75:9C
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 01976C61E4E51A807204768F6290879B930E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 03:00:44 +0000
Manifest this update: Sat 14 Jun 2025 03:00:44 +0000
Manifest next update: Sun 15 Jun 2025 03:00:44 +0000
Files and hashes: 1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: p/OmHFKAmWlYUw+suD2DN0GBUES1MifqNDiZ69jxxlE=)
2: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:e4:e5:1a:80:72:04:76:8f:62:90:87:9b:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Jun 14 03:00:44 2025 GMT
Not After : Jun 15 03:00:44 2025 GMT
Subject: CN=881b34c7734c4e9523c9c5a11a3e3b1d3dad759c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:2b:41:6b:2d:61:f7:ef:ba:cb:43:86:83:
1a:ab:6f:9c:80:37:12:6c:13:df:da:86:8b:7a:2b:
7a:ce:6b:e3:ae:2a:07:db:f9:21:8a:00:31:ce:39:
02:ce:13:9c:16:19:2b:9f:ea:1f:fb:9a:c1:eb:60:
59:2e:cf:39:f1:21:2a:2a:3c:d7:9e:57:7e:aa:38:
d3:e3:53:6f:6b:9c:e2:35:7c:b0:87:e2:56:7d:fc:
e7:64:f8:ff:59:a9:28:21:8c:28:72:b2:62:15:00:
78:97:a3:e7:7e:42:92:42:d4:46:95:43:32:c2:3e:
1f:75:0f:78:f6:08:28:26:68:5d:ea:3d:3b:c4:b8:
dd:a2:be:93:73:25:81:15:b9:b3:1f:b6:82:34:3e:
14:6e:68:16:e1:83:50:e0:cf:61:de:41:ef:a8:cc:
3e:40:b3:d2:21:92:cf:58:9f:4c:f9:bc:52:e6:0d:
b9:12:9e:e0:13:d9:d9:55:76:c6:39:3e:07:81:bd:
8d:6b:33:58:9d:fd:93:a2:7b:a1:22:76:42:e6:89:
3f:90:e7:cb:af:4a:3a:1f:73:97:5c:c8:10:e5:cd:
6e:16:cf:2b:24:3b:f5:a1:dc:23:ab:fb:dc:ac:08:
94:e4:20:c6:a3:32:ce:0c:e1:98:d7:b4:88:2c:26:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:34:C7:73:4C:4E:95:23:C9:C5:A1:1A:3E:3B:1D:3D:AD:75:9C
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:17:03:ed:94:71:53:2d:0f:57:3b:79:52:9b:29:c1:5f:e0:
41:ee:ce:d1:c4:01:56:39:81:bc:15:dd:ee:24:ce:43:0b:25:
53:69:3e:c4:95:37:6d:96:e1:d3:ce:ab:49:46:be:bd:ef:7b:
f4:31:aa:84:c4:32:f5:d6:d5:b9:61:ea:30:17:0d:c2:ee:13:
4f:28:9c:26:3c:00:29:37:31:cb:5c:92:68:03:84:9b:af:28:
3a:b2:c4:4c:c9:b7:45:37:cc:cb:b0:55:74:8c:e4:48:84:e3:
f7:8b:f6:0d:42:06:e5:65:d3:13:40:cb:b5:03:fb:2a:07:b3:
ca:c2:d9:d4:68:2d:1f:07:d8:9e:58:7a:49:da:3c:35:e7:ea:
8d:22:b5:7b:8e:6f:08:be:05:5d:1d:d2:17:6e:52:8d:e3:c6:
1f:d6:e2:62:e2:98:a2:24:cf:f8:ab:fe:6f:04:86:68:05:71:
3b:4b:b1:2e:a7:55:06:d2:ae:19:45:ce:fb:bd:67:fa:f1:61:
2c:69:11:c3:38:ef:8a:68:c4:17:0a:83:c4:54:bc:b1:3e:bf:
18:e9:5e:cc:08:64:f5:b4:f3:71:b1:3e:52:4b:cc:c9:2b:f7:
0a:e1:73:f2:61:58:b5:98:0d:6b:19:fe:a9:6e:9c:15:2b:4d:
e8:4c:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:28:43 2025 by rpki-client