
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: f/GVR7lOJY9HeVRrbQ85Onttp9lrRZTPrpfECqhJ7Dg=
Subject key identifier: 17:12:23:34:35:52:D7:F3:57:CE:86:13:EE:C8:1B:D2:D4:2D:73:45
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 01976BF422724A41AA3479CC9A3F2FB980DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 01:00:51 +0000
Manifest this update: Sat 14 Jun 2025 01:00:51 +0000
Manifest next update: Sun 15 Jun 2025 01:00:51 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: MrYBI+h5uVHkCQUSf2TLpALy95LSUr1Gvk01DTaX5sM=)
2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:22:72:4a:41:aa:34:79:cc:9a:3f:2f:b9:80:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Jun 14 01:00:51 2025 GMT
Not After : Jun 15 01:00:51 2025 GMT
Subject: CN=171223343552d7f357ce8613eec81bd2d42d7345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bd:f4:3b:8e:38:47:6a:84:cb:26:ae:70:5a:
51:d1:73:b9:cf:12:cb:c4:36:26:21:1e:d3:f7:46:
a6:28:0f:29:b5:c3:2c:bf:54:05:e0:b5:5c:5d:3d:
ba:75:6f:ee:f3:6b:b1:c1:43:4c:63:4b:55:10:31:
c0:fe:19:7c:b5:59:5e:95:c2:c1:36:e6:47:84:86:
b8:37:6c:f9:2b:67:d7:d9:8f:e9:e3:29:f8:98:fa:
05:b8:42:7f:42:d4:3c:09:eb:00:8c:b9:fd:7b:1b:
ab:6c:8f:dc:08:5c:c5:8a:8a:16:3c:d9:16:32:2a:
f9:fb:0e:cc:47:84:1d:48:44:47:b0:5e:f1:c2:9f:
dc:6d:56:ef:a5:8e:d8:cc:1e:ca:f4:16:e6:fd:82:
f3:46:9f:4f:c2:23:76:cd:a5:c0:ca:5a:a2:b9:c0:
00:de:3c:93:b5:cb:e5:41:b2:7f:67:2d:24:b5:d4:
4f:a8:f3:8c:f3:2b:28:a7:07:f1:52:7d:0e:b4:18:
1c:d1:cc:2c:90:4b:03:36:98:1c:5b:6e:b6:03:91:
f0:ad:be:72:ca:a4:a0:f5:25:19:22:0c:41:52:77:
99:08:a2:b2:e3:3f:21:c5:e3:fd:ab:a0:e3:a9:3f:
69:4c:66:0f:2f:af:2c:a0:6f:dc:49:d7:65:b4:a7:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:23:34:35:52:D7:F3:57:CE:86:13:EE:C8:1B:D2:D4:2D:73:45
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c0:4e:f3:58:cb:b9:f5:1b:3e:ea:f1:19:e6:ab:ae:18:b1:
39:8c:6f:91:f7:7f:b4:b6:d0:c9:d9:17:22:8c:c4:28:4d:0b:
17:29:46:cc:f3:5a:f1:16:2c:a2:98:cf:b0:08:95:f2:71:3e:
c7:e4:61:ff:f3:14:54:2f:8a:9f:89:5d:99:d7:9c:32:d9:05:
8f:b1:9d:ab:7a:6f:34:6b:9d:5b:d4:59:dc:7c:f7:7e:48:b8:
23:c0:c5:fe:54:16:cb:c6:2a:78:b1:b2:af:92:09:ba:39:00:
b9:1f:e5:bb:32:fe:41:04:97:7d:cb:72:f8:04:96:34:ca:ec:
bc:91:17:76:c8:37:0a:24:42:76:27:a8:b7:dc:9d:60:55:32:
c7:82:d8:6f:8f:33:7a:0e:8f:27:c0:0b:d9:3b:dd:44:b8:71:
13:cb:d4:22:18:79:25:aa:53:bd:41:58:03:39:12:54:57:da:
0a:ee:a6:a4:94:15:56:83:9a:fa:f1:f4:74:ae:67:16:98:09:
40:8f:6c:40:e6:a1:bc:8d:fe:13:a2:bd:d8:a8:b4:b9:ca:c8:
4f:59:89:3c:4e:12:14:a0:f9:67:12:72:98:d0:8d:8f:9d:2e:
67:c2:81:9b:14:d0:e9:35:4f:cd:e8:48:3d:a0:b1:f6:54:09:
57:ad:58:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:30 2025 by rpki-client