Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: pS/mb4OlNiI9s2iFvLWWUO7mr2qycd29hJ6ITJ6yiJU=
Subject key identifier: 7A:3C:C1:B5:D7:F6:22:AA:4A:22:44:C1:1A:2C:EF:78:A8:08:C5:E4
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 019776E63655991BD484945AD67143EE5E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 0672
Signing time: Mon 16 Jun 2025 04:01:28 +0000
Manifest this update: Mon 16 Jun 2025 04:01:28 +0000
Manifest next update: Tue 17 Jun 2025 04:01:28 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: Q1CW6O9P9Ldmca3JiPU3kau705J1F+OXvWRv8ZHDVsc=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:36:55:99:1b:d4:84:94:5a:d6:71:43:ee:5e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Jun 16 04:01:28 2025 GMT
Not After : Jun 17 04:01:28 2025 GMT
Subject: CN=7a3cc1b5d7f622aa4a2244c11a2cef78a808c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:89:6c:bc:aa:31:2e:1a:9f:36:a3:36:8b:
d5:88:02:4d:e1:dc:83:4e:23:0c:ad:cc:97:91:b5:
7d:62:46:7e:dc:7a:8b:bf:52:e5:18:b9:13:3a:46:
ee:de:57:60:39:ff:93:1d:51:5d:6a:b4:66:de:c8:
e7:26:dd:20:f0:5e:21:f3:14:3e:db:fc:6c:df:59:
0c:36:52:0b:43:46:fb:77:65:97:93:d3:e1:c6:51:
e3:89:a3:b3:31:2a:ab:54:f9:33:da:2e:72:f4:ac:
2e:e6:b1:8c:8e:4d:8f:93:a5:44:44:95:ff:84:5c:
1b:a3:85:70:8c:31:f0:2d:38:62:64:23:a5:ad:9e:
bc:04:97:ce:83:53:cc:6f:5a:bb:fb:63:5a:20:44:
9a:6f:a5:13:ba:6a:ca:a9:27:4b:5e:02:6d:00:a2:
61:40:d5:0d:02:a6:3f:7a:36:29:af:ae:3b:3e:ee:
c1:24:d6:db:d1:55:79:0e:46:de:51:5e:b4:ad:19:
05:cb:ba:3d:d7:1f:1b:e8:9a:92:62:f1:64:82:7a:
fe:91:49:52:a8:71:2d:97:6d:ae:7d:2c:ca:09:e4:
2f:d8:45:88:14:1a:ac:ab:57:54:92:04:da:ab:7f:
8f:85:8a:97:37:17:08:76:49:7a:03:3e:6a:bb:8f:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:C1:B5:D7:F6:22:AA:4A:22:44:C1:1A:2C:EF:78:A8:08:C5:E4
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6b:80:55:63:9c:00:31:f1:3f:5c:aa:bc:63:fa:99:89:d7:
c3:7a:d9:53:2a:1a:2a:07:5c:c8:f1:42:30:78:7d:44:62:f5:
98:f4:ab:ed:cc:37:57:90:8c:cc:bd:32:bd:90:ce:e8:a1:f3:
a6:ea:d1:8e:87:f4:3b:8c:b3:65:f8:61:35:d2:1c:f4:16:2d:
a4:91:62:70:cf:e0:87:05:92:d9:45:6e:55:82:63:ba:69:0f:
83:76:b7:e6:b4:7b:12:77:bb:fb:4d:be:49:7f:21:34:c9:20:
ac:5e:f7:1f:05:fe:45:f8:9f:0b:de:bd:39:d7:71:e5:24:30:
3e:9d:d4:40:74:2f:79:e1:ab:f1:d4:f4:13:4d:59:96:09:89:
2a:dc:e6:e0:d9:69:bf:bc:01:1e:b9:63:a4:b7:63:96:79:db:
5c:d4:73:ed:68:d2:dc:e5:31:60:68:23:b4:97:68:cb:c0:fe:
c3:6e:8d:65:dd:dc:11:4a:22:b8:f1:d6:80:53:94:8b:01:8f:
17:b8:0b:e9:be:ce:9c:2f:45:11:a3:e6:da:2d:5a:af:10:00:
88:e1:d8:03:0e:30:e6:ae:4d:7d:48:ed:ca:bf:4d:0d:d8:0b:
bc:37:18:a1:46:65:da:27:63:ec:f0:dd:39:62:af:0d:a3:e4:
de:82:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:13:57 2025 by rpki-client