Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: cuId+IwjeItQGv0bWd9lHoOWGdOo0Bh3Nm/3nGAqOD0=
Subject key identifier: A7:63:A0:0F:D4:0C:EF:C2:55:9A:57:2A:E0:9E:9D:35:D5:CA:DF:F7
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 0197838E7E226657D74DF6DDFA167CCAA38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 15:00:43 +0000
Manifest this update: Wed 18 Jun 2025 15:00:43 +0000
Manifest next update: Thu 19 Jun 2025 15:00:43 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: w7y2C/rRfxd9eSQNT0HY7lmPpt757oN+eajinu1WPUE=)
2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:7e:22:66:57:d7:4d:f6:dd:fa:16:7c:ca:a3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jun 18 15:00:43 2025 GMT
Not After : Jun 19 15:00:43 2025 GMT
Subject: CN=a763a00fd40cefc2559a572ae09e9d35d5cadff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:fd:a2:5d:43:73:91:f1:41:70:bd:2e:88:
91:5c:c7:39:ff:9d:11:07:e7:d0:5c:91:e0:ea:58:
6a:7f:fa:a2:43:9c:d9:92:b0:11:43:b1:c0:80:01:
3a:11:b3:9d:21:b8:33:ea:c5:b7:8d:fa:c8:35:f5:
36:bf:3f:02:df:13:b2:e9:6f:29:78:a8:bf:6f:3e:
37:58:1a:49:a7:52:18:19:17:2b:bc:dd:8d:38:05:
18:4c:77:7e:1d:a1:9d:89:13:24:09:2c:e0:68:27:
05:ce:39:db:1d:67:db:b8:e3:10:03:ef:f9:ac:d3:
a0:c3:15:24:d7:ca:1b:f9:c5:95:2c:69:8f:cb:4e:
00:c2:01:be:d9:fa:57:fe:1c:45:9e:10:7f:70:c0:
14:5c:1d:c7:92:c4:f9:81:8b:b6:70:3f:f1:15:67:
6f:34:f1:0e:9a:d9:f4:d8:f0:83:f4:0a:89:c1:a9:
93:7f:1f:6f:df:de:29:44:b2:ac:e7:bc:19:80:94:
12:b3:ca:a3:3d:29:e3:9f:2d:bc:88:ea:08:b3:60:
10:ca:5e:cd:9d:a4:65:50:8b:35:2f:99:bf:e8:6f:
6e:8b:7a:cd:03:9d:d6:09:b7:cf:a4:e3:54:03:05:
3e:91:3b:11:6a:7b:1f:cc:e9:70:2d:62:ac:1f:a3:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:63:A0:0F:D4:0C:EF:C2:55:9A:57:2A:E0:9E:9D:35:D5:CA:DF:F7
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:cd:1d:11:98:fa:3b:0f:54:d4:9d:fc:4b:4b:7c:8f:9c:64:
e6:e3:8d:99:fc:6c:c3:de:3d:3d:ce:91:86:58:8b:c4:46:97:
8e:8a:18:82:99:59:a3:20:4d:d5:ee:24:63:68:77:f5:48:13:
46:f3:fa:03:f2:b2:14:45:b2:38:8f:9d:c3:e4:cd:92:26:73:
fe:09:ec:d8:cc:92:bd:3d:99:1e:26:65:4b:59:f6:7e:4b:39:
0f:0b:22:21:f5:d9:0e:bc:66:f9:76:f0:72:e5:f0:59:66:62:
1b:27:a9:8c:a8:8c:c0:fe:39:23:7c:cc:2a:46:27:22:05:b2:
dd:3b:11:4f:d7:64:61:af:b0:fc:4e:c7:28:33:5b:23:e4:8c:
12:4b:af:cf:06:54:5c:92:92:6d:35:04:2b:36:81:4b:93:35:
49:49:cd:03:3c:4a:0f:ab:4a:77:04:ff:b1:80:37:9d:4b:13:
79:97:72:4c:26:cb:47:9f:bf:1d:2d:16:5b:6d:c3:d8:cc:a9:
6f:7e:41:54:83:48:84:a0:31:74:fa:5b:79:ed:0d:9e:3b:52:
f6:68:67:4d:cb:d1:6f:ea:02:25:8d:96:6b:19:e5:ed:81:d4:
51:1c:7a:58:75:1c:af:ae:88:13:12:ba:bd:2c:da:55:1c:53:
76:62:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:09:35 2025 by rpki-client