Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: wDvn2pp1F6PRDC361lgvUhEOkhCHb02qiv2pRPXCLm8=
Subject key identifier: 2B:01:A5:C1:50:66:61:0A:EF:DB:BF:0D:C9:2D:E8:02:BB:5F:E5:B8
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 019769CEA6C8DE050E7608B30D729204DD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 15:00:40 +0000
Manifest this update: Fri 13 Jun 2025 15:00:40 +0000
Manifest next update: Sat 14 Jun 2025 15:00:40 +0000
Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=)
2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: P5DYheg+Hg6S1JQGBEERVzOD3MOMrtq8VDFDI9+HNnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:a6:c8:de:05:0e:76:08:b3:0d:72:92:04:dd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Jun 13 15:00:40 2025 GMT
Not After : Jun 14 15:00:40 2025 GMT
Subject: CN=2b01a5c15066610aefdbbf0dc92de802bb5fe5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:75:de:c3:f6:ad:e3:23:b3:cf:7c:13:11:
cb:20:15:1d:71:4d:ca:dd:07:ab:7a:28:ca:d6:18:
f0:cc:20:6a:32:58:f7:45:2e:23:2a:b1:96:ef:fe:
61:59:be:28:e8:bd:e2:e1:a2:37:ef:6a:31:1b:dd:
9c:2c:8e:c8:b2:be:f7:a1:2d:d3:68:4b:bc:cf:55:
45:79:27:c9:b5:51:6c:0a:e2:bc:f4:99:58:cd:19:
61:17:97:d5:e5:43:17:7b:f9:4d:72:11:82:76:9a:
0b:6a:13:d0:4a:6d:dc:53:48:cb:b4:e4:d9:2c:2e:
d5:b9:70:9b:3d:d2:32:92:31:ab:30:c5:4e:f8:58:
c8:bb:ae:26:52:95:15:d7:b0:db:7e:f2:08:bc:91:
c9:28:24:01:b7:62:48:5e:76:4f:72:ad:50:5a:3e:
0e:a7:72:7b:64:d2:21:16:e8:c0:d7:b8:6b:82:77:
a4:51:ce:c1:52:e9:54:c7:63:a9:53:06:e7:d4:ed:
76:49:55:62:82:a1:6d:33:b6:88:6b:dd:b6:2c:90:
8b:b8:35:92:a2:43:8c:f5:b1:fb:9b:93:be:a0:d1:
1d:ea:5f:6e:ce:c9:71:f6:5d:f8:96:bd:52:f4:be:
21:b8:73:af:b6:9f:8d:77:ec:05:fc:52:58:f0:28:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:A5:C1:50:66:61:0A:EF:DB:BF:0D:C9:2D:E8:02:BB:5F:E5:B8
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:df:a8:ad:24:e3:b8:5c:ff:60:ef:0e:57:29:5d:42:fa:2a:
68:53:09:cf:96:97:52:44:66:af:fd:72:f7:64:80:f1:0c:87:
5d:48:ab:dc:19:60:e0:ce:b8:4b:61:1d:1c:9b:62:78:9d:42:
b8:cd:42:7e:66:fb:13:08:dd:91:42:53:a2:a3:9a:ae:63:7c:
13:0c:02:2f:43:0d:0b:22:82:3a:c3:a3:dd:e1:33:f7:35:cb:
ba:7d:a2:72:4f:69:05:c8:41:c7:8a:32:ee:3b:80:19:71:27:
91:67:bd:69:bb:f0:34:a1:d9:24:38:8f:ca:c2:f2:ae:a1:02:
41:f6:47:9b:1d:67:ab:5b:81:8f:43:77:21:a9:f9:50:08:9d:
25:65:2e:52:a9:29:54:b2:2b:2f:f0:2e:7a:0b:47:4c:ca:a1:
53:23:cb:89:1c:cf:e9:b0:41:3b:c1:fc:e7:80:9a:ac:ee:3a:
86:c9:fc:a9:f4:0e:4a:96:c5:3d:48:0d:1e:3b:f8:d0:06:01:
0f:79:3a:fb:6a:8a:78:74:29:80:ae:9c:f5:27:90:bb:98:7d:
3a:d0:aa:eb:90:a7:00:f7:d3:d2:32:fc:46:0f:91:59:52:20:
af:07:ff:fc:dd:5d:3e:ad:42:ad:8b:f9:af:20:b1:1d:8b:2b:
25:cf:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:20 2025 by rpki-client