Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: RQfZimRJneQRpY6ECDQdeLkIH9DWM3iUT7G5DivAKs4=
Subject key identifier: B2:EE:3F:32:F9:70:AA:77:63:91:86:3E:5C:4C:BA:9F:86:B1:35:F4
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 0197703EC04DF48B54EE2B76E660F9CC753A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 13FA
Signing time: Sat 14 Jun 2025 21:00:49 +0000
Manifest this update: Sat 14 Jun 2025 21:00:49 +0000
Manifest next update: Sun 15 Jun 2025 21:00:49 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: pgvolYm/a3/hwkRee4LDge+QcpG4XmWwqY+ILdd4i9U=)
2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=)
3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:c0:4d:f4:8b:54:ee:2b:76:e6:60:f9:cc:75:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Jun 14 21:00:49 2025 GMT
Not After : Jun 15 21:00:49 2025 GMT
Subject: CN=b2ee3f32f970aa776391863e5c4cba9f86b135f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:08:12:2e:94:91:73:46:c7:a9:b6:97:e9:
9e:d9:ad:f6:b4:d3:90:26:54:07:07:87:fd:2e:6a:
ca:05:43:38:bd:8b:37:cf:c1:d2:c3:19:b1:cd:7b:
d1:fb:bd:c0:04:8a:48:cc:f7:57:32:68:b5:11:59:
25:40:50:9f:8b:ca:19:1b:fd:63:3a:4d:25:6e:0a:
3e:6d:ac:9b:f5:06:fc:02:3a:e6:ba:3b:ff:0e:87:
1f:b1:88:ec:7c:48:91:cd:7e:f8:ae:b4:b4:e5:2c:
9e:9f:f8:73:89:bd:fe:eb:18:24:d8:c4:60:7b:99:
2f:e4:e3:85:fa:e1:b4:a9:52:6a:70:9f:a1:f7:a8:
7d:e9:1f:48:58:23:47:5a:1c:72:3f:01:78:34:34:
1f:b3:58:46:4e:95:fd:c8:17:50:0d:e7:95:ec:de:
e3:17:db:79:70:5a:2f:c2:f7:ae:68:83:c2:f7:5d:
61:1a:ca:a7:3a:1d:d0:c9:10:02:10:76:e8:1f:a0:
5f:80:bf:50:5a:a4:21:c2:8d:d9:f7:54:ee:60:58:
31:45:36:a5:53:94:a7:0c:6e:0c:dc:67:de:52:bf:
98:95:43:1d:5f:ed:20:00:2d:7c:37:7c:9c:3a:39:
5d:3e:97:08:ff:9d:05:2f:74:0d:90:18:6e:e1:fb:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EE:3F:32:F9:70:AA:77:63:91:86:3E:5C:4C:BA:9F:86:B1:35:F4
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:02:fa:e5:72:13:74:0b:c1:9c:47:19:a8:29:f3:f8:32:
39:32:d8:ef:99:2c:53:96:25:87:b0:c6:8b:fe:71:0a:b3:f0:
ff:47:4f:9c:51:2b:84:ed:9e:c0:f6:84:86:7d:f0:f2:cc:58:
e2:39:21:8e:db:bd:54:54:0f:64:ea:80:91:79:fa:56:3a:80:
74:4c:cc:9b:ea:32:be:ef:2a:23:a9:22:27:dc:f4:3f:b9:4d:
2c:fe:54:5d:d0:5b:d4:ef:16:b4:9d:05:d4:65:ff:97:80:85:
b8:15:f1:32:3c:95:7c:99:ce:20:d1:f0:7c:4b:34:fe:ff:ba:
e0:83:3b:33:ad:57:09:85:f3:ca:22:ee:9b:c0:ff:f8:55:b6:
43:bc:23:f5:6e:50:1b:76:f3:a1:dc:64:21:b4:3f:22:31:89:
ee:3e:ff:2c:10:3a:7e:29:76:01:1b:ca:3b:e3:0b:7e:eb:d9:
6f:53:af:1c:74:dd:21:29:f4:72:f0:e2:d7:1a:59:1f:e8:c6:
09:d4:c1:ed:29:f7:80:cb:db:0e:d7:c9:62:0a:73:9c:1f:88:
80:24:f7:9a:0d:e1:10:8f:05:38:5a:62:7d:e9:7d:8e:2b:d2:
3b:ac:42:d7:40:e6:58:9b:e9:12:1b:7a:25:2d:8e:02:5c:c7:
fa:2e:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:16:05 2025 by rpki-client