Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: fOGmm3vcbc7eyFc5tswItHsG077CUwUlr6rAlPBwlVY=
Subject key identifier: 0C:6E:BB:3A:E0:37:31:8F:D3:A5:23:F0:D1:88:7E:F4:17:49:F1:E9
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 019874F4FEA4638378AC0E836D19711493C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 1481
Signing time: Mon 04 Aug 2025 12:01:09 +0000
Manifest this update: Mon 04 Aug 2025 12:01:09 +0000
Manifest next update: Tue 05 Aug 2025 12:01:09 +0000
Files and hashes: 1: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: haxRL0RK89CXfJtsmqstHctOthg6TWheGSlsaQvDiaA=)
2: XQt8-9bW0FfWOISPdA8ZaGblVY4.roa (hash: fmg6bIRtzaFenySqXfJpj+XCISOy4FuP2PiXszAHZw4=)
3: ouJuya3X6R6DXlSGTvcwGrFG3qc.roa (hash: auurPbnlFkK50pznvn3DyAHS8yJ/Y07rROn4rW79W6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:fe:a4:63:83:78:ac:0e:83:6d:19:71:14:93:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Aug 4 12:01:09 2025 GMT
Not After : Aug 5 12:01:09 2025 GMT
Subject: CN=0c6ebb3ae037318fd3a523f0d1887ef41749f1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:9e:e8:d6:76:0b:c6:a1:95:e9:3f:db:4f:
02:13:28:f6:2f:c5:45:7c:be:31:8d:bb:4e:47:34:
0a:fb:3b:78:d9:bb:2d:df:4e:25:1d:f4:e4:ce:18:
85:a6:a8:fb:fc:7c:38:b6:f4:c0:2a:60:86:6e:0d:
ec:b7:c9:6b:eb:24:33:1a:55:e8:b8:8c:d6:32:bd:
59:da:f8:44:ec:d3:be:1d:bc:48:6e:4b:28:bb:a1:
d7:63:b7:3a:a2:8d:a5:18:17:6a:12:f8:32:8e:75:
a0:a5:bb:5d:1c:f5:e2:c6:71:a6:49:dc:e0:e9:c6:
c8:a0:89:f1:e2:95:77:91:80:b2:81:98:08:27:64:
49:16:de:c4:4a:f9:b7:49:48:62:76:d6:6e:c1:25:
ad:f9:00:41:ae:f9:1d:c6:3d:61:98:7f:2a:00:ea:
f0:bf:4e:3c:c9:81:cd:00:33:bb:68:41:db:25:49:
38:90:94:e0:3f:a2:a1:80:af:94:58:1b:34:fc:c1:
16:fe:1a:dc:c7:37:f8:3e:75:f3:85:fd:16:16:61:
4f:0a:ce:ed:d6:ff:00:71:80:ef:4e:2a:f0:0f:6f:
59:a1:4f:26:fe:b2:3b:b9:fb:7f:5c:d2:e1:23:fe:
b3:29:78:8a:bd:68:d8:d6:6a:c0:84:bf:27:c0:f8:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6E:BB:3A:E0:37:31:8F:D3:A5:23:F0:D1:88:7E:F4:17:49:F1:E9
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:98:af:ed:c5:30:86:46:13:83:33:06:cd:0a:ee:2a:3a:3f:
86:c4:dd:57:d3:63:fe:ad:8b:99:67:05:58:d9:08:7d:f9:4d:
eb:01:a1:28:30:5d:fd:ba:7e:bc:b7:60:9a:d6:e0:ac:89:4b:
c8:bd:7b:b1:25:57:f2:ab:cd:7f:2b:dd:95:8a:b4:14:33:88:
6c:d3:7e:53:30:9d:a6:ea:f3:dc:17:87:90:d6:a5:07:6f:13:
49:0a:e0:68:18:64:71:91:69:81:e7:2a:6e:67:d9:10:08:21:
5a:a6:6b:cc:b3:11:73:91:c5:00:80:81:a8:9e:d7:19:b0:76:
a4:19:19:50:5e:31:1d:c8:74:cd:5e:03:00:a8:4a:d9:39:ff:
da:3c:8f:58:05:9c:42:ff:61:14:d3:71:28:69:cf:ee:77:d9:
8c:44:d9:e5:47:08:99:dc:40:5a:6a:84:32:ba:38:9b:3e:ab:
d7:6c:09:f6:f7:7e:a8:46:b8:95:0b:05:68:24:9b:ba:d3:9c:
16:fe:8a:74:a3:40:ec:3e:f2:2a:b2:46:6e:52:5e:c7:2e:6a:
6b:d3:91:c9:fd:5f:7d:d3:cb:4e:00:29:89:ad:4e:67:c0:39:
8e:7c:07:c9:15:2b:be:43:1d:77:6f:27:23:61:3d:39:d4:17:
a5:a6:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:08 2025 by rpki-client