Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier: CjyDYQLz303nT7wejZTPDSRZsIsYtiemLW+wWyylfCA=
Subject key identifier: 5A:78:B3:26:94:4B:76:BF:B7:67:AE:73:D8:EC:CD:43:1E:35:79:E1
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial: 01976BBCDE471AFD2A321360C3F32D19EBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 00:00:29 +0000
Manifest this update: Sat 14 Jun 2025 00:00:29 +0000
Manifest next update: Sun 15 Jun 2025 00:00:29 +0000
Files and hashes: 1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: RTSnetZcZgnuIum5U46GZiVbw2iZj/Af1qQ/YKO3EXQ=)
2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:de:47:1a:fd:2a:32:13:60:c3:f3:2d:19:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Validity
Not Before: Jun 14 00:00:29 2025 GMT
Not After : Jun 15 00:00:29 2025 GMT
Subject: CN=5a78b326944b76bfb767ae73d8eccd431e3579e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:f3:34:9b:b5:7a:62:bb:c1:ff:cb:a4:f2:
59:fd:c9:24:9f:cb:b2:b4:7e:7e:31:1c:52:e8:60:
df:b6:21:f9:18:e6:3b:40:87:43:97:31:dc:17:78:
3a:a7:8c:9e:ef:f8:f4:0c:bc:e8:9e:fb:73:0b:b5:
2d:77:70:39:41:f0:93:ef:81:ac:78:c5:f2:b4:89:
18:42:1c:26:6e:91:f7:c9:aa:0f:d4:89:cd:bd:b8:
43:49:15:19:b5:b8:df:52:d8:dc:39:ec:f3:50:0c:
61:44:03:34:64:f9:ce:81:da:cc:26:39:31:4e:f6:
bd:b1:a6:99:49:1c:e9:d0:f2:b8:7e:3f:82:4e:94:
79:1b:66:74:81:cb:dd:ea:80:2f:19:94:25:ee:60:
f5:3b:f6:15:c9:85:ec:ed:75:3f:64:d3:35:b2:d0:
d6:2c:90:7c:79:bf:cf:02:a7:e8:1e:81:02:f5:72:
ad:0f:ac:4e:4e:7f:f9:f3:f3:91:fd:49:49:3d:33:
ad:79:aa:7f:fe:96:c9:1c:a6:f0:ac:b5:f9:93:39:
6c:3a:e6:2f:71:95:cc:ce:dd:e4:37:75:b4:88:a1:
71:00:5c:c2:20:d8:f7:53:60:e0:fc:90:c0:80:d9:
f1:9f:55:a8:de:0c:ee:bc:a0:14:5f:f8:89:09:4b:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:B3:26:94:4B:76:BF:B7:67:AE:73:D8:EC:CD:43:1E:35:79:E1
X509v3 Authority Key Identifier:
keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:a1:7a:07:73:f4:c3:6c:0e:a6:06:bf:88:01:32:d4:d3:
e8:9b:ee:4e:fd:9c:de:6d:5b:65:8a:22:43:46:36:bf:66:7b:
51:cb:df:29:28:d0:b1:33:b3:4e:44:42:ef:83:c1:78:f1:84:
2d:c4:7d:c7:7c:a0:e9:3f:1e:e9:77:16:43:b9:44:ae:37:51:
bf:aa:f2:84:2b:30:d2:ff:bb:b2:21:eb:48:6f:f7:c9:e6:38:
38:9d:75:69:d0:3f:04:c6:4a:c8:b5:89:72:ac:c5:2c:53:f8:
2d:79:cb:eb:aa:eb:96:b6:f1:92:05:7a:20:92:80:4d:23:11:
1d:61:bf:9e:4c:9d:83:bc:c4:44:bc:3a:86:e8:8b:f1:37:e7:
ac:9f:43:8c:70:91:22:05:7f:75:11:de:da:ec:e8:65:4c:a6:
51:d2:23:f5:fe:ca:36:11:c0:34:68:12:cd:66:e6:7c:1c:15:
d4:1e:50:0a:30:47:22:e0:d4:d6:45:35:65:a1:be:b5:ef:87:
d6:d2:a2:cc:12:61:f9:ba:7e:74:7e:f4:95:e0:9f:98:f3:b7:
32:a3:59:c6:d2:3f:b4:4c:be:d6:3a:8a:75:2d:a7:b5:77:84:
c9:bc:30:de:cf:5f:a3:bc:0c:94:1f:7a:9d:32:e0:5e:59:93:
81:76:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:39:07 2025 by rpki-client