Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
File: HVceK9tBEuxdazpkuxe_CygP5uE.mft (raw, json)
Hash identifier: aXNQ3SfxyT8lWfVxEoX61cH9QznbWlomNPeSOsiiyYs=
Subject key identifier: B6:61:29:57:A9:3E:3A:4B:6E:F2:FC:F9:76:D2:FC:B1:41:85:11:5D
Authority key identifier: 1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
Certificate issuer: /CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Certificate serial: 01977150F023CE61B18AA4E16F55B378D937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
Manifest number: 0D16
Signing time: Sun 15 Jun 2025 02:00:18 +0000
Manifest this update: Sun 15 Jun 2025 02:00:18 +0000
Manifest next update: Mon 16 Jun 2025 02:00:18 +0000
Files and hashes: 1: HVceK9tBEuxdazpkuxe_CygP5uE.crl (hash: Y9b1jI1CYU3kAxcSPFh1vIqoaZvCVf2/P7OttBMWdEk=)
2: h7CHzkBnlnsCPZHhaVmBEiptsJU.roa (hash: EbCVP8Yz7oXyf9jeo4iTmjzKKTktTCeVwJmVIt/iZmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:50:f0:23:ce:61:b1:8a:a4:e1:6f:55:b3:78:d9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Validity
Not Before: Jun 15 02:00:18 2025 GMT
Not After : Jun 16 02:00:18 2025 GMT
Subject: CN=b6612957a93e3a4b6ef2fcf976d2fcb14185115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:47:23:95:5b:0a:74:2b:ef:40:60:a2:fb:
14:71:f5:4e:7b:3b:86:d8:de:49:90:d5:a4:68:4c:
1f:20:78:cb:af:be:7f:ef:bd:18:34:ef:fa:b7:83:
96:71:d7:c1:72:86:b6:a5:f4:86:10:b0:a6:69:cb:
96:71:29:8a:3d:26:67:ba:27:1b:4c:3f:ef:cf:75:
c3:b8:b0:01:78:a6:e0:c5:d2:c7:67:2c:57:78:a6:
99:ea:3a:60:24:87:ff:84:17:41:69:50:44:15:64:
6f:73:d2:d5:d8:d1:67:63:47:fb:cf:b5:65:91:fa:
57:f7:04:f5:07:24:d8:bc:e5:d4:1c:18:5d:d7:ab:
e0:66:74:22:f7:92:68:55:70:71:f1:c4:b0:47:cf:
54:47:06:85:71:11:33:00:68:ad:3c:03:c9:a4:04:
9d:c2:1e:68:61:3c:b5:b5:ca:33:f3:1f:15:bd:f0:
5b:c4:bd:68:94:78:ed:4b:bd:1f:c0:89:61:72:5b:
b6:da:74:ca:be:5a:cf:e2:6b:31:96:21:f5:e0:e3:
97:27:ac:74:20:61:58:f4:b6:59:b9:01:f7:eb:8a:
73:ec:af:6d:27:f8:d7:d8:5a:44:9c:f8:6a:30:a9:
16:c1:c4:25:48:f1:ba:6a:5c:a5:f6:02:69:7a:c9:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:29:57:A9:3E:3A:4B:6E:F2:FC:F9:76:D2:FC:B1:41:85:11:5D
X509v3 Authority Key Identifier:
keyid:1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:61:85:c0:be:35:1c:15:1a:59:e5:3a:09:5a:59:ce:3e:68:
52:d0:87:00:b9:3f:c0:3b:cc:55:d7:2b:d0:c9:d0:14:d6:72:
7b:9a:62:d7:b3:0b:97:2a:00:ec:14:76:65:7c:fd:02:85:cd:
8c:ec:5c:22:04:e8:57:23:f6:36:02:57:0f:8d:68:07:3b:9d:
59:52:f0:06:6d:0d:80:c2:95:8a:0a:9a:a9:9b:dd:65:d7:32:
96:86:db:7b:cc:e4:de:e9:38:0b:a8:d9:22:5a:c1:6d:5d:2e:
69:90:f5:ee:7b:85:2e:0e:ad:0d:df:2a:b7:54:58:f2:2a:3c:
b0:e3:cc:96:8e:cd:1f:a6:c0:c2:4d:8c:47:75:cc:3e:d9:bd:
b3:ec:fb:93:18:fe:3e:76:49:a8:10:3b:22:ad:68:c7:11:b4:
3c:b0:f2:4d:84:14:f6:83:ba:84:27:9e:e2:11:32:f8:d5:2b:
dc:65:32:84:ff:8e:58:31:3f:f9:fe:54:f6:97:d9:c2:9a:20:
20:74:ef:76:fa:46:51:7a:21:86:c6:f4:d2:11:41:8a:f2:57:
af:c2:f2:62:a6:5d:d0:4f:2b:24:a2:62:bf:2b:20:9c:54:89:
f9:eb:b8:55:87:55:9d:ff:40:35:25:e2:2a:56:11:94:6c:bc:
54:2e:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:24:39 2025 by rpki-client