
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: 67kG/vH0GRt1xQDfOuh7rCXwrokounvqvBF6GHO++jY=
Subject key identifier: 08:45:A4:B9:90:28:62:15:D6:CF:18:D8:37:3E:02:22:63:44:78:DD
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 019771BF1C43C262E806359744930C478BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: DC
Signing time: Sun 15 Jun 2025 04:00:39 +0000
Manifest this update: Sun 15 Jun 2025 04:00:39 +0000
Manifest next update: Mon 16 Jun 2025 04:00:39 +0000
Files and hashes: 1: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: 3whcBhImsC7HnAlwK6Tbt8Xumd+eNwWXx4Q0dCJ8kEY=)
2: dOirMHERf2S7XaVhDBj8pRwQyLU.roa (hash: RUHnPEXdDgz2x6FeuZ8yiEPV6rqAxw/OAxkwBlLK73U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:1c:43:c2:62:e8:06:35:97:44:93:0c:47:8b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Jun 15 04:00:39 2025 GMT
Not After : Jun 16 04:00:39 2025 GMT
Subject: CN=0845a4b990286215d6cf18d8373e0222634478dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:da:f2:9f:ba:7e:04:43:62:96:57:c5:c4:
41:2b:ca:57:bb:62:b8:ff:e0:78:51:b0:8d:4e:23:
74:12:ec:a2:63:96:52:5b:c8:9a:e7:13:b4:3e:e7:
0e:aa:c5:98:40:83:35:58:b7:df:3d:d4:e0:5e:f7:
d5:77:e2:23:9e:84:ee:b2:50:a5:51:53:2b:c6:64:
5d:c2:cd:86:da:4c:dd:c2:88:2f:09:fb:44:30:8e:
e8:f6:ed:f9:81:b7:ac:21:df:f1:3c:41:66:54:d2:
82:4e:96:a6:0c:6a:dc:96:83:5c:2e:ad:e4:f1:e3:
d2:1c:04:e5:6f:49:1d:fa:2f:df:d6:6e:79:af:43:
c9:01:31:57:ef:f7:e6:4c:b6:18:31:f7:81:2e:f3:
d8:29:2b:37:5c:25:7c:ff:02:2a:92:dc:dc:15:4d:
d2:2f:64:d9:4a:7d:5b:62:ef:df:c7:13:fd:a0:68:
db:dc:66:a3:8a:d1:72:6d:e6:85:58:c4:04:97:b4:
14:20:40:8e:91:99:c9:5d:33:42:26:1f:4c:1c:1c:
d5:e7:8c:af:d1:0f:a4:2e:ba:c6:a6:04:9a:41:55:
da:00:13:32:09:0e:43:2d:3b:56:09:58:43:41:d8:
f6:7f:a0:77:4b:97:0b:e5:78:f2:97:5a:ac:2c:83:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:A4:B9:90:28:62:15:D6:CF:18:D8:37:3E:02:22:63:44:78:DD
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4c:24:6f:af:dd:88:ca:3e:a3:0a:e2:36:34:5c:e9:fc:35:
0d:bf:46:f5:7d:54:ef:3c:4f:50:0d:c1:29:62:57:36:e6:22:
8e:47:95:e5:36:90:fc:b1:97:ef:0f:a9:38:de:f3:84:a7:1d:
a5:d2:7f:6b:93:bc:84:4d:f4:03:17:05:56:5c:95:cc:9a:d9:
ca:3f:ed:40:21:81:c2:8d:30:4e:96:d7:e5:9c:e9:47:db:78:
37:b2:4b:bc:cb:f9:02:2c:a7:5a:66:8a:1f:80:bd:c7:ea:f0:
8e:b7:7a:19:04:66:fb:cf:bf:e2:29:1e:90:a3:23:ff:72:49:
03:d5:88:20:00:7b:23:e4:e7:85:eb:de:ed:40:89:3f:5c:f8:
b4:14:ae:25:7b:0b:7b:ea:91:8d:47:5c:2b:82:9a:ed:d6:9c:
89:5d:c9:cc:59:d5:ad:c8:5a:69:09:f4:d4:c8:2a:3c:8b:c9:
dd:f8:29:f3:31:f9:c6:c0:3f:2e:d4:02:55:d7:a0:53:a6:d5:
6c:1f:d6:f0:b1:5c:64:ca:fe:4c:6b:07:2e:da:ab:79:8a:08:
bb:7a:73:82:36:c2:35:e2:02:29:1d:05:19:2e:b1:81:d4:a8:
2d:52:4a:be:b0:3c:16:2a:3a:46:86:d4:b6:5f:44:6f:57:56:
ee:92:3f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:28:07 2025 by rpki-client