Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: OEEYhs3yO+tZIkAMGfgsnzjQQlve1UWTtSGGb/Pu7so=
Subject key identifier: 2A:6D:21:F8:4C:A4:1D:D5:9B:DE:F4:36:C7:E0:68:8F:28:A5:78:54
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 01987418F488C66C00EE1A485CE1716DFF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 08:00:49 +0000
Manifest this update: Mon 04 Aug 2025 08:00:49 +0000
Manifest next update: Tue 05 Aug 2025 08:00:49 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: 6PHb/X/eVYSSQPrvlzjgFqaFaKVSwXy8UBUmcjcbDYI=)
2: gq0u0nuGqZ56yv0huU0NYxq2Tuw.roa (hash: BWs37rngd3jbS0e8ne6CGjqZDK9zmWcTutRQQlknGKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f4:88:c6:6c:00:ee:1a:48:5c:e1:71:6d:ff:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Aug 4 08:00:49 2025 GMT
Not After : Aug 5 08:00:49 2025 GMT
Subject: CN=2a6d21f84ca41dd59bdef436c7e0688f28a57854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:8b:d4:84:ed:13:5b:6d:5f:00:ad:ab:90:
51:a1:59:64:56:ef:47:46:c6:81:84:7f:07:1b:db:
8d:8e:3d:7b:d4:62:d4:50:68:2d:16:55:7b:82:03:
50:27:78:21:64:19:4b:ba:5f:63:46:02:9f:a7:a0:
bc:4c:af:71:d0:65:ed:d4:a5:0a:fb:98:5e:af:7e:
b0:a5:de:e4:22:ac:09:ec:5e:40:19:1f:1e:5e:14:
35:e9:27:a3:1a:e5:c7:e0:99:89:5c:47:7e:5c:ea:
aa:05:ba:86:b3:3d:59:77:a4:fa:6d:ce:52:1f:14:
87:a2:19:d2:59:60:dc:e8:e9:f6:fa:3a:c5:b8:0e:
8e:9e:04:c2:1e:c0:69:d1:4f:00:00:ab:de:22:aa:
8a:90:08:30:91:be:9d:2b:c8:1f:eb:ac:30:79:d3:
b5:4c:fa:52:38:3f:e9:fd:3b:7e:9d:13:19:9b:12:
c9:13:bb:77:a2:9c:3e:45:7f:0e:1f:72:9a:46:b9:
b7:56:3c:cc:70:ea:cf:dd:81:fa:35:1f:e3:1f:7f:
b9:1a:16:cd:b1:1b:6d:b9:0c:d9:80:33:54:a9:a6:
c7:93:be:2a:73:24:bc:42:50:22:82:aa:3c:b4:60:
0a:b1:62:a3:55:70:70:8d:ad:3e:ad:fa:84:2a:ed:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:21:F8:4C:A4:1D:D5:9B:DE:F4:36:C7:E0:68:8F:28:A5:78:54
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b2:51:b9:9c:12:6e:40:01:b7:bd:fd:73:e3:f8:80:75:a5:
78:5c:ee:a4:a6:8d:d4:7e:34:cd:32:55:8d:83:29:72:bb:ba:
a5:49:85:1d:c7:32:d3:45:00:73:a0:cd:cb:73:3b:e2:6b:f8:
5b:87:63:d0:39:48:31:7c:ba:f9:89:10:04:e1:7a:af:a2:66:
51:39:86:5e:37:39:11:78:53:32:7e:59:39:57:35:18:c8:60:
cb:cb:ac:fa:be:7d:97:b1:09:33:bd:0e:6d:0f:f1:0a:44:ec:
35:78:67:bb:32:dc:64:a0:5a:cb:0e:a2:c3:7a:bd:54:a4:45:
ff:dc:4b:ad:50:4e:66:17:a1:0c:e9:88:86:29:28:16:ff:46:
f1:f1:43:bf:ee:3c:e6:cd:9e:30:2e:e0:3f:1c:76:c3:61:44:
47:41:a6:2b:bc:44:ae:26:f4:15:cc:0d:ef:a6:bc:49:92:e1:
ec:8c:a9:22:bd:49:27:b8:c6:f7:37:8a:78:82:da:22:24:72:
48:04:9b:dc:24:cd:e1:87:91:b7:a8:cc:24:ee:c0:d7:ee:9f:
f9:1d:9a:41:dd:33:4c:df:e2:9e:0b:13:1e:b3:18:77:97:c0:
c9:76:ab:82:76:3f:c5:cc:e5:75:6f:bc:72:11:41:f9:3f:4d:
75:0c:18:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:30 2025 by rpki-client