Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: jxc5TPvxunzu7fAnaElqs6uHLaDB+JGUab2r5EYOlAA=
Subject key identifier: 72:29:01:67:D2:6D:98:7E:20:BF:23:0E:0E:BC:77:B1:B6:91:A7:5F
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 019777F8140A9C26995EADB32FFDC7F74338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 09:00:36 +0000
Manifest this update: Mon 16 Jun 2025 09:00:36 +0000
Manifest next update: Tue 17 Jun 2025 09:00:36 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: PGnFIh8Hq9/9+4IFcLnzCmN8vChwTOORm/8YeXPFMhM=)
2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:14:0a:9c:26:99:5e:ad:b3:2f:fd:c7:f7:43:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Jun 16 09:00:36 2025 GMT
Not After : Jun 17 09:00:36 2025 GMT
Subject: CN=72290167d26d987e20bf230e0ebc77b1b691a75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:3d:e3:9f:49:2e:07:4e:80:ed:0c:2c:1b:
2b:b5:f3:67:64:5f:cb:e1:9b:24:33:4c:ab:72:58:
99:1b:f5:dc:0b:c1:03:39:dd:d6:3c:e3:f8:e2:08:
f9:e1:a4:cf:27:84:88:0b:51:3f:aa:7f:1b:d3:46:
98:c1:f0:db:39:94:c6:a9:9b:5c:9d:3c:1b:1d:88:
d9:70:94:bd:39:3e:75:7f:90:af:4d:76:44:98:65:
12:e6:a1:8b:26:1b:dc:98:62:03:a9:21:b9:f9:43:
30:a6:a2:3f:ff:4a:1d:52:b2:c5:23:95:7b:66:83:
18:37:6e:6d:1d:59:df:cf:e4:fb:4d:98:3c:fc:c9:
02:8b:cf:e9:20:78:ba:64:85:d9:d9:ff:58:74:3c:
fe:94:08:4a:e7:de:64:42:5e:c0:5a:48:40:41:ff:
98:38:a6:34:3a:ba:f6:b7:86:cd:a3:b8:9b:06:e6:
2d:f2:e9:e0:63:fd:45:5d:ae:59:14:61:17:9a:da:
3a:fe:cd:a4:2d:8c:0d:14:df:8a:c0:e0:14:55:aa:
89:8a:22:e9:ea:9e:13:d2:77:e7:42:2c:6f:7f:f1:
a5:1d:0d:e9:6c:93:58:ba:17:39:2a:42:46:9d:60:
56:06:6b:f3:db:ea:0a:df:8f:54:61:4d:4e:82:ff:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:29:01:67:D2:6D:98:7E:20:BF:23:0E:0E:BC:77:B1:B6:91:A7:5F
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8b:1d:12:a8:4c:6b:11:4f:81:29:89:f3:94:4d:d7:6d:8a:
53:35:5d:bf:cf:0d:93:ff:86:86:d8:48:15:0e:c5:06:4f:8d:
ac:3f:2d:77:a7:c6:a7:59:b5:b8:f2:b1:07:89:7e:5f:49:f2:
fb:a8:cb:7b:39:3b:86:2a:be:c7:dd:2c:80:b9:4e:1f:d2:1b:
68:26:dd:5b:99:fe:ad:31:c1:d4:80:6f:6c:fa:03:0c:9a:9f:
36:14:a0:07:14:dc:b3:8c:7c:9e:c8:57:17:ee:51:20:12:75:
fe:af:d5:28:e8:68:08:fc:66:76:60:57:5f:0d:b7:1f:75:59:
7f:97:cb:aa:fe:bc:3c:f5:69:de:f3:76:28:5b:21:68:72:e2:
30:06:f8:cd:87:02:e8:55:14:a2:06:f5:87:68:2c:f1:82:b8:
8e:da:c5:8c:a9:25:1e:d0:2b:d6:71:30:b1:5f:5f:5a:a7:81:
95:1d:93:c0:a2:c9:0f:1f:e8:b2:70:3f:47:40:2e:de:a8:d1:
3e:fd:04:e0:aa:31:0d:c1:bf:63:30:cf:29:40:de:7e:ab:7b:
5a:94:26:ec:22:bf:1a:17:b6:42:5e:47:1a:12:55:a5:64:66:
1d:8c:9c:c0:cd:2d:9c:f0:c8:d9:70:ee:36:bc:89:a6:6e:87:
54:54:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:18:23 2025 by rpki-client