Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
File: Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft (raw, json)
Hash identifier: V+ESfUeqx1OlB70BD/QIf+UEPwPC/z78/N5T4QlgoF4=
Subject key identifier: D0:65:F7:54:49:43:2E:8E:08:5A:AE:A8:29:FF:E1:6B:0C:8C:DC:80
Authority key identifier: 1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74
Certificate issuer: /CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
Certificate serial: 019771F5F4E458EE3FFEEEA63B0AF07BFD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
Manifest number: 09A0
Signing time: Sun 15 Jun 2025 05:00:33 +0000
Manifest this update: Sun 15 Jun 2025 05:00:33 +0000
Manifest next update: Mon 16 Jun 2025 05:00:33 +0000
Files and hashes: 1: Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl (hash: RQUDmf9KaBcfHpCBni9dwD/V+1S4Xh+rjXwr5xDkL28=)
2: tylNMSSvS99Dcyy-HHi_PFuMqa4.roa (hash: ccMlffzxJqfYWwFrr0eYQi/P7Vh6cNEU7oOeSOxzYpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:f4:e4:58:ee:3f:fe:ee:a6:3b:0a:f0:7b:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5fe0ae25c6eae27763dcdec51a0e10ebc6c374
Validity
Not Before: Jun 15 05:00:33 2025 GMT
Not After : Jun 16 05:00:33 2025 GMT
Subject: CN=d065f75449432e8e085aaea829ffe16b0c8cdc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:03:19:c1:a5:66:77:c3:1c:87:6e:23:72:
f9:8e:0d:88:15:7b:5f:fd:2a:0c:48:ac:aa:f2:c3:
2f:58:a7:71:66:2f:41:b9:6e:ea:51:e3:5d:fc:49:
c4:b1:94:c3:e9:e1:58:10:61:61:bc:19:15:bb:84:
c4:0e:da:7c:c0:ad:e1:77:e5:b1:0e:7a:f0:a1:04:
e4:92:07:34:3d:64:ac:69:72:85:48:2b:76:dd:48:
0c:4a:ee:b9:76:a9:25:84:3c:9e:86:cb:06:e9:67:
91:3e:b1:dc:b6:8c:14:41:66:f2:e4:cc:89:f1:c9:
82:b8:f6:91:88:23:7e:39:56:7f:1d:17:2a:80:bc:
94:f1:0e:b6:84:33:2d:fd:33:76:ab:62:d0:fb:29:
29:15:7e:5c:b6:8c:27:ff:ca:ae:87:42:23:34:99:
dc:2e:36:37:5b:89:79:5f:8e:db:11:80:d9:c0:53:
ba:fd:38:0c:64:69:75:32:19:4e:d6:de:80:73:e9:
02:ff:a1:2c:7e:84:74:19:57:7d:2e:61:df:4f:37:
9a:8a:a3:c8:db:19:3e:de:19:7e:b7:4d:73:25:f7:
44:98:08:2c:b4:75:76:bc:ea:94:d6:a6:08:d4:d4:
95:7f:0e:50:ed:22:46:fc:43:63:bd:06:4b:e8:76:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:F7:54:49:43:2E:8E:08:5A:AE:A8:29:FF:E1:6B:0C:8C:DC:80
X509v3 Authority Key Identifier:
keyid:1E:5F:E0:AE:25:C6:EA:E2:77:63:DC:DE:C5:1A:0E:10:EB:C6:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/76fb22-124c-4866-8e4d-8b792a42d0ef/1/Hl_griXG6uJ3Y9zexRoOEOvGw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e0:30:21:fe:6c:a1:03:e8:bf:65:cc:a4:9d:b4:ad:71:39:
55:ce:de:be:f1:d1:d1:e5:2d:e9:fa:76:e7:43:78:d2:41:a7:
3f:34:1b:2d:9d:60:d9:75:93:a0:82:7b:6b:8f:fd:e2:db:61:
0c:53:23:2a:c2:60:70:b5:a1:a6:d8:5a:bc:6a:e6:55:96:97:
64:fe:e1:1d:ca:e7:a1:af:5e:b0:ed:a4:29:bc:58:36:23:94:
bf:4f:0c:de:db:fd:c7:79:26:a5:d9:b6:6c:f7:cc:50:8e:05:
a3:d3:06:a6:c1:8d:e9:83:63:32:55:a7:e8:2e:66:80:8c:69:
e4:bc:fd:50:ae:34:31:1a:2b:79:10:00:50:c8:6d:07:6b:e5:
96:76:10:e4:74:e7:08:72:73:59:86:1a:85:d6:c3:1d:06:a3:
0e:c3:e7:b1:56:28:b1:a0:8a:87:6b:ce:fc:ac:d9:02:72:01:
3c:00:d0:8c:2c:4b:bc:98:76:6b:f6:1a:8a:f2:16:82:f5:4f:
56:fe:ed:91:3f:e9:ab:a1:01:c2:b5:e7:ad:b4:a3:f0:66:45:
31:e3:ce:b7:4c:c5:ed:75:47:53:73:95:9c:37:ad:9a:50:4e:
17:cc:f2:f6:4a:27:9a:ae:62:22:ff:df:31:54:f2:5a:65:c9:
1a:81:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:24 2025 by rpki-client