Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: TB9HRzQtwlYO5kuWDrqdWlQO15AJoqy7pVqACZTTPrc=
Subject key identifier: E7:7E:E9:75:29:A7:4A:A8:12:BD:DE:CD:D7:BD:A2:FE:85:1D:F0:51
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 019768F2B3C1E7D9E72BA1F89D9CED1EA69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 11:00:25 +0000
Manifest this update: Fri 13 Jun 2025 11:00:25 +0000
Manifest next update: Sat 14 Jun 2025 11:00:25 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: obqhTYv57a/dDqwsCNiTA6hAMPJ95WpIPXb0tCnQttE=)
2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=)
3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:b3:c1:e7:d9:e7:2b:a1:f8:9d:9c:ed:1e:a6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Jun 13 11:00:25 2025 GMT
Not After : Jun 14 11:00:25 2025 GMT
Subject: CN=e77ee97529a74aa812bddecdd7bda2fe851df051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:f9:f2:cd:62:0e:62:36:d9:70:10:24:c3:
31:ff:72:63:d7:28:45:83:a9:8b:98:f0:4f:f6:2d:
2e:d9:4d:3b:3a:cc:2b:86:24:87:d6:a6:77:83:ee:
be:5e:89:3a:24:69:20:1e:a0:0b:c6:84:1c:0f:74:
e8:b5:b9:63:64:a3:36:f9:b8:2e:2c:23:b5:c5:f2:
b2:38:2a:d0:45:2f:0e:99:30:0b:80:11:bb:5a:90:
93:5c:5f:87:73:01:ff:6d:00:3c:d1:4a:b8:b8:a4:
cf:78:d2:f4:50:ef:ed:2c:f8:6a:f2:b1:6c:42:da:
a1:dd:de:b1:c5:a3:3f:c9:3d:23:1a:2d:23:48:f0:
e5:e1:38:a9:80:dd:11:82:3a:2d:95:8b:89:c1:65:
60:3f:c4:51:a5:8d:1f:d6:07:00:ec:67:53:19:fe:
61:26:83:e0:4f:ab:39:20:7f:c0:65:61:fc:1b:30:
14:3e:61:75:db:d9:7e:66:ba:a7:3b:16:b0:bc:67:
34:16:ee:51:02:08:01:88:3a:c2:7b:c5:2c:92:65:
42:9a:c2:cc:e4:ca:6c:a6:5f:14:d2:b4:f7:24:ec:
9d:12:3b:01:2d:af:3d:57:8a:e4:ac:89:4d:9e:85:
f9:5c:6e:ad:15:2e:ae:c3:17:d6:9c:5f:da:ca:66:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7E:E9:75:29:A7:4A:A8:12:BD:DE:CD:D7:BD:A2:FE:85:1D:F0:51
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b5:22:75:65:b7:39:48:be:a0:b9:11:4b:9f:a3:11:9a:f8:
7e:a2:2f:77:62:7a:a4:05:c0:88:cc:16:4a:93:38:18:61:a1:
2d:4c:1f:a1:70:b5:a2:28:1d:1d:a9:a9:bd:2a:c5:d4:9a:ff:
50:d8:13:93:37:04:f5:b3:0c:c4:bd:3e:ea:69:4a:4a:b1:9c:
62:d0:6e:10:64:cb:8d:03:4f:5a:c8:b4:11:3a:0e:03:05:e0:
6d:5e:0a:68:23:9a:62:98:00:ee:b5:8c:16:5e:ab:5f:2f:e8:
28:a3:13:b7:14:18:ce:10:96:89:48:6a:14:87:1f:8a:cf:3a:
1d:51:7c:a1:3b:b4:3f:55:97:02:64:b2:21:c5:e4:10:c7:49:
eb:fd:ca:08:05:21:e6:be:73:e6:1e:d9:ee:5c:a4:a7:73:6d:
dd:50:c5:39:94:5c:97:12:10:a8:b7:de:14:ff:36:70:12:e5:
9d:8a:9d:58:db:06:57:1f:4e:8f:15:73:6e:14:98:7b:c7:2d:
34:1d:2e:f8:02:8c:27:bc:dc:39:a6:a2:5c:35:d4:13:07:50:
6e:6a:e9:95:7f:bf:ae:6b:78:b5:58:22:90:d0:7e:0b:af:56:
b0:94:bc:6a:ea:6b:bd:d5:ad:ce:6c:3e:7d:15:78:c9:32:07:
90:1a:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:22 2025 by rpki-client