Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: M9t1BwFUEVI3XQYPpHRe3fqHvR5JGn8zOb7gOQxM+CQ=
Subject key identifier: 8E:F5:D4:B5:E2:E2:90:48:D3:6C:B5:5B:53:6F:95:D1:BE:E1:61:46
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 01977188A0CC771CAB4060ADDB491DD09471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 01F2
Signing time: Sun 15 Jun 2025 03:01:08 +0000
Manifest this update: Sun 15 Jun 2025 03:01:08 +0000
Manifest next update: Mon 16 Jun 2025 03:01:08 +0000
Files and hashes: 1: 0tHvPtdsZRMSdECFrWywHEFzjJY.roa (hash: wDxCLikDUetb91mXxU1f33qmz0PqiuAAUobRz5+KIoE=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: N/V+yC1hVk+zKreAn+9FQphNtrdrLdP4px1J3jSdBEg=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:a0:cc:77:1c:ab:40:60:ad:db:49:1d:d0:94:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Jun 15 03:01:08 2025 GMT
Not After : Jun 16 03:01:08 2025 GMT
Subject: CN=8ef5d4b5e2e29048d36cb55b536f95d1bee16146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:34:3c:d8:89:7a:ff:69:6b:ad:66:cf:f4:
ec:73:1f:9c:f3:79:d6:fb:d8:61:b0:eb:99:f8:60:
b6:11:54:be:17:7a:c7:2e:f1:e9:7e:75:16:d5:6e:
ae:da:a5:5e:d4:6d:2f:08:f9:5b:2a:5f:dc:5d:67:
87:52:6e:5b:13:33:b0:36:1c:db:e1:e9:cf:22:eb:
7b:ef:d2:30:2d:df:75:6c:26:6a:69:61:bf:cd:89:
08:27:5e:95:14:6f:b7:ce:01:f5:0b:0e:44:a4:fa:
95:cd:4f:02:3e:13:49:44:0d:7f:e9:d6:f0:b0:0f:
d6:b7:8d:94:6d:c6:04:00:6a:06:b2:57:8a:06:86:
5e:95:56:d7:bd:fe:b0:5a:20:fc:7c:12:e8:98:24:
16:db:db:14:7f:ad:7a:f2:b7:74:da:86:85:58:f8:
9c:50:ef:a2:71:24:d6:e2:20:27:11:ea:83:fc:c3:
a0:f9:eb:65:1a:29:25:49:7c:cf:f4:3c:06:2d:ed:
48:64:50:f4:51:97:c2:af:0a:af:9b:5a:db:41:44:
2b:51:fa:56:a5:88:2a:45:28:c4:43:da:19:64:1a:
34:27:ef:77:3a:05:ac:4a:c7:0f:40:39:3f:7a:1c:
4f:2b:6b:df:1a:dd:73:3d:68:eb:7a:cb:8a:a9:02:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F5:D4:B5:E2:E2:90:48:D3:6C:B5:5B:53:6F:95:D1:BE:E1:61:46
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:77:89:38:22:20:f5:b2:53:55:20:a0:7d:7d:f4:33:0f:c5:
45:34:20:2b:a7:80:85:9a:f9:af:af:9e:d7:b6:4f:db:c4:16:
c2:89:74:54:61:80:93:8e:f2:97:72:2b:d0:54:de:8b:23:d6:
7f:76:15:da:b1:bf:8a:30:ba:4b:69:77:fc:04:ae:69:6a:69:
24:23:b3:d2:ac:7f:64:6c:58:11:26:1e:5d:60:2f:8a:7a:4d:
85:3a:96:6e:04:ed:17:78:fe:69:73:7b:3e:49:48:cc:1a:d9:
6d:38:8b:dc:77:fb:2c:64:f8:2c:7a:01:11:fa:23:b3:9b:5e:
cc:f9:40:d6:a7:4d:90:1b:2c:05:29:e3:8b:9b:fa:43:8b:0b:
70:e0:d2:06:35:33:ab:1e:3f:8f:05:88:3e:89:2a:af:4a:47:
8e:e3:ea:cb:b6:7a:b2:ee:d3:5a:fc:e6:33:b7:af:4e:84:f6:
6f:fa:b3:46:35:33:c1:b0:a3:63:99:39:23:b1:27:0d:80:c8:
21:a7:67:36:0e:e3:83:53:d6:c5:f0:d6:1b:51:06:cf:c8:9c:
42:3b:02:09:7c:83:a8:4f:db:ff:af:ad:85:de:e5:a5:f3:5e:
ed:41:a9:ea:9f:7b:d4:bf:37:27:74:5f:7e:3c:be:43:88:f1:
3b:78:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:03:06 2025 by rpki-client