Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: NlEKOzo/MB0D7UuJqKg5IoPWKCuu8U15BDTu/bN4RPw=
Subject key identifier: 5A:C2:D0:05:40:72:F7:CE:CC:3F:D3:A7:30:AB:BE:5F:8E:C6:0F:F2
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 01978433A55F6688BCE8DC4C57668377851D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 0F29
Signing time: Wed 18 Jun 2025 18:01:06 +0000
Manifest this update: Wed 18 Jun 2025 18:01:06 +0000
Manifest next update: Thu 19 Jun 2025 18:01:06 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: 0NHRrFwqgQ5u0aGBJC9pnhVLw6rG1cwj3nJ6fGWj+yI=)
2: kk1RvulsDSTUcsB-uonoLPTmX_c.roa (hash: 8TFkWIExCyZU8KrfnY1OXWc5V95rzbge2YPptcmVOsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:33:a5:5f:66:88:bc:e8:dc:4c:57:66:83:77:85:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Jun 18 18:01:06 2025 GMT
Not After : Jun 19 18:01:06 2025 GMT
Subject: CN=5ac2d0054072f7cecc3fd3a730abbe5f8ec60ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:74:6d:be:94:cc:0e:9b:59:c0:b7:cf:4c:
45:6f:7a:18:b5:96:16:8f:98:f9:ff:75:05:66:08:
27:4e:7c:9d:a9:42:f6:49:7b:7c:39:be:88:e4:a1:
61:c2:2f:b1:f7:c1:44:76:28:2a:2e:91:26:b2:6b:
3c:8c:c9:48:7d:d1:f6:25:9a:cd:f5:d1:06:54:13:
95:fb:72:02:89:48:d3:37:f4:e0:c3:a6:cd:62:0c:
3f:e6:f3:08:a9:b7:3d:24:54:a9:9b:db:38:65:96:
e1:55:3e:ae:25:21:5a:0b:94:ff:cb:1b:57:e1:62:
40:a8:33:97:51:f7:74:ba:a4:7a:83:d9:84:74:43:
c0:97:97:c9:5b:23:c3:e2:a7:60:df:22:78:03:ce:
5d:89:55:9e:1c:38:79:d6:a8:59:d3:d4:5f:07:b6:
86:38:c8:d0:b4:76:46:03:7e:8b:23:be:a8:13:31:
fd:9a:7e:53:02:5e:85:0b:0a:4b:be:17:2e:56:6b:
54:9c:3e:ad:9e:65:aa:61:86:e9:e8:0a:cd:1d:dd:
35:62:a4:4e:68:56:1c:54:48:75:76:25:70:0a:da:
05:a5:0d:ce:fa:45:ea:0b:94:13:77:fe:4c:ec:c0:
51:3a:e2:b7:9a:9c:8b:be:38:10:41:06:5b:a8:2e:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:D0:05:40:72:F7:CE:CC:3F:D3:A7:30:AB:BE:5F:8E:C6:0F:F2
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c4:ee:d4:63:f1:7a:26:f2:25:dc:78:79:6c:2b:1a:df:3e:
b3:fe:52:dc:8e:de:b2:78:0b:55:32:66:78:a6:75:b1:53:6b:
02:43:55:35:44:fc:d7:c5:a1:85:c2:6b:90:77:ca:17:73:30:
3d:46:28:a8:a7:3b:a8:6e:38:f4:c1:ff:7e:fa:75:13:e9:3a:
b1:7a:e5:a9:27:d0:9e:fd:9c:26:79:5d:a2:83:37:26:81:82:
18:c1:b4:9b:f7:54:2b:c6:51:ee:1a:3c:5e:19:41:67:9f:da:
b8:39:ba:25:9d:84:5f:70:cc:5c:ec:17:ef:7e:db:11:4b:39:
57:15:79:07:95:96:6a:24:d8:2c:84:c4:fe:2c:27:03:14:57:
50:46:49:f2:0e:76:7b:56:72:3c:25:99:76:6a:12:90:fb:a3:
a6:7d:a9:c0:65:c9:78:dc:2a:59:5c:a6:ba:3f:ae:d6:7c:d3:
8b:35:6a:e7:07:a3:00:bc:69:37:e7:b3:52:52:4b:9e:4f:dc:
c6:bd:89:62:95:03:52:c0:bc:e3:a9:52:14:c6:3f:7f:7b:9b:
f8:48:11:f4:8a:88:b7:6a:f7:86:a3:de:00:4c:fc:75:1c:fe:
5e:a9:7c:34:b2:fa:aa:c7:65:6c:de:50:45:ce:e1:09:90:b6:
f8:e7:5d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:40:34 2025 by rpki-client