Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: NbMhG/6f0ZqXFucDSWxJTnqH9ZbjjyTUJjUV9pim4OQ=
Subject key identifier: FC:E4:1F:57:AF:12:7E:43:D3:13:BD:80:EF:67:4D:51:A7:FB:02:AA
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 01976BF3EF672B50B21A879ADAA1035601D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 0D02
Signing time: Sat 14 Jun 2025 01:00:37 +0000
Manifest this update: Sat 14 Jun 2025 01:00:37 +0000
Manifest next update: Sun 15 Jun 2025 01:00:37 +0000
Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: PHESK8KoEdgESCTnRHlgS56LcldejFX/IWBJvuY6ORY=)
2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:ef:67:2b:50:b2:1a:87:9a:da:a1:03:56:01:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: Jun 14 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=fce41f57af127e43d313bd80ef674d51a7fb02aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:bf:f1:78:e7:4b:ad:4b:45:84:76:b0:a0:
99:e0:e9:6f:72:99:c9:1e:82:ca:b4:44:11:74:05:
a4:78:2a:11:9a:54:77:b8:63:73:cc:67:bc:b3:4c:
98:a2:e5:4a:72:8a:94:87:5c:6f:0a:ef:12:f9:a1:
a1:51:05:b3:f0:04:47:53:a3:a5:15:b9:99:68:91:
8d:ea:68:64:15:dd:ed:97:90:03:cf:a6:93:f9:38:
11:9b:f4:05:04:52:f5:18:8e:24:9b:4c:d3:ee:9a:
16:5a:f4:4f:75:e8:9d:c4:b3:b9:9b:92:50:77:db:
9f:c9:87:60:51:bd:c6:93:93:25:6b:21:4d:b5:dd:
62:28:20:2c:d7:ed:32:2a:55:e6:fa:f3:da:72:26:
0f:99:86:35:91:62:9d:20:ec:5c:fa:27:06:c5:1b:
23:9f:61:39:81:49:77:75:19:b4:a6:32:de:01:d1:
82:b4:d9:6b:7b:d6:7a:aa:97:31:d3:a1:8b:a3:fc:
f8:67:62:4f:d6:92:c8:99:9f:70:06:e5:77:c4:a1:
7e:42:60:9d:70:ad:5e:e7:ac:81:53:37:df:3d:a2:
eb:f2:57:22:ea:74:12:08:a1:5d:99:0c:46:69:8b:
92:a6:7f:f1:51:2f:c2:25:85:84:29:35:be:63:43:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:1F:57:AF:12:7E:43:D3:13:BD:80:EF:67:4D:51:A7:FB:02:AA
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0c:80:c7:e8:4a:39:75:8a:b8:18:87:6e:07:2a:87:37:a4:
55:6f:b2:27:1d:b4:f6:1e:b2:b5:06:d3:5a:cf:47:50:5c:66:
98:81:b6:4b:e8:b9:1c:a6:f5:2e:2e:2b:bc:98:e4:69:35:43:
a3:95:40:55:a3:0c:b9:12:d1:ef:f1:9f:9e:72:b5:9d:da:a3:
cc:5c:22:75:f4:57:13:53:44:24:3a:a7:10:6f:8f:a6:75:5b:
79:87:76:b8:09:86:23:3a:2b:15:18:19:37:a0:d9:03:c9:43:
5c:3d:a1:9c:10:c8:e1:b1:aa:41:ee:52:f3:48:cc:51:57:fc:
02:01:ab:4a:09:1f:99:22:d0:a7:28:b6:fe:55:30:4a:84:5c:
c0:d7:ef:f0:f0:41:21:5b:2b:8c:7c:49:71:95:3e:c2:f7:69:
31:b2:4f:fc:14:d3:a8:59:db:bb:72:ef:9d:d7:6a:f6:2b:4a:
f8:37:b8:76:c7:76:fc:0d:b4:5c:fc:1a:3e:71:7a:f0:4c:6c:
92:c3:fa:29:92:09:0f:9e:80:9b:fa:e4:91:56:a0:04:79:db:
f4:7a:b7:8a:c4:be:ed:4c:ac:81:f9:50:93:81:8a:1b:e5:c7:
42:5b:57:37:da:f6:6f:eb:80:f2:50:09:18:46:93:de:85:91:
19:cb:0c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:53 2025 by rpki-client