Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier: aAGaGUGN7tKVu2aZuVOWmVpza1o7AtwBfI6ozo7g/0c=
Subject key identifier: F6:53:3B:DB:D6:84:8F:AB:84:95:6A:6A:12:3C:45:FD:2F:A4:9B:AB
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 0197778A5D4D0EB9F62D90E5F574E64CFF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number: 14FB
Signing time: Mon 16 Jun 2025 07:00:45 +0000
Manifest this update: Mon 16 Jun 2025 07:00:45 +0000
Manifest next update: Tue 17 Jun 2025 07:00:45 +0000
Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: 4DZ/WolMx7EU9sutsoVHKzm3vvIUvFIxm0iD72RY0m0=)
2: L5mBnSY0HeEAnUmT_xC_Qui2__o.roa (hash: pEnOPp9OXxAyhAm8z7JMf69YUoQujcTxw5JmYxCTmcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:5d:4d:0e:b9:f6:2d:90:e5:f5:74:e6:4c:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Jun 16 07:00:45 2025 GMT
Not After : Jun 17 07:00:45 2025 GMT
Subject: CN=f6533bdbd6848fab84956a6a123c45fd2fa49bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:05:87:79:76:9a:91:62:33:98:b7:04:06:
7a:2a:65:08:62:9d:6b:68:68:53:52:c3:2e:c5:79:
3b:80:54:4c:11:29:bb:60:b8:ab:7c:23:ff:d3:20:
f7:3a:15:15:56:73:56:cc:b8:e3:9b:be:6c:98:fa:
9a:0c:6b:47:9a:27:7d:bd:93:5f:73:46:63:dc:09:
32:0b:2d:a0:e5:0a:19:53:67:60:4a:3d:4b:08:76:
f0:3f:c3:08:4f:3e:97:93:73:c3:2c:ba:d3:5d:78:
c9:b8:da:a2:84:45:d1:63:4b:26:13:f2:b8:26:d4:
92:a4:2c:42:b2:7c:88:a2:1a:73:0f:f3:b5:95:18:
26:28:0e:de:d9:ab:0e:80:bd:4a:75:04:90:6f:aa:
a8:71:15:87:97:9b:75:61:fa:3e:cc:95:87:74:fd:
6b:8e:5a:00:80:d3:c4:9a:cf:1d:e8:dc:6b:66:72:
2c:b4:6b:53:70:7c:54:26:55:bc:65:ef:56:6a:c0:
2e:c0:ea:43:52:f4:32:2c:d7:95:b1:63:84:37:bf:
c8:f2:54:f1:33:ea:88:51:a2:52:73:23:00:d5:35:
83:23:e1:ee:62:70:d1:e7:67:f7:c8:89:8f:d4:75:
32:73:c3:73:d5:a9:3b:e4:3c:5f:4e:3a:7b:36:5e:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:53:3B:DB:D6:84:8F:AB:84:95:6A:6A:12:3C:45:FD:2F:A4:9B:AB
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:24:d8:be:9f:dc:b8:7b:ef:07:42:07:70:2b:0b:12:e7:ef:
ce:99:de:ba:f5:f1:4c:15:e9:96:18:86:3e:8d:64:04:d7:00:
15:3d:ca:6c:5f:39:0f:2c:6d:bd:a2:de:e0:90:e3:3e:21:9b:
0b:bf:a3:47:d5:88:fc:67:7b:f8:9a:ea:da:67:84:1f:e7:f2:
31:d0:50:69:ef:b3:60:41:85:52:52:7d:27:81:f1:93:95:8e:
64:f7:23:dd:7e:3e:ef:68:a7:9e:87:c6:ba:3e:c2:df:05:4f:
26:ea:51:d1:32:4b:00:2b:9a:91:bf:05:19:57:f6:f6:68:95:
ae:92:dd:7b:56:be:13:e3:bc:0b:22:39:b5:e9:d3:c6:25:e8:
3b:4f:c9:ff:a0:be:ec:1b:75:87:f9:74:33:11:8a:da:9b:74:
ba:64:05:d0:15:db:94:3c:4b:48:14:50:cb:f0:93:7d:cf:66:
a7:e5:91:34:ea:ac:dd:26:51:6b:7d:26:48:d4:bf:f1:ff:92:
f3:bb:7d:f7:0c:53:d0:09:2d:4f:fd:39:6d:d2:c8:c3:c5:40:
9c:28:15:0c:d8:ba:67:ad:dd:b6:6a:31:86:1f:e5:e5:97:27:
73:bf:86:d9:5c:e1:7c:0b:93:85:63:6c:d3:45:07:41:3f:22:
61:08:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:46:39 2025 by rpki-client