Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: kcKhfBSs8xfSuntchyvZJwKo/n0buQKz1aJZgFqkB0I=
Subject key identifier: 5E:9D:6C:9D:3E:9F:38:84:80:BF:00:12:F5:B4:BE:9B:95:8B:AC:6C
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0197741B9130BC4CC7A6B2AC11B6125F866D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 1527
Signing time: Sun 15 Jun 2025 15:00:53 +0000
Manifest this update: Sun 15 Jun 2025 15:00:53 +0000
Manifest next update: Mon 16 Jun 2025 15:00:53 +0000
Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: 6y70rA2vdtSxsXJ0JdGpLaKp8paZETu4+/4d2XgmHjA=)
2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=)
3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:91:30:bc:4c:c7:a6:b2:ac:11:b6:12:5f:86:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Jun 15 15:00:53 2025 GMT
Not After : Jun 16 15:00:53 2025 GMT
Subject: CN=5e9d6c9d3e9f388480bf0012f5b4be9b958bac6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6b:b1:6b:fa:db:6b:64:63:2a:23:08:91:fa:
28:e3:3f:39:c1:03:96:08:4f:3d:48:93:32:18:16:
20:e3:d8:a8:13:f2:82:77:25:2f:bb:3e:75:ea:43:
42:42:5d:3d:2a:fc:1d:7c:de:5f:f9:6a:04:a4:6e:
08:c2:59:54:b2:85:7e:e9:f6:7b:c7:f7:3d:02:d8:
21:ad:7e:a1:45:fa:69:40:3a:be:68:ea:a3:fb:f4:
10:b6:3d:07:8c:c4:05:3d:39:59:95:f5:25:56:78:
96:b7:61:60:f3:56:ff:7e:e5:34:d6:4e:45:f8:15:
a4:69:43:00:74:d6:7a:78:48:8f:9f:e7:5b:f6:9c:
81:72:b4:96:49:e9:fd:e3:29:d2:d5:49:c6:17:4c:
24:cf:83:5e:38:06:ee:bc:d2:71:93:be:5d:b4:57:
d6:72:51:59:50:9b:c4:5b:d3:da:79:24:df:69:68:
d8:0b:ec:2b:e7:09:96:4c:af:72:a4:7d:36:89:9e:
10:1d:9a:4a:6c:f5:13:89:a1:c8:89:7f:df:35:b6:
9e:4e:9a:1a:37:95:9b:10:68:14:07:95:e7:77:19:
a1:4f:35:5b:8f:d6:15:98:fa:9c:84:f5:99:6d:27:
6c:7f:41:1c:d8:f4:48:52:f0:b0:5d:53:22:05:d9:
24:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9D:6C:9D:3E:9F:38:84:80:BF:00:12:F5:B4:BE:9B:95:8B:AC:6C
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:73:cf:32:24:e7:3b:83:89:84:e5:cb:3a:f3:03:cc:b3:
c2:e4:8b:fa:19:ea:e4:ae:a8:d7:92:58:59:83:f1:52:24:f1:
2d:b0:f7:4e:46:27:0b:30:ba:c9:df:c8:16:f7:f3:81:60:1a:
f7:db:52:c2:2f:39:b3:d6:5f:2d:c5:d9:4d:c0:83:54:37:06:
3f:b6:b7:21:6f:d0:7b:ce:f0:09:ce:57:a2:c9:1f:6c:0c:e8:
65:12:ba:41:f6:5a:2c:79:6e:14:59:56:39:d3:9e:d9:db:9d:
b1:67:8c:e7:ec:2d:05:d4:dd:22:f0:c6:7c:71:7f:cd:e7:79:
0f:57:f7:58:0c:80:52:76:c0:8a:bd:d3:88:8c:f4:b5:93:0b:
66:a4:5b:e5:6d:6f:bc:16:09:9e:b0:59:9d:57:eb:e6:90:ac:
27:a3:db:d8:3d:38:22:16:95:6f:9a:bf:04:25:82:c1:19:68:
7b:e2:51:9a:78:be:b5:f2:97:d8:0e:90:75:ac:53:3e:d8:91:
55:a8:6f:5a:5e:74:af:4d:e1:fd:f8:ce:be:c2:9b:11:23:d9:
33:4f:03:a6:20:9e:b5:54:cd:a9:77:58:48:d3:be:f9:bc:95:
0f:5b:c8:2f:0d:b0:17:b1:16:59:b9:7e:b6:27:2f:e9:31:b8:
f1:aa:66:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:48:59 2025 by rpki-client