Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: fEAr2+/OECICXFloHbjvQQeFpyPIpBq3/UWeDm+aqgQ=
Subject key identifier: 8F:A3:66:9D:CE:F9:89:E2:F2:6D:79:8A:72:F1:73:A1:51:75:5C:86
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 01978BB5B05C67D05B4A93F8E35BFED0A501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 0C47
Signing time: Fri 20 Jun 2025 05:00:29 +0000
Manifest this update: Fri 20 Jun 2025 05:00:29 +0000
Manifest next update: Sat 21 Jun 2025 05:00:29 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: S0mEdHRunOvMM6/ss/1X2WB4odOB5+zSyAvg5pgLJ3U=)
2: Z51tk-_RA8tS0qKG579XKDThD1k.roa (hash: jrw3DdxxDeKhPMS6oVcqpTg9EmGuyht4s1KNeKcKW/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:b5:b0:5c:67:d0:5b:4a:93:f8:e3:5b:fe:d0:a5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Jun 20 05:00:29 2025 GMT
Not After : Jun 21 05:00:29 2025 GMT
Subject: CN=8fa3669dcef989e2f26d798a72f173a151755c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:01:4c:14:54:0b:77:4c:08:12:ec:e0:89:
74:e0:c2:e5:6d:98:c3:61:8c:62:a6:7a:4b:29:c9:
ae:99:6e:db:39:3f:86:86:a0:6d:b4:fb:5b:6f:90:
10:b8:5d:1a:7a:77:44:30:0d:77:c0:78:ed:4c:48:
96:5f:b7:59:42:82:c1:5e:1e:6e:a9:23:a5:f4:d1:
db:14:bf:72:73:ac:5e:0f:ea:1b:7a:0b:f0:9f:26:
33:44:96:fa:8c:a6:0d:f6:2d:f1:c8:98:d6:64:d3:
7f:98:bb:02:53:90:59:de:ed:26:9c:b3:4b:43:d4:
c9:66:03:5b:83:dc:86:c9:51:b8:dc:90:2b:ea:d4:
8e:a9:6f:3b:89:bf:47:44:8d:0d:72:ce:49:84:40:
fa:77:0d:91:dc:2d:37:b2:ee:f1:87:4f:72:21:05:
0f:3c:53:a2:31:b9:03:5a:54:30:ce:a3:a0:ea:22:
ce:7f:b8:eb:60:e0:d6:d6:f7:b7:9a:11:15:a6:88:
cd:d8:ec:30:23:21:f6:ab:02:b3:64:55:c2:dd:76:
eb:ce:b1:6c:7f:55:d7:79:73:d5:7d:e6:5e:72:d5:
ad:2a:20:89:8e:05:32:db:51:33:c0:75:9a:58:da:
2d:a1:ff:94:d7:37:a6:f2:87:b3:b4:8f:69:98:42:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A3:66:9D:CE:F9:89:E2:F2:6D:79:8A:72:F1:73:A1:51:75:5C:86
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ef:3c:51:09:3f:8f:f2:97:bf:84:b6:aa:c1:9d:9a:a9:90:
61:6a:0a:70:b8:2e:96:2c:e8:79:52:cb:61:01:ad:75:24:69:
cb:15:e4:87:5e:fc:65:d4:71:ef:0c:a8:67:b8:59:63:2a:52:
a5:e9:27:5d:23:cf:0d:33:ff:6d:96:e4:dc:23:79:8c:d1:cf:
05:94:6a:b0:da:22:d0:04:1f:83:4e:17:e5:2f:58:7a:44:cf:
05:df:66:72:48:a1:18:eb:d3:46:01:78:21:be:67:66:13:07:
2f:84:54:af:26:8b:d7:3c:80:85:ea:fe:21:21:29:5e:ce:e1:
11:31:80:8a:44:74:c8:75:ea:8f:9c:e7:96:26:00:2c:eb:d5:
1d:f5:ee:a7:e8:96:f4:89:8a:08:8b:a1:fe:b2:5e:68:75:60:
a7:21:60:31:3b:fe:69:ea:68:11:73:12:b9:26:aa:ab:86:c9:
be:3f:a6:e2:93:64:59:34:09:6a:2f:b8:8e:35:97:c3:e6:b0:
0f:80:f0:ce:dc:89:3a:fc:50:b5:14:c6:a3:2d:bf:7f:69:8e:
30:8b:ad:0c:c0:72:20:c6:cf:88:d7:b0:f6:ca:fa:fb:dc:d3:
b7:ee:90:4b:d3:48:55:43:49:a6:38:3f:eb:c4:49:dd:54:5f:
4e:7a:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:46:32 2025 by rpki-client