Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File: HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier: wXRnRmhsy9AGrshOBIVP3vCJXELh4bcW/dnEMhrwGsQ=
Subject key identifier: 80:46:C0:BB:2B:66:3E:B7:0C:8F:71:E1:64:F3:50:35:3D:FC:62:FC
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 019794EF8C6D75A4CACC5F61F7EB279E322C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number: 10EF
Signing time: Sun 22 Jun 2025 00:00:16 +0000
Manifest this update: Sun 22 Jun 2025 00:00:16 +0000
Manifest next update: Mon 23 Jun 2025 00:00:16 +0000
Files and hashes: 1: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: nATX6Sx4XtXTDVEdN9JDGCp86H3lpU2hsug2w9eR9NQ=)
2: I2Um-BptLNwnopUXCKyaHVD-kHY.roa (hash: oaTE3K1HG85ox8sjIAMWSASmDZ12fR3RjImb2V3uqGk=)
3: V64dlNuRxsB4pj8KUNyI80O85tg.roa (hash: 2nVKvx4azH+bxWy0PRhnAkeITVbTxn6s3MeHunV69tk=)
4: edFVYVioPZTorF9uuac8djTSV64.roa (hash: Sqg7k+1F+ZM0n3f+ttHkMFPzbVfUdm2GmmTGOixgY9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:94:ef:8c:6d:75:a4:ca:cc:5f:61:f7:eb:27:9e:32:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jun 22 00:00:16 2025 GMT
Not After : Jun 23 00:00:16 2025 GMT
Subject: CN=8046c0bb2b663eb70c8f71e164f350353dfc62fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:62:31:15:94:d2:ac:16:57:88:ba:55:9b:
6a:c3:6d:29:e4:24:27:e4:88:16:f7:ce:13:f0:a3:
7b:31:78:dd:9e:50:60:22:7b:a0:47:c3:5e:ed:c2:
75:20:fb:a6:6e:71:b6:72:fe:5c:03:e5:5d:0d:c3:
02:b5:38:b0:14:4d:16:25:53:fc:ce:98:31:4f:f2:
19:0e:01:e1:03:dc:b6:c6:71:41:07:a8:dc:2b:b2:
f8:eb:e0:57:19:bb:59:2f:a2:3f:36:42:ce:53:a8:
3d:e0:41:74:4c:21:dd:23:78:57:92:df:24:5d:ef:
96:b9:74:20:26:aa:21:3e:54:13:90:28:89:28:2d:
18:b7:9c:27:bb:01:77:c6:d8:2a:37:eb:18:13:20:
11:9c:74:96:ca:b3:71:3c:d2:f2:d4:22:02:71:0b:
d3:51:78:db:53:e3:df:ef:f3:f3:0b:0f:57:f1:1a:
e4:da:4b:5b:73:cb:37:67:9a:e1:ad:07:a1:57:9f:
45:0e:32:00:fb:77:69:87:45:59:2a:90:dd:da:83:
b3:8e:94:31:60:d3:8f:50:dc:77:66:4e:32:89:b2:
2a:d9:b9:79:45:86:0f:61:b5:45:c4:5a:40:72:cf:
a8:77:56:54:6f:65:70:c2:ff:07:c4:d0:c7:4a:29:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:C0:BB:2B:66:3E:B7:0C:8F:71:E1:64:F3:50:35:3D:FC:62:FC
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d0:5e:30:93:2a:cc:93:67:32:5e:ce:25:14:8c:67:ab:50:
1c:86:85:04:6d:f6:cc:d2:e4:f9:89:52:5e:0b:66:85:4b:36:
1a:3f:58:4e:c6:e8:af:78:1c:09:c6:9e:90:d9:50:35:a5:7f:
fb:48:47:4b:69:31:bd:76:30:c4:e6:b7:92:4c:63:bd:9c:b6:
f1:4a:1a:26:87:86:21:ed:b6:81:4d:ce:92:ea:e9:6e:6f:94:
4e:9a:4c:9f:58:15:21:ef:6b:85:cf:59:d1:ee:0c:2b:40:ca:
fa:e4:7f:68:85:c0:a2:28:c1:bd:5c:4b:80:90:35:81:6f:b6:
ef:41:e5:8f:8b:84:d8:6e:39:ba:f5:68:dc:2a:a3:76:56:5d:
27:31:6e:11:e8:28:be:64:6c:b5:27:ac:6e:9b:5b:c5:c5:97:
9e:58:f9:4f:8b:38:b1:ff:99:15:86:c6:e7:fe:c4:ca:52:aa:
6a:45:d1:f6:45:51:ef:51:3f:2b:f5:71:3d:12:38:8b:e3:dd:
10:3b:07:41:ae:67:fe:bd:75:02:39:fe:8d:4d:56:e2:06:24:
5c:b9:77:d5:f2:3a:ba:89:f1:19:c0:07:25:34:4c:63:1c:12:
bc:1c:09:08:d6:59:3a:5f:45:7c:55:58:ff:56:89:6b:2b:4c:
f8:5e:ea:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:04:36 2025 by rpki-client