Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
File: HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json)
Hash identifier: RvFgZuvCb3lEjDFBsIPqXu6Z7U+kS70OA/6kJtPVSIY=
Subject key identifier: BD:AD:A9:B0:54:CC:38:13:E0:50:2C:FF:CB:15:66:07:44:2C:77:A0
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Certificate issuer: /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial: 019771886E4B5EC33E464CC290326D79AB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 03:00:55 +0000
Manifest this update: Sun 15 Jun 2025 03:00:55 +0000
Manifest next update: Mon 16 Jun 2025 03:00:55 +0000
Files and hashes: 1: 1Az4dE0ZX7KAKDKykX60lhzHZkE.roa (hash: 8wvcW71BfAfRwFPQ94lUDGje+TfkTvnyVdfl40+6qJo=)
2: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: CRhvXTGlwgH7Jrajg8woAL5/DnUXEcbB30aa4nlGQMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:6e:4b:5e:c3:3e:46:4c:c2:90:32:6d:79:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Validity
Not Before: Jun 15 03:00:55 2025 GMT
Not After : Jun 16 03:00:55 2025 GMT
Subject: CN=bdada9b054cc3813e0502cffcb156607442c77a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:87:b1:64:de:3b:7d:48:a6:c8:ce:b3:b5:
c2:56:01:84:c2:09:82:2b:19:03:80:1d:b5:ad:bd:
85:5b:e6:2e:63:46:0a:46:ed:fe:41:19:47:a5:39:
d9:06:59:86:d8:b8:e4:00:01:5f:cd:27:43:42:8e:
37:c7:2f:2d:08:83:06:74:42:38:cb:e2:f2:39:10:
02:22:76:f8:b3:03:cd:d8:1b:55:9c:35:ae:43:6b:
87:67:1b:52:62:a2:ce:b0:fd:92:63:4f:37:77:55:
67:f6:cb:32:c4:8e:92:d8:f0:88:39:18:ba:6e:b0:
93:75:67:a6:99:4d:be:29:bb:a8:97:d0:cf:d8:d5:
f0:7d:03:0c:6f:af:6a:2e:c2:ad:d5:e4:af:9b:46:
e0:d8:72:50:b6:b3:c7:f2:6e:37:0b:12:15:f5:65:
ff:04:19:43:fa:9d:e5:0c:18:f6:c9:f8:9f:99:bc:
83:36:03:7a:f6:83:76:6e:8b:36:e6:57:10:00:11:
5a:01:34:8a:cf:29:7f:29:d7:fc:ce:f0:2d:af:ba:
4b:aa:8c:de:8b:de:99:2e:56:f8:b2:e6:92:5e:ab:
03:15:5f:95:e5:cd:a2:5d:c4:05:4c:df:a4:c0:f9:
2f:b3:07:02:5e:6b:86:68:2f:0e:d3:fb:3c:79:cb:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AD:A9:B0:54:CC:38:13:E0:50:2C:FF:CB:15:66:07:44:2C:77:A0
X509v3 Authority Key Identifier:
keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bc:46:82:8e:4e:77:52:c1:82:79:8d:72:f7:3c:9e:c5:f3:
ab:96:85:65:1e:3f:7f:0c:f0:02:2f:35:86:6b:38:9e:07:06:
81:df:fb:a3:f5:7b:58:72:f9:a6:f7:76:f6:a4:ed:b9:b7:44:
24:1c:dd:85:fe:98:72:e2:19:31:7e:89:5a:51:ff:12:e4:c2:
c0:23:29:54:fa:84:08:4f:5e:8d:7e:01:42:ff:22:4c:4a:dc:
b3:da:81:49:d4:c1:c3:08:d0:51:4a:6d:3d:0d:ab:1c:26:e5:
57:69:6f:c1:9c:60:71:eb:4c:52:97:f1:bb:70:ac:a4:ed:32:
df:b3:0e:26:05:5f:c6:c2:22:39:f0:0e:4b:f6:51:52:19:db:
62:42:43:ee:68:0c:c5:bc:4f:ca:d4:18:9b:59:b1:48:bd:7a:
63:ce:2d:60:1e:bc:38:05:bf:88:86:a2:7e:5b:4c:c1:5f:96:
8b:0d:a2:e8:b7:45:4a:5c:bc:28:fb:9f:f5:f1:1a:cb:3a:4f:
b7:f1:1f:a9:ae:a0:84:7d:f4:b3:4e:cc:a9:41:0a:e5:1f:6d:
f2:f3:46:66:f5:da:1a:68:dc:3a:2c:f6:93:ad:ae:a1:88:1d:
af:67:8a:7a:dc:ae:b2:2f:6c:03:25:ac:ca:2e:92:26:ed:30:
16:56:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:48:22 2025 by rpki-client