Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: JH9Db157ugg3jE6LA+mZW+2m+prh99wRM5DGTwfzsuY=
Subject key identifier: C3:15:27:B9:08:C1:23:B2:6F:52:F4:70:FF:74:3E:AD:66:52:56:06
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 01976929C9D754397B16EDC5A271594C1F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 12:00:35 +0000
Manifest this update: Fri 13 Jun 2025 12:00:35 +0000
Manifest next update: Sat 14 Jun 2025 12:00:35 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: MkQnrk915CSI9ZUJeDj7a8KeZHvbjvkV/Nl/2IALHYw=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:c9:d7:54:39:7b:16:ed:c5:a2:71:59:4c:1f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Jun 13 12:00:35 2025 GMT
Not After : Jun 14 12:00:35 2025 GMT
Subject: CN=c31527b908c123b26f52f470ff743ead66525606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:c7:85:cb:49:f2:7a:c4:cd:8b:ad:9d:6c:
eb:16:7e:60:14:2f:80:3f:d6:6a:ab:e9:22:4f:07:
bc:9d:cd:4c:11:83:92:c5:0d:5a:26:38:49:b1:83:
9e:cb:17:07:00:f0:93:a2:0d:e2:47:85:37:a6:72:
e3:eb:98:f7:03:b9:0e:29:ce:2a:69:b9:ca:31:f7:
f5:ae:03:32:39:14:f9:64:14:a3:04:bc:83:00:87:
32:5d:4a:9d:c8:7a:27:a6:60:11:01:c0:13:8f:be:
79:12:3a:71:02:08:bb:3e:17:7a:bb:bb:e5:bd:c7:
fe:a9:04:7b:43:ce:c6:1a:37:8b:39:90:e4:91:d8:
ec:47:9e:8c:b6:2d:6d:a9:37:69:f2:3e:c2:f8:0c:
30:f4:c6:63:f2:85:b3:54:27:5c:85:0d:e6:40:d6:
2e:3a:fb:1d:50:ab:9d:a7:06:07:61:00:97:6d:82:
42:35:74:0a:26:ef:ba:4d:95:b8:02:6f:06:1f:6c:
1a:ea:cc:c5:ec:51:ca:1d:7c:16:2c:4d:c3:61:ce:
4c:46:d9:2f:e5:88:5e:b0:5b:d2:54:0d:09:42:81:
67:da:0f:c1:1b:f0:bd:1b:c6:64:f7:c5:bd:7b:35:
bd:08:02:49:25:3c:03:d6:0d:51:28:0e:1a:17:4c:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:15:27:B9:08:C1:23:B2:6F:52:F4:70:FF:74:3E:AD:66:52:56:06
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:70:f5:cc:16:61:f0:a1:a6:4e:11:c7:c2:3e:ba:47:ef:32:
2d:c0:fd:19:55:93:e4:f3:a5:3d:8e:85:5e:ea:aa:58:d1:94:
a9:e1:7d:89:40:93:87:e3:c4:98:42:11:11:02:ee:35:a2:39:
fa:0b:8c:e4:e6:04:ae:5c:b6:ae:87:89:9a:f7:a8:d6:ca:91:
74:4c:1d:f7:65:70:5a:db:4e:6b:66:9e:41:d4:db:4c:a6:ce:
75:08:b8:e8:06:11:7e:e4:45:c8:b3:14:58:ff:be:29:c5:53:
b0:cc:e5:b4:89:06:d3:0a:89:3d:05:7c:16:bd:a9:a4:3d:c7:
32:f3:12:25:5e:e9:af:78:b4:6c:22:be:4a:9e:e9:f5:3b:b0:
75:82:de:51:aa:fe:2d:f8:15:47:04:eb:b0:c6:c0:3c:ff:e3:
70:6d:36:57:9f:d1:b4:2d:7e:19:5a:e8:e5:85:7b:f3:51:9f:
a9:9e:2e:48:9d:87:0e:c2:ae:9f:ab:8e:1f:ad:25:c4:0a:a5:
eb:b7:a9:6d:60:e0:1e:53:23:23:bb:dc:b8:03:dc:a0:96:16:
e3:74:dc:fa:61:80:24:59:fb:4f:83:90:1e:65:23:9f:cb:22:
df:d5:4b:a1:d0:25:c6:cc:dd:a2:11:1c:93:bf:5a:92:23:ea:
38:3a:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:46 2025 by rpki-client