Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: 8AYPiE1fnFbvCHLRYnRuqDWx7Bbpo/bhf8m9Mv8MCRE=
Subject key identifier: C0:31:9D:63:B1:6F:3B:2A:4E:52:39:CE:5F:5B:58:B2:03:00:EE:E0
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 01976E86F8CFDBB425F11FC38636B71B1C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 11AA
Signing time: Sat 14 Jun 2025 13:00:28 +0000
Manifest this update: Sat 14 Jun 2025 13:00:28 +0000
Manifest next update: Sun 15 Jun 2025 13:00:28 +0000
Files and hashes: 1: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: gigvztw3DOmMOD06tKmLjvohq919lbeq0jG4VJKPHcg=)
2: sw4N2lxJHY4O1_YExcGjN1F8VGo.roa (hash: KXUZgZkZitwfC1Jk6g2FCiMl9s8x5hfwqmR4gq981VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:f8:cf:db:b4:25:f1:1f:c3:86:36:b7:1b:1c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Jun 14 13:00:28 2025 GMT
Not After : Jun 15 13:00:28 2025 GMT
Subject: CN=c0319d63b16f3b2a4e5239ce5f5b58b20300eee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:27:35:6e:a0:a8:e9:5a:b2:02:c0:6e:a1:
52:10:0d:8d:d6:70:68:80:a3:5b:e5:25:e3:5d:12:
1a:89:e3:73:14:c1:b7:3e:d0:fa:91:7a:10:fb:74:
fe:ae:81:63:64:22:0b:68:78:85:02:54:65:48:3e:
24:ca:1a:2a:4c:41:db:b6:55:40:61:5e:86:a5:01:
78:44:e7:5f:4b:25:6c:61:54:3a:d2:4d:ac:53:f2:
be:c6:45:56:01:71:a7:ec:68:48:e8:9e:26:92:a7:
bf:8a:ea:2b:4a:42:61:3b:ac:3c:13:2f:b2:5a:2d:
93:71:1d:8c:fc:ac:d1:19:20:c8:e0:5a:c7:43:1d:
27:61:a4:ec:e2:63:90:df:71:4a:e0:bc:23:10:e6:
21:30:c3:b5:30:bc:85:79:e8:13:dc:33:dd:a1:d7:
66:73:67:8a:85:ea:c7:17:30:2a:87:b0:f7:58:8c:
a2:f9:56:74:f1:5d:2e:84:7c:fd:10:cd:a0:ce:dd:
a3:b2:58:3d:03:32:a2:c1:9d:35:27:0e:75:a6:e9:
bc:56:20:ea:b9:31:3d:15:ba:b9:40:2e:10:06:db:
6e:94:50:11:10:6d:de:ef:38:75:71:42:be:10:c8:
1f:58:7c:f1:fb:a8:f1:54:38:39:57:6e:03:d7:b1:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:31:9D:63:B1:6F:3B:2A:4E:52:39:CE:5F:5B:58:B2:03:00:EE:E0
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c1:38:e7:c1:b6:e7:e5:e7:00:59:a7:09:ab:48:24:7a:5c:
9f:34:b6:05:2a:bd:0f:b7:03:fa:d3:b9:f4:38:55:9e:6a:29:
c7:04:41:c2:8f:b1:b8:40:b1:a7:c9:4b:e3:e1:20:b2:58:fb:
6f:c7:5e:34:2a:75:a8:91:4a:7c:41:c8:a1:1d:7e:56:ea:7e:
a1:44:d2:1c:65:d6:9a:40:92:c3:0e:21:a8:77:28:91:8e:7b:
9f:3f:37:e7:71:00:0f:c5:dc:64:fb:9f:00:23:d7:3a:79:bc:
0b:96:66:79:48:39:13:9a:54:91:b4:17:1e:b9:cf:03:c3:e0:
f1:cf:48:c7:eb:ed:2b:e3:e7:44:6f:cf:0c:e5:e1:ee:07:22:
04:1f:36:2c:ff:33:c6:5f:4a:bc:8a:e2:9d:9e:01:31:8f:8a:
9f:57:d1:16:2e:85:b9:ee:dc:6d:d4:27:c1:06:e3:15:f7:87:
62:98:7b:70:f8:c6:88:56:e5:1d:38:49:74:ab:83:d3:76:66:
1f:ac:ea:d3:81:5f:0a:9c:90:46:e2:29:dd:2c:40:3a:03:79:
9c:25:22:35:e9:10:06:03:8b:59:c3:29:77:ba:59:39:89:4b:
17:c5:aa:f5:ab:20:ef:7c:5b:c9:cc:7c:53:a7:16:8b:f2:c4:
d0:b1:12:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:44 2025 by rpki-client