Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json)
Hash identifier: FXrFJXyPIkUGJh3YKksbNgYapDrYLQDRxWodc4cFPYg=
Subject key identifier: 29:BD:33:AB:FD:55:62:40:E8:7D:18:3F:54:FA:3C:0C:E0:CE:11:6B
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 019770E324B984CA549A4C68BDA477F1490C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
Manifest number: 56
Signing time: Sun 15 Jun 2025 00:00:23 +0000
Manifest this update: Sun 15 Jun 2025 00:00:23 +0000
Manifest next update: Mon 16 Jun 2025 00:00:23 +0000
Files and hashes: 1: GuJV6tWvMc7hiklHxH5EzaRwm8k.roa (hash: SFtJeLYX3k0Bqhlczs2KFJUiSZerZ8nM1VQXRCJtLKQ=)
2: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: TMx8S4Y53RyZUVZPJg7sRSn3XQojZIU/0/v46+B84/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:24:b9:84:ca:54:9a:4c:68:bd:a4:77:f1:49:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Jun 15 00:00:23 2025 GMT
Not After : Jun 16 00:00:23 2025 GMT
Subject: CN=29bd33abfd556240e87d183f54fa3c0ce0ce116b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:ba:21:4d:b5:55:5b:60:d8:78:1a:4e:a2:
b5:be:5d:bd:e5:09:c2:83:a2:0d:be:e8:e1:92:24:
09:c0:57:d5:bd:84:c6:48:c0:39:b7:ad:6c:80:dd:
e5:bd:b8:47:9e:55:b6:b6:27:a5:8d:15:db:a4:de:
8e:35:df:1b:19:33:ed:17:a1:3c:d2:ac:14:c1:17:
34:fe:92:dc:95:c4:02:0d:20:71:bb:86:ba:66:35:
60:28:4d:5d:76:22:94:ff:43:4e:c8:e3:7b:c0:cb:
23:44:38:2b:df:2d:e2:1d:03:57:6f:59:54:51:ec:
39:77:2a:ab:f8:91:c1:8c:a9:ad:4f:2d:6e:f7:bf:
c2:62:a7:31:ef:6e:59:33:51:43:48:54:21:af:7b:
33:ae:06:c6:fc:72:52:82:57:47:bd:ec:db:71:de:
57:3e:ee:ce:51:5a:f5:85:5c:89:28:97:cd:7e:42:
71:e4:c5:c6:33:f4:fb:14:b6:7a:7d:97:54:ee:ba:
b9:7f:f8:f8:42:3b:84:10:81:94:fc:ad:c1:7d:72:
fb:62:9a:6f:23:c2:a8:a5:9f:4d:09:09:0f:35:96:
58:f7:45:5c:1d:a6:7d:70:8b:05:37:2b:8b:2a:5d:
3f:fc:a7:df:d7:6b:96:99:20:ce:6e:b8:2c:63:d5:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BD:33:AB:FD:55:62:40:E8:7D:18:3F:54:FA:3C:0C:E0:CE:11:6B
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1e:26:d0:22:8e:68:e0:8a:4c:70:11:75:4e:f1:d5:71:45:
7d:80:c2:50:fc:a4:5f:7d:1e:9f:89:00:aa:ce:9f:e4:f0:39:
55:78:a3:12:a1:d5:b2:56:c7:35:2f:8a:68:a6:48:2a:a5:ff:
9a:1f:98:e9:a7:8d:17:6a:75:2c:1d:5c:c7:2b:6b:b1:a1:cf:
87:12:e2:a4:f1:c3:59:ca:5a:f4:d7:b1:39:cb:18:6a:0f:b5:
df:df:a5:f6:0d:e1:e4:9a:50:5e:90:d7:7d:21:72:6f:22:e9:
eb:8e:3d:02:c8:98:53:77:58:ae:a4:2f:21:92:6a:20:8a:fc:
17:32:b3:fd:1e:82:3d:88:c7:3f:8a:44:75:95:b4:15:2d:b9:
ca:d5:84:0c:5d:72:36:0e:3e:a1:d6:8c:4c:46:4b:1d:87:ba:
c2:66:e9:95:3f:d9:92:b0:42:00:5a:05:1a:18:b3:38:d1:8b:
91:5b:75:cf:89:ea:50:c5:15:c5:66:f2:50:8e:92:b2:83:1b:
02:61:3b:be:2a:3c:c0:65:1a:47:a4:5c:77:e0:cd:fe:86:13:
b0:b8:8c:8a:62:b9:a3:c9:85:28:ff:a1:82:4d:aa:40:de:f2:
aa:04:9c:d8:68:c7:ae:14:96:b2:d7:23:d6:97:9d:b0:1e:69:
8b:b2:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:18:42 2025 by rpki-client