Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: S+q+dp9GPUS7QTHkbu0n9du+k4eQQWgz3ynDPMbt2F4=
Subject key identifier: 3F:50:E4:9E:C4:8C:A0:D8:B8:B5:54:E2:83:75:AF:FF:77:95:C1:1E
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 019779E6DB251EB8907621710C32513718E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 1598
Signing time: Mon 16 Jun 2025 18:01:01 +0000
Manifest this update: Mon 16 Jun 2025 18:01:01 +0000
Manifest next update: Tue 17 Jun 2025 18:01:01 +0000
Files and hashes: 1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=)
2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: kC2ct78T51ywPRp+4kLw303gxlwYhVBXG4yPDQku6Tc=)
3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:db:25:1e:b8:90:76:21:71:0c:32:51:37:18:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jun 16 18:01:01 2025 GMT
Not After : Jun 17 18:01:01 2025 GMT
Subject: CN=3f50e49ec48ca0d8b8b554e28375afff7795c11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:21:a1:8f:85:d3:12:76:d7:70:7e:d4:2b:
57:f9:ce:dc:77:cc:0d:9d:ee:d3:dd:ec:21:e8:50:
50:38:da:25:f0:28:45:ab:52:9e:43:dc:28:db:76:
7e:fe:31:cd:77:68:f0:af:2c:19:5e:05:9c:79:0b:
91:af:96:87:fa:83:12:1b:8f:d1:a2:69:83:38:7e:
00:c5:89:fa:a6:65:f6:19:d5:3c:cd:26:56:d6:d5:
b3:f6:e2:fb:e9:1f:79:6a:7c:4b:d6:d3:0a:ab:30:
c1:95:ce:c0:cc:5a:57:e2:2d:ea:47:d4:6b:f3:e1:
ad:dc:96:01:bc:f7:ac:70:08:61:6c:e9:04:ff:e7:
7f:ff:8b:d5:b8:fc:07:a1:27:94:6b:97:29:2a:fa:
1f:bc:52:0c:31:dc:e2:39:d8:27:73:da:ce:d9:f5:
10:f5:42:f1:55:bb:65:69:77:1a:c5:d5:c1:a3:5c:
8f:6a:fd:3f:10:13:db:bd:aa:d9:05:28:65:71:0f:
40:b4:cb:11:a7:eb:90:f7:3f:3f:32:2a:60:0e:09:
de:11:2f:c2:53:20:26:41:ae:64:70:b0:dc:93:ba:
a7:1c:52:94:8c:ca:52:a4:62:03:d3:33:71:ed:f6:
50:bb:e1:58:25:03:8c:8d:72:ee:e6:ef:69:93:39:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:50:E4:9E:C4:8C:A0:D8:B8:B5:54:E2:83:75:AF:FF:77:95:C1:1E
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:30:c1:60:6d:68:58:4b:46:d3:8f:ff:4c:39:54:62:4f:f8:
f5:7f:a0:39:17:29:c4:85:e4:43:fc:50:fd:9b:5e:41:27:58:
14:b8:d9:1d:bf:a6:c9:50:63:93:2a:03:f5:93:a9:bc:93:2c:
c1:68:96:99:79:ef:a7:1d:60:bf:92:85:6a:33:62:69:cc:45:
aa:6f:de:a1:2a:10:e7:cb:86:7f:88:99:76:45:d2:52:a2:b8:
40:69:3d:3f:e3:0f:af:ab:59:98:f8:80:e7:8b:e1:4e:c3:54:
cd:bb:aa:1d:37:01:64:64:f2:7b:67:36:f7:5a:48:3d:30:9b:
f2:6e:f1:d4:a7:82:eb:c6:39:ba:fa:8e:bb:38:19:ec:da:72:
20:c3:13:f3:12:84:79:83:88:80:5c:e9:5e:84:7e:b7:d2:9a:
69:23:0a:fe:96:7c:f9:7c:5d:f3:e1:ec:be:2c:af:f0:3d:f8:
ef:03:b3:ea:5f:95:84:0c:76:88:cb:fc:3c:c2:09:e8:f7:26:
b2:00:64:d5:72:cc:50:60:dc:26:50:bc:38:74:b0:85:e6:6c:
61:ad:37:36:36:31:7c:22:b8:56:9b:a2:90:66:d4:a9:1c:10:
30:d0:19:be:99:54:ef:1d:2c:4d:a7:f6:28:08:f3:e5:b7:57:
bc:67:53:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:46:57 2025 by rpki-client