Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
File: HWtralBhpBFdUwQM_9xks7DXGng.mft (raw, json)
Hash identifier: Xs1XohV12JjKwT1dcmXRn1CBnLgJiRfJU1Oi/5wV2ac=
Subject key identifier: 8D:BD:2F:0A:12:2A:6B:54:39:B2:49:86:A1:E5:19:20:13:1C:13:EB
Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
Certificate issuer: /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Certificate serial: 01976CCF98A19F77DDEB4FB99CD6CE7A6C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 05:00:33 +0000
Manifest this update: Sat 14 Jun 2025 05:00:33 +0000
Manifest next update: Sun 15 Jun 2025 05:00:33 +0000
Files and hashes: 1: 59rlgV96ANnvbttVckQTSpcL4gg.roa (hash: yMmqOnSAlEZI0n5Ljt8KnwxkwDwpOxx+NBJ3GGUG5bk=)
2: HWtralBhpBFdUwQM_9xks7DXGng.crl (hash: gFgEPpB3mWJrVqtNPu4ZPwxRF0sXif032hlghbZMXqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:98:a1:9f:77:dd:eb:4f:b9:9c:d6:ce:7a:6c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78
Validity
Not Before: Jun 14 05:00:33 2025 GMT
Not After : Jun 15 05:00:33 2025 GMT
Subject: CN=8dbd2f0a122a6b5439b24986a1e51920131c13eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:6a:c5:c0:49:b0:48:5d:a7:8d:82:c2:ab:
53:7a:88:6e:ac:ac:7e:a4:6d:2f:ad:8a:c2:9a:bd:
4d:70:ba:d6:6d:d0:c1:0c:8a:00:10:c2:da:1e:04:
fd:10:a6:86:38:e8:1f:74:8e:fd:65:84:6b:55:40:
0c:56:d8:36:78:3a:6e:a4:b4:b2:d3:d4:29:16:6f:
c1:ee:ad:af:f2:c9:96:22:b4:f2:e7:cc:b9:85:d3:
e7:2e:64:5b:5f:86:01:8f:5a:9c:64:72:b3:7f:15:
89:ea:e6:23:14:7f:56:74:81:bb:29:5a:23:7d:20:
5f:b1:24:2d:1c:4c:34:68:af:9e:19:f4:31:27:e2:
f2:75:f6:7d:36:82:14:b9:95:09:bb:66:6f:92:b4:
aa:c0:37:80:32:3e:aa:49:f9:2b:25:c7:71:d1:5c:
ef:f9:ef:d3:f2:39:c0:62:70:a6:7f:28:2c:de:e2:
78:e5:54:21:81:7e:b1:78:ef:23:90:fb:56:33:28:
bd:e4:13:c5:94:37:04:86:ee:a9:bf:c7:b3:30:15:
9b:dc:13:4b:52:b1:f4:5e:39:73:c2:d5:d8:fd:99:
3f:f4:95:7b:2f:7f:40:a6:0e:1c:24:4e:d2:22:df:
2d:d7:f4:f1:af:17:93:b7:7c:ca:67:ba:55:cd:58:
0c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:2F:0A:12:2A:6B:54:39:B2:49:86:A1:E5:19:20:13:1C:13:EB
X509v3 Authority Key Identifier:
keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:63:f3:93:c0:80:9b:7d:71:18:a4:89:b7:72:97:62:8c:
65:34:56:d3:07:a3:be:1e:bc:81:1f:2f:1c:9c:bd:ff:78:74:
7e:26:f9:9d:a8:db:53:f0:a0:ed:23:99:49:fe:44:40:7d:e2:
4d:f8:33:ce:73:59:3b:a8:71:d1:19:bb:45:b8:50:c2:6a:2a:
a8:f0:52:32:ea:5f:59:81:70:7b:20:83:f9:b2:47:2f:f2:89:
25:9f:8c:ec:a0:7c:a9:98:83:da:26:98:7b:aa:06:8d:40:01:
56:97:61:1c:b1:da:f8:30:1a:cf:b1:bb:75:bb:d5:14:43:e2:
f5:e4:46:fb:dc:4b:48:ab:08:f6:c9:9f:61:ab:0b:03:a0:28:
ac:ff:7b:b8:b8:f3:cd:94:5b:df:0c:e1:7f:5a:25:ec:1a:9c:
2c:ce:ad:0a:76:6c:42:4a:78:c1:08:7b:39:33:6a:f7:30:37:
12:1f:83:db:d4:e4:27:bc:9e:e4:d7:83:5c:f8:cf:62:6b:54:
94:be:69:1d:01:82:c0:de:a5:c7:ba:f8:a9:08:41:3b:1d:46:
97:56:1f:e0:bc:09:01:9e:bd:92:39:ab:ba:53:58:ed:a9:6c:
73:fc:d9:49:58:05:ac:df:c2:43:03:37:27:3f:d2:49:ec:1a:
96:26:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:12:52 2025 by rpki-client