Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: spt34FgCp1nmUlUrFcdGHQMXk669JJIPlXNaTllAarQ=
Subject key identifier: 27:69:CD:4E:7C:40:AA:C4:1F:58:F9:CE:AD:78:8C:E9:4D:84:E5:7B
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 01976929EC4E7D4F6541CAD181D315CD99AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 151F
Signing time: Fri 13 Jun 2025 12:00:44 +0000
Manifest this update: Fri 13 Jun 2025 12:00:44 +0000
Manifest next update: Sat 14 Jun 2025 12:00:44 +0000
Files and hashes: 1: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: CP7hygdpm4PGgk0j2v2IzTgf+5KYx1XPNb2GUeTvB7Y=)
2: PH1KPTvJYv47OjAjiI-5OkL1pNU.roa (hash: 2IzqWVU8JQGawrqtS4bnXQhHUBo8/qehpa6NqKn8fqM=)
3: xXZrc11XJMpe3FIEgXquZ7cQMc4.roa (hash: 0ZmFSW3jR6m6Ytqwpd1AemcuQmGYOC/9lY5R72sJjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:ec:4e:7d:4f:65:41:ca:d1:81:d3:15:cd:99:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jun 13 12:00:44 2025 GMT
Not After : Jun 14 12:00:44 2025 GMT
Subject: CN=2769cd4e7c40aac41f58f9cead788ce94d84e57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:23:9c:e1:58:12:e7:ab:1d:8f:f6:da:58:
c5:fe:5b:6a:f7:77:ea:f7:56:ee:b1:3a:c7:1d:d2:
b5:69:0c:f3:c5:96:9f:18:9e:5c:26:47:ff:56:8e:
30:0f:14:c5:0c:3c:0c:01:9c:57:8c:66:93:c9:bb:
09:67:1b:e9:27:e3:5d:31:60:79:04:c3:f8:07:3b:
be:4e:b1:d3:fb:fe:0c:2b:8d:95:db:ee:1d:38:de:
f8:8f:b4:c2:5d:1d:14:fb:55:56:51:15:5a:93:68:
f8:02:99:e6:54:02:7f:41:b5:6f:70:73:eb:0a:b5:
02:ee:e1:bd:6e:c7:ed:2f:89:93:95:94:5b:1e:8b:
93:08:63:88:87:1e:59:65:29:be:f8:1e:88:90:e9:
c8:fc:8d:07:dd:2e:34:71:3a:8e:62:ae:aa:2a:09:
85:f8:24:17:ad:0d:40:11:b9:8f:1c:0a:12:c1:a2:
39:1e:f9:6a:69:3b:43:89:e1:42:45:da:e0:2f:3d:
43:26:22:ff:7d:1b:5a:e7:fb:86:81:d3:90:6b:57:
d9:ce:21:96:fa:3d:e2:7c:0c:08:89:e5:ab:2d:79:
58:0f:f6:33:67:f1:bd:a0:37:d3:b4:30:03:6a:ea:
a0:49:07:ca:2b:73:a0:47:00:7a:51:c0:f6:67:de:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:CD:4E:7C:40:AA:C4:1F:58:F9:CE:AD:78:8C:E9:4D:84:E5:7B
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:12:7b:ec:ff:1c:ea:8f:d9:36:fe:2e:4d:1d:05:4e:80:06:
18:12:eb:5e:50:07:cc:39:44:ae:2c:2f:49:80:bc:d1:b1:a6:
40:c7:19:50:5b:cf:70:0e:3e:09:e7:44:a8:66:11:0a:f6:93:
d5:3e:86:ac:ec:6e:92:d9:dc:c4:ee:ac:21:5e:33:d9:ec:31:
2e:2b:94:78:4e:98:db:2d:bc:b5:b8:8e:48:86:88:c6:f5:b7:
61:fd:c1:b8:b9:3f:1b:9d:94:6c:9f:8a:60:4f:61:73:e8:c3:
16:4c:9e:df:99:7a:8a:9f:6f:8b:49:00:71:ee:19:5d:f7:af:
8b:ce:fe:df:e0:3b:b7:cc:84:b4:58:a0:94:fb:6d:d2:65:e0:
c4:26:dc:95:bc:53:4a:52:e6:bd:19:38:66:35:d1:9d:57:19:
3e:cb:1b:87:bb:4b:c8:67:5b:ea:b7:9b:71:c8:41:61:fe:72:
90:dd:9e:30:4e:86:4b:80:d1:13:2d:17:5a:1a:86:59:d0:91:
cc:67:ac:fc:f1:fb:7b:88:ea:75:27:39:5f:d9:87:26:29:7b:
3f:cc:8b:bc:2e:48:39:5b:32:46:08:49:00:47:99:d8:10:5b:
ce:b0:4b:6b:a6:ec:9c:b6:c8:6b:b7:b6:75:a3:99:0b:7f:73:
c3:91:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:26 2025 by rpki-client