Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: NdlHc3KPfjjcNIx5s8dbJr+ZvKAmgwLO+KitNOJcvn4=
Subject key identifier: 03:89:83:7D:A7:0C:58:9A:A8:AA:C2:75:73:D1:FE:30:10:37:11:2A
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 01976B863798A756F55DDA32D9967CCE5A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 0EFA
Signing time: Fri 13 Jun 2025 23:00:47 +0000
Manifest this update: Fri 13 Jun 2025 23:00:47 +0000
Manifest next update: Sat 14 Jun 2025 23:00:47 +0000
Files and hashes: 1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: OWU2pLLpI3oXAhJZA2V1XRD5NI/V8P/0Ydspocs9wAg=)
2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=)
3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:37:98:a7:56:f5:5d:da:32:d9:96:7c:ce:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jun 13 23:00:47 2025 GMT
Not After : Jun 14 23:00:47 2025 GMT
Subject: CN=0389837da70c589aa8aac27573d1fe301037112a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:21:2f:eb:85:63:d3:71:cc:a8:3f:68:7a:
96:b3:d1:81:ad:d6:7b:78:a9:26:ad:85:3e:ec:a9:
dc:1a:d5:18:ac:0f:97:dc:d8:fa:11:44:0e:0a:e2:
1c:11:84:43:37:e3:8c:4c:70:8c:6d:c7:d2:f5:a9:
8a:b0:7e:39:27:c1:f4:ad:7a:15:78:6a:25:64:51:
f6:a6:d4:6e:86:75:7b:20:2b:f7:3c:40:e6:8c:eb:
4a:70:a0:a6:3b:df:fd:7c:dd:6c:1f:fa:86:5d:35:
01:71:ec:f8:16:44:66:d9:07:01:9f:a3:e0:59:31:
56:e1:61:31:de:e7:19:f2:45:80:2c:d7:05:1b:79:
38:82:cc:1b:06:ad:fc:9c:80:90:60:ff:c3:c6:8f:
e2:b4:93:e4:8e:6f:ff:c8:3e:8e:20:d1:c6:cb:17:
f5:f1:89:40:63:72:e9:91:de:35:7b:54:9a:af:ea:
2f:5a:2b:97:a2:43:d9:bd:37:3a:5f:5b:a1:f6:9e:
c9:b0:6d:50:8f:c5:e9:79:60:51:8c:07:8d:b0:cc:
46:04:35:d9:26:d0:0c:21:ba:b0:ce:9d:30:37:85:
a0:90:8d:0a:48:c8:f5:46:1e:e3:df:8d:86:32:fa:
b8:60:db:d1:7d:42:71:36:f1:59:75:40:0f:d3:9e:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:89:83:7D:A7:0C:58:9A:A8:AA:C2:75:73:D1:FE:30:10:37:11:2A
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:94:69:5e:01:48:32:56:3a:55:1f:9b:88:f4:5c:65:ba:e4:
a3:6e:18:c9:82:ad:c8:0d:3b:7b:6b:ff:7c:58:32:6a:42:9f:
5c:4b:3d:d4:c9:37:e2:1c:72:b7:07:7a:bd:1d:d2:19:f7:db:
01:8a:54:b2:e0:fb:97:79:e8:b7:61:36:cd:ac:c2:2c:cf:82:
3c:25:e8:c6:5a:41:55:66:3e:90:bc:b8:1d:8b:33:7a:89:41:
61:eb:1f:b1:11:05:f3:22:c7:38:27:25:ad:21:3f:da:8b:62:
7c:65:9f:98:77:0b:b6:70:65:fa:ed:cc:64:3a:14:2c:68:04:
71:68:4a:82:53:69:a6:cf:66:52:3a:65:37:7c:93:48:00:73:
72:60:18:3d:bf:5e:39:fc:ce:21:4a:35:be:df:a8:b6:94:23:
3e:2d:b9:d0:ba:8d:1f:3f:1a:a5:b8:ee:1f:ef:98:52:bb:19:
0e:a3:2a:77:2e:1a:2a:18:8f:a2:88:0d:f8:93:76:a3:5e:60:
2a:0a:6f:25:c9:f3:fe:29:a4:84:59:4f:4a:b8:6e:8c:2c:a6:
11:73:6e:41:4a:f4:5b:30:ed:9e:24:2b:13:de:ba:ec:32:71:
ab:f7:54:83:c1:bd:23:c5:bb:21:98:69:a6:ee:ed:3b:94:b4:
ab:ae:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:37 2025 by rpki-client