Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
File: Hx3pNv8XhLeClri8S0sDgbKT7RA.mft (raw, json)
Hash identifier: 6H/I4SKEAuoa1SqNkapMiCLKpblZMflpqaZh6Xl5SMk=
Subject key identifier: B7:DD:84:9B:9C:12:F0:62:AD:02:B0:64:2B:5C:0B:69:8A:96:CC:92
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 01976C98A969F7DC9D7F9D644891AA93C0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
Manifest number: 0DD8
Signing time: Sat 14 Jun 2025 04:00:33 +0000
Manifest this update: Sat 14 Jun 2025 04:00:33 +0000
Manifest next update: Sun 15 Jun 2025 04:00:33 +0000
Files and hashes: 1: 1-veQxSzqgnwuwyzarzzUI6GU1Vo.roa (hash: bIWGmao73L88A9Mc0bEmGHNF/q2XxTrM/cwuMLwX1wg=)
2: Hx3pNv8XhLeClri8S0sDgbKT7RA.crl (hash: G7wXuVLjRdL60+Z8rBPFAs77xT1E6s/ZCPYS8ADyLGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a9:69:f7:dc:9d:7f:9d:64:48:91:aa:93:c0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Jun 14 04:00:33 2025 GMT
Not After : Jun 15 04:00:33 2025 GMT
Subject: CN=b7dd849b9c12f062ad02b0642b5c0b698a96cc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:cd:a9:1c:a3:15:d3:4e:87:c3:0b:6a:5d:
ca:20:ca:a1:63:64:80:63:80:5d:50:79:6c:e0:b5:
df:b1:57:71:a2:45:0a:97:20:cb:88:ec:40:63:c4:
88:42:e6:81:f3:d6:71:c9:27:f7:de:47:e1:12:8c:
ef:ab:27:96:77:c4:ef:af:be:3e:19:cd:97:98:ae:
26:f7:27:93:95:b3:34:87:56:48:97:8f:7a:66:92:
2c:3a:14:fa:03:94:5d:f3:a2:67:3f:ef:02:ed:e5:
dc:73:47:35:ab:20:74:57:d4:78:1a:b4:4d:fc:4a:
71:85:5b:d2:8e:55:5f:b2:da:e4:5f:fc:68:2b:d9:
f1:f2:bc:16:ab:f0:62:6c:60:d9:28:45:bc:6d:a9:
f9:f0:2d:8c:82:99:00:65:79:c4:6d:c4:5a:08:a1:
6f:1d:f9:37:15:42:75:d1:8f:4a:40:7e:40:36:67:
0e:d8:5d:0d:02:33:a9:24:a3:46:93:d0:43:f3:e8:
b2:0b:61:92:7a:8d:16:29:7d:c7:e9:1d:d7:a2:bf:
a3:3a:e7:20:d6:0b:ed:d0:46:33:37:f0:bc:46:46:
3a:d1:bb:24:cc:30:6f:30:f4:e8:4d:f7:59:38:88:
15:ed:d1:bb:07:b4:55:cc:a6:82:29:3e:27:3a:c4:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DD:84:9B:9C:12:F0:62:AD:02:B0:64:2B:5C:0B:69:8A:96:CC:92
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:51:1c:db:bd:16:ac:bb:fb:47:db:44:3a:2f:9f:93:0a:56:
d4:d9:f9:e3:26:f4:ae:f3:8c:86:63:34:86:6f:c7:fa:e1:3e:
59:b1:1e:19:3e:44:74:02:b7:e0:f2:43:59:97:8a:1b:70:2c:
4a:85:28:f7:a3:47:6d:a5:11:bb:49:9d:c7:67:c8:15:d8:88:
c8:42:bb:9e:5f:74:1c:3b:fc:5a:2e:35:cd:18:b1:50:a5:cd:
a0:fc:4e:56:2a:b9:1e:a4:7c:de:84:6f:19:73:11:66:7d:d8:
50:9a:bb:35:22:f4:10:4f:bf:ac:86:0f:13:20:e9:d3:e1:2a:
ab:6f:4a:a1:8b:ed:7f:71:82:fb:cf:ad:f6:10:d6:b7:79:f4:
90:1b:cf:23:0d:c4:aa:2e:ea:4a:b3:54:fd:65:3c:f8:f6:39:
92:00:2e:df:5c:0e:1f:cc:e0:1c:f3:d4:c4:73:05:42:88:63:
85:cc:c2:50:0c:ac:e3:20:a5:e5:0b:4b:07:e6:dc:89:4a:cc:
e4:d2:eb:17:78:68:3a:71:2d:d9:74:b0:36:15:70:8a:2b:42:
49:42:d6:1e:e0:94:b6:cd:0f:08:b1:13:db:db:fe:c2:6d:25:
2f:f4:5f:76:6c:85:88:45:68:ba:a5:d2:53:8d:94:71:0b:c3:
1f:85:8a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:36:30 2025 by rpki-client