Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: M5748bhIeE08l+EJF0L8BscaALr/1iA5DCP6yR1qeps=
Subject key identifier: D4:48:45:BA:63:DC:73:B4:D1:79:A0:2C:1E:24:28:80:E0:83:E7:7C
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 01976DAB7BB12A978F7051CA60EF8181509B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 0624
Signing time: Sat 14 Jun 2025 09:00:44 +0000
Manifest this update: Sat 14 Jun 2025 09:00:44 +0000
Manifest next update: Sun 15 Jun 2025 09:00:44 +0000
Files and hashes: 1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: hlHwEvVSIW3DZXJySI6d21TT5Qx7HvVqnixsl4CGohI=)
2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:7b:b1:2a:97:8f:70:51:ca:60:ef:81:81:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Jun 14 09:00:44 2025 GMT
Not After : Jun 15 09:00:44 2025 GMT
Subject: CN=d44845ba63dc73b4d179a02c1e242880e083e77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:14:46:dc:63:33:17:eb:5a:07:fd:cd:ad:
64:06:1a:eb:7a:2b:27:a6:36:98:25:61:ea:8f:42:
98:15:0e:d0:ec:a3:a3:0e:a0:29:5c:9d:d8:89:8a:
a9:d4:42:80:69:e8:39:f1:2a:4a:b6:16:b9:24:68:
7a:4b:61:37:2a:1c:30:f7:ab:d9:69:03:1c:d2:10:
c1:b3:a3:15:e8:f9:ad:f3:17:71:6a:66:d2:c6:12:
4e:82:bd:4e:87:c2:38:85:7b:ed:7b:78:d4:3b:ca:
22:87:8d:3a:4a:1a:f8:ba:30:04:af:93:27:fb:4c:
3c:f7:69:81:b7:33:be:37:71:9a:52:7f:e8:8f:58:
a2:63:ca:ba:cb:5d:bd:41:19:6f:5d:91:9e:19:7e:
e1:06:62:b4:91:ed:ca:0e:2c:ca:f2:a0:42:f0:e1:
d4:dd:10:a5:f2:bb:03:bd:56:3f:20:5a:e9:38:e3:
80:24:cb:e3:1d:0e:95:b0:b5:1b:2d:a6:1f:bd:7a:
2c:fd:58:8e:02:88:10:36:69:83:c9:b0:5a:ad:ad:
ea:2b:d6:e8:3d:68:0e:4e:09:6d:77:5a:c2:56:58:
68:3d:31:41:a1:1c:b5:0b:37:77:2d:8a:39:d9:8f:
31:18:20:44:66:19:a6:fc:39:c7:85:73:d6:08:48:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:48:45:BA:63:DC:73:B4:D1:79:A0:2C:1E:24:28:80:E0:83:E7:7C
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d7:f3:7a:f2:ee:1d:c2:16:60:48:e2:d4:fe:fb:81:81:ab:
2d:44:63:57:a9:52:51:58:ad:74:b3:b2:02:84:c1:7a:c3:71:
52:f9:b4:97:eb:45:62:d3:b2:a6:b3:c3:21:3a:42:c0:43:7a:
5f:b2:1a:0e:1f:5c:d5:9e:09:d9:0f:07:74:59:4c:29:47:9e:
62:8a:ff:47:f9:f2:8a:4e:c1:c6:9e:8a:7d:d1:9f:dc:5d:f1:
30:06:ff:2a:ae:4a:9e:b3:33:1b:f1:bb:6b:77:0a:66:e1:60:
50:3e:98:d7:0b:cb:db:0e:4e:19:cc:bb:08:b6:86:97:47:40:
8d:f1:c4:b1:ed:2f:00:7d:62:c1:80:52:dc:7a:ba:3e:6a:d6:
d3:51:5b:ee:47:de:dd:53:ea:4b:55:d5:b7:91:81:d8:cc:c1:
eb:5f:9d:90:d3:73:96:05:9a:36:58:af:ce:45:a0:a6:86:1c:
a2:5e:02:e8:9a:c6:a0:07:68:b5:46:1b:ed:3e:6a:07:b0:a6:
a0:89:88:b5:7e:54:df:ce:78:0b:a5:62:72:96:eb:56:2f:b3:
e4:7b:63:6f:cd:2d:95:82:7d:31:49:1d:64:30:19:3c:77:c0:
f0:cb:dd:1c:a2:4d:06:0c:99:16:28:5f:52:f8:72:af:27:f9:
78:09:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:56:24 2025 by rpki-client