Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: ydckYr2tEUmSMhk7mqCURQ55N+8EnGEOLcxqD0EyJFU=
Subject key identifier: 9A:7B:BF:76:25:F8:43:66:6E:CB:FE:56:46:38:BC:DC:C2:CB:A7:DE
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 019768F31059244723A76A7111926AE32B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 11:00:49 +0000
Manifest this update: Fri 13 Jun 2025 11:00:49 +0000
Manifest next update: Sat 14 Jun 2025 11:00:49 +0000
Files and hashes: 1: 0EXTA2fh52m_pdzndlQONOR-ALo.roa (hash: 6rMWco6WBnZhVNOyIqX9uMPGJDuagIsvvOicEopd/aI=)
2: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: qP00T7u2FJ5kQwvEqlTRCVGK5l6zmSsmRPZhHbwoD+s=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:10:59:24:47:23:a7:6a:71:11:92:6a:e3:2b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jun 13 11:00:49 2025 GMT
Not After : Jun 14 11:00:49 2025 GMT
Subject: CN=9a7bbf7625f843666ecbfe564638bcdcc2cba7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:5b:e0:33:eb:0d:86:fa:eb:75:fd:ed:be:
71:8a:88:11:fe:69:9f:0d:04:b5:21:8d:57:77:8a:
b3:65:e9:4a:5e:bf:ec:bb:fb:ba:8a:cb:6f:1d:a5:
1d:8b:2a:e0:9b:02:a8:b3:24:c8:cb:60:3a:6b:05:
f0:cc:17:cd:71:73:08:eb:98:96:4f:29:2a:5e:dd:
12:c2:b2:21:7e:d1:67:6f:fb:01:a7:f2:aa:f6:c3:
26:26:27:66:7b:89:05:e4:7d:5f:7e:bb:fe:91:73:
a3:f6:70:9e:9e:fb:46:90:0a:ff:b3:3a:9c:c1:0b:
65:1b:39:3f:e8:b9:8b:35:08:4a:4c:32:3c:86:3a:
f4:2f:34:6d:c2:2e:6d:46:70:6b:4f:a6:63:ce:0e:
47:3d:a7:90:2e:ba:b3:af:38:75:53:2e:15:68:a5:
be:eb:36:35:3e:55:2a:9b:50:35:ae:ab:7c:47:12:
ea:4d:39:df:ed:d2:ff:c6:f0:71:10:2f:ea:da:5a:
2b:8f:76:67:bb:61:63:8f:1e:e2:55:37:6b:04:99:
2c:d1:e9:bf:9f:b3:8c:de:ac:b2:f6:69:3c:20:da:
20:82:b4:68:f7:2c:a2:fe:4f:59:aa:4e:f1:67:df:
2c:ad:ca:1b:c5:e3:c4:8a:03:a5:76:11:80:0b:bd:
93:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:BF:76:25:F8:43:66:6E:CB:FE:56:46:38:BC:DC:C2:CB:A7:DE
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ac:88:8d:21:a4:be:ec:6f:d9:46:b4:2c:fe:8d:a5:ab:19:
34:23:e8:56:45:76:e8:f6:9f:bc:55:ce:5e:6a:d1:65:11:73:
46:a6:16:fa:b3:64:30:e5:83:d6:f4:b4:8f:ba:30:74:22:98:
3c:95:25:53:9b:0b:6b:4d:01:28:60:24:6b:92:33:52:89:9e:
7c:26:ae:4b:4a:a8:62:7e:31:ed:13:32:43:08:02:e1:61:5b:
87:71:54:a7:88:11:10:9d:1b:da:73:58:35:d9:d5:8e:d5:6f:
32:9b:8a:70:ae:f2:1c:dd:01:19:3e:0d:c4:93:ce:b1:c0:af:
15:53:e2:25:0b:52:19:0c:66:12:13:55:8e:57:b4:5e:54:59:
f1:53:0a:cf:e8:e0:52:cc:0f:72:13:b7:cc:03:b5:79:37:ce:
78:37:1b:c8:ff:eb:0d:7c:92:c8:cc:aa:64:a6:7b:62:46:9e:
ec:a6:86:5e:71:bd:3c:f9:7a:5b:98:e8:20:3a:08:4f:f7:64:
9b:35:5b:d5:76:92:d7:68:ec:2b:70:2d:60:32:46:81:26:70:
b4:2f:19:59:46:d1:66:d2:3e:45:30:71:45:6d:c8:3e:f7:02:
68:7a:c3:93:15:a8:e0:45:29:6b:85:ee:58:21:38:c9:c9:37:
d7:53:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:58 2025 by rpki-client