Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
File: HSixjfJE24nyuXpscmKXM7OIYC8.mft (raw, json)
Hash identifier: h7fav2sbcxM4yBQX207C4Fr9pLMqqxn8TnZrZixHNvA=
Subject key identifier: 5B:B4:16:15:03:92:39:BB:EE:AC:AA:63:64:B9:0B:D1:1B:76:05:1C
Authority key identifier: 1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
Certificate issuer: /CN=1d28b18df244db89f2b97a6c72629733b388602f
Certificate serial: 019778D3F94219A0FCF6B614D6B94CE38FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 13:00:47 +0000
Manifest this update: Mon 16 Jun 2025 13:00:47 +0000
Manifest next update: Tue 17 Jun 2025 13:00:47 +0000
Files and hashes: 1: HSixjfJE24nyuXpscmKXM7OIYC8.crl (hash: LcDIxhWKfoVZUqMYt/+pzFbtbkACHKsbwYVl693oLjE=)
2: sleOMLu6lCo0yQ_O9Go3ZMBJ4nQ.roa (hash: mFLE25zkAY/mi0s19XSunEJLEf8g+Qy7QzSZ17V9QYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:f9:42:19:a0:fc:f6:b6:14:d6:b9:4c:e3:8f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d28b18df244db89f2b97a6c72629733b388602f
Validity
Not Before: Jun 16 13:00:47 2025 GMT
Not After : Jun 17 13:00:47 2025 GMT
Subject: CN=5bb41615039239bbeeacaa6364b90bd11b76051c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fe:37:ca:01:dd:2d:63:d1:d0:ba:f9:e7:55:
c3:c4:ff:cc:e6:e6:62:5a:b0:1c:81:ca:3d:85:2f:
d9:5e:0f:d5:47:8c:0d:a9:f3:6d:9b:42:0e:3f:09:
b2:c1:09:7a:93:61:2e:22:15:8f:d2:77:bd:29:c5:
5a:98:b6:d5:fb:3d:fe:75:2c:64:60:c1:c7:7f:b3:
67:d3:fc:20:45:c7:40:ea:38:ac:2b:c4:4c:2c:9c:
08:37:f4:84:89:f5:75:be:de:02:4f:36:fd:14:68:
71:ab:2d:22:ac:01:a5:64:55:a0:19:8e:e3:c2:ab:
0d:36:10:69:af:70:72:55:84:51:4b:d6:9e:e5:d9:
0d:a0:8a:5b:07:6b:cb:2c:7c:d5:61:1c:7b:a2:c4:
ef:e9:15:3c:c9:12:40:4b:7d:52:5a:95:3f:2d:02:
4d:dc:31:a7:fc:28:33:b9:db:f3:2a:35:d2:b1:ec:
09:c8:48:65:9e:09:60:e9:e7:8f:16:9e:87:d7:c2:
42:e1:60:0f:b8:c8:b8:30:77:7a:94:b0:f3:24:c5:
ad:16:0e:bd:1d:29:39:08:7f:9e:5c:e9:63:75:0b:
b9:4d:7e:4b:c5:11:05:67:99:7f:0b:38:b5:95:dd:
3f:48:47:96:7e:6c:4c:7a:e4:d9:d1:df:9f:4a:d6:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B4:16:15:03:92:39:BB:EE:AC:AA:63:64:B9:0B:D1:1B:76:05:1C
X509v3 Authority Key Identifier:
keyid:1D:28:B1:8D:F2:44:DB:89:F2:B9:7A:6C:72:62:97:33:B3:88:60:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSixjfJE24nyuXpscmKXM7OIYC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/887620-f385-43f4-9be2-a99c39090db4/1/HSixjfJE24nyuXpscmKXM7OIYC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b3:90:b1:46:4e:b6:b5:f7:44:aa:33:34:a0:49:c9:89:f5:
31:03:15:27:e7:a0:71:3d:64:7b:8e:78:df:1d:00:b0:2e:88:
ef:7b:17:bd:73:bc:89:47:bd:12:44:95:a0:c7:1f:14:d8:3f:
70:b8:08:d1:d3:08:b4:09:a1:59:34:ca:02:9d:1b:cc:80:c1:
c5:74:67:92:e9:97:56:99:13:31:96:49:4b:22:4c:79:87:1d:
95:a2:3a:c6:ed:01:97:20:b5:d9:94:a5:cd:44:c8:3d:ba:70:
c3:9a:fa:3b:9e:98:39:8c:35:a9:e7:24:03:78:b0:f3:9c:a8:
b3:85:10:b1:c0:92:2e:19:8f:d6:b3:1f:27:ed:65:b2:75:44:
2f:2f:f5:5b:e4:f0:97:8c:3a:74:4a:c7:25:b5:b7:f6:2e:71:
7f:9b:ae:a3:8b:e7:6f:1c:85:fe:22:c7:33:d0:1c:fe:63:63:
97:90:2b:57:75:fd:41:ce:6a:4d:3b:41:94:6a:25:8c:7b:90:
70:d4:4d:03:bf:a7:91:41:2e:6f:a3:e6:5b:82:5a:ef:4b:21:
67:37:56:c1:57:23:42:95:60:bd:2f:bc:e0:76:51:6b:62:e5:
e3:55:b5:84:0b:b6:67:f7:5d:39:36:e0:bb:45:df:9c:e7:ed:
0f:74:32:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:25:55 2025 by rpki-client