Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: 6fIEUlbiRLqi7Gy95VF0Pzi7Xkv1+Rks/AxxW4EMVOQ=
Subject key identifier: CD:11:E0:2A:37:D7:2E:08:7F:D5:7B:4A:CB:6A:22:23:36:3C:94:9F
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 0197684E3F6806D771142645E2E0DBA1FAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 08:00:47 +0000
Manifest this update: Fri 13 Jun 2025 08:00:47 +0000
Manifest next update: Sat 14 Jun 2025 08:00:47 +0000
Files and hashes: 1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=)
2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: 2uMG4NTzRYsHURHcO2U22vvD1gh7N+XSUT5vIFM9WDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:3f:68:06:d7:71:14:26:45:e2:e0:db:a1:fa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Jun 13 08:00:47 2025 GMT
Not After : Jun 14 08:00:47 2025 GMT
Subject: CN=cd11e02a37d72e087fd57b4acb6a2223363c949f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:09:d9:ff:47:2c:55:f3:a9:b3:98:0d:36:
12:f7:53:be:c6:55:0c:89:e5:9f:93:1c:37:67:13:
4f:9c:77:ea:01:81:4f:47:13:5d:6e:c0:27:5e:da:
00:de:d4:fc:53:cf:65:d6:01:a1:a4:aa:0e:31:c0:
c6:f5:a8:f5:52:eb:a4:0b:b3:d1:c5:bd:9b:3a:94:
d1:da:c2:0e:f8:ee:b9:2c:1d:34:8c:c4:65:51:4b:
f8:da:0a:34:e1:0d:b1:09:13:21:fd:43:bc:15:d2:
f1:c2:79:7a:20:d6:1e:b6:fd:3f:9a:92:f7:eb:5f:
11:f0:91:4b:90:25:e1:50:c5:4f:be:15:58:c7:26:
ce:86:bb:fa:a6:af:c1:07:21:8f:28:80:53:1c:2a:
a6:4e:3b:d9:97:af:be:31:2a:e2:84:81:9f:5a:4e:
c0:82:84:0a:67:28:45:7b:46:08:29:2b:fd:05:e7:
b6:30:9c:b5:d2:da:f1:c8:fd:50:0b:62:49:c3:f0:
26:eb:e8:5b:7a:a8:2f:62:5c:83:7c:63:80:fb:e6:
b3:6d:c8:fd:df:71:67:be:57:d1:a9:ed:45:aa:9d:
5c:74:de:fc:7f:cf:e4:20:51:d1:46:24:5e:da:48:
29:9d:53:d6:55:2e:f5:16:23:7c:55:a7:25:78:dc:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:11:E0:2A:37:D7:2E:08:7F:D5:7B:4A:CB:6A:22:23:36:3C:94:9F
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:3e:d8:a8:cf:9c:4e:46:8d:7c:d9:5a:99:d6:cf:94:80:88:
ac:c9:d4:af:a4:43:f7:4e:16:d9:a7:97:55:6f:da:83:ae:3d:
c3:ad:0b:ca:60:cf:74:a0:a8:24:79:91:e0:1a:2a:52:4f:6f:
07:04:05:2c:77:10:20:5c:28:bb:8d:8d:78:55:fd:48:74:08:
8b:43:72:4f:62:5e:ae:58:4c:39:aa:cf:af:7a:7e:ae:a4:81:
d2:7e:69:49:be:5a:36:45:aa:49:21:83:37:51:a9:b7:25:20:
62:54:45:70:62:28:0b:df:5f:4c:61:fe:48:8c:2c:6b:96:cc:
45:5d:06:d9:8c:f4:ae:01:0e:26:16:7b:d3:51:44:3c:ba:05:
b9:51:42:4d:36:b1:c8:c3:84:81:40:f4:8f:22:a7:7c:09:1f:
93:39:b2:cc:86:84:58:0a:b5:4f:7b:a6:12:18:b0:c7:6c:7c:
7a:3c:a8:5a:b1:03:27:3f:d8:0e:c2:f5:4e:d3:9b:67:64:cd:
3c:7a:b9:23:b5:a6:1b:a3:3b:5e:c9:47:99:a0:42:e0:0b:59:
dc:8f:22:fe:17:d3:ea:0c:21:92:af:fa:da:1c:35:45:b9:ed:
57:b1:fc:3b:ba:8b:f5:37:6f:7d:9b:25:15:50:10:6c:8e:bc:
31:72:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:27 2025 by rpki-client