Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: DehE6KlAyz+c2P1GWFX23gKwindO0dMiuT5AK1hDyr8=
Subject key identifier: 33:5E:F2:5D:AC:17:B1:F9:18:87:FC:40:95:15:36:B5:E4:B4:B3:6E
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 01976E199E6F2659598F200EBCFD597A8202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 1521
Signing time: Sat 14 Jun 2025 11:01:02 +0000
Manifest this update: Sat 14 Jun 2025 11:01:02 +0000
Manifest next update: Sun 15 Jun 2025 11:01:02 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: GsnN2brgS0Csno4BtOXSLYoRRg2IHD0JF1aLlhqEW1M=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:9e:6f:26:59:59:8f:20:0e:bc:fd:59:7a:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Jun 14 11:01:02 2025 GMT
Not After : Jun 15 11:01:02 2025 GMT
Subject: CN=335ef25dac17b1f91887fc40951536b5e4b4b36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:09:c5:37:ac:08:f8:6e:57:fd:0c:d8:e3:
3d:60:4c:ba:8a:6a:21:82:d0:c5:ce:ba:a2:16:6a:
33:29:9e:a2:0a:1c:c7:b0:58:d0:b4:f4:4f:20:c4:
7a:76:f4:5f:f4:c9:c8:d4:cf:8a:10:f7:3d:d5:ac:
73:dc:36:35:f6:70:fe:4a:b2:8e:65:bd:29:00:fb:
44:99:9c:04:4c:67:c9:33:8a:ec:19:d6:5c:f5:9f:
e0:5f:b6:a7:be:93:6e:f8:45:9e:66:81:c7:2e:bc:
07:a7:12:38:7e:a5:7e:ed:72:9c:88:63:7f:bd:19:
1f:55:4f:75:c7:f9:04:49:83:10:d4:ad:4c:7d:dd:
d0:bb:67:d9:5b:fc:64:6c:7f:64:fe:67:ff:b0:c3:
e5:17:e6:89:78:dc:97:1d:e4:ad:07:5b:e7:a2:f2:
3d:49:db:e4:9c:f4:5a:44:fe:3f:6d:f0:6a:61:28:
15:8f:1d:59:f2:f8:c1:b5:94:80:a6:4e:0d:64:51:
2f:de:2c:b0:2e:42:ae:63:59:45:12:5d:d3:a0:d9:
ec:b1:35:a2:ae:c2:57:62:0a:b4:b0:e3:e8:98:54:
47:07:38:83:6f:3a:0d:c3:fe:0b:44:a7:e3:d8:52:
8f:82:8d:93:a4:d0:3f:56:88:80:9e:69:3a:b3:91:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5E:F2:5D:AC:17:B1:F9:18:87:FC:40:95:15:36:B5:E4:B4:B3:6E
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cb:87:93:85:f4:7c:4b:8d:68:f5:7d:9c:09:0e:e4:9e:e9:
c3:6c:da:17:a7:6b:a4:ce:3a:31:29:8e:84:91:fd:04:ce:29:
f9:04:d8:59:e7:31:67:f7:c2:bf:8f:4a:e8:d8:3a:bd:7a:98:
85:55:73:cb:0e:46:d7:ec:15:75:3f:ee:e0:97:57:67:dc:0f:
27:60:f6:88:19:fd:ce:01:96:7f:3a:f1:4a:73:29:55:7d:1d:
30:c2:8b:e8:78:b6:d8:6e:0a:fe:d9:19:4b:76:82:fd:7b:af:
dc:85:75:33:07:b4:d5:4b:27:71:d8:8a:98:cf:f0:a0:69:e6:
86:2e:42:a6:c5:6f:01:de:aa:27:54:5b:ca:c5:e3:65:2c:2f:
c0:71:cf:f5:cc:18:4c:2d:8c:c5:e5:94:d2:49:c6:fd:2c:af:
c6:a9:0f:09:7f:c1:a8:41:dc:10:53:4f:62:fe:a6:03:04:1c:
7d:82:91:48:f5:08:e9:1e:b9:0f:26:b8:81:5e:c1:b1:64:9c:
ff:e7:8d:c6:08:2c:1e:76:59:52:73:51:70:95:69:4b:34:74:
d5:af:dd:a5:8a:72:07:ea:a3:3c:f4:f6:a2:46:99:fa:7e:13:
27:12:ad:f4:aa:f7:c1:ae:e4:d6:8b:ea:19:df:e1:3b:76:de:
d7:42:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:16:57 2025 by rpki-client