Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: qcggake9JNsjgiHnpCpLJqrQ8+h3r7q9fJNUNAOIAL4=
Subject key identifier: 28:40:5F:D3:5D:2C:A5:52:1A:EC:D8:0F:1F:9B:FF:B8:D4:9D:6B:BE
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 01978DA3EE6108D4657AD30E7C2518A2982C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 1225
Signing time: Fri 20 Jun 2025 14:00:20 +0000
Manifest this update: Fri 20 Jun 2025 14:00:20 +0000
Manifest next update: Sat 21 Jun 2025 14:00:20 +0000
Files and hashes: 1: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: 9q8XOk5x7D4ZPx8n369h1AHqW1zyo3N5rM3tAn/uoBs=)
2: UYoraKeZIaoa2wVuoomivtXbxRQ.roa (hash: 64MFcCCoNK8y5TAb4sImtBVWhOrUKow/FlcIn/ABu34=)
3: bce9mz0b3BUGOMHAJWY8rMCRxek.roa (hash: IEeWzdb92Rel/sak0WfNMG3iDCwAJHBVrKmaRSr9eNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8d:a3:ee:61:08:d4:65:7a:d3:0e:7c:25:18:a2:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Jun 20 14:00:20 2025 GMT
Not After : Jun 21 14:00:20 2025 GMT
Subject: CN=28405fd35d2ca5521aecd80f1f9bffb8d49d6bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:67:cb:d6:f6:54:d4:f6:bb:04:ec:23:10:
1c:08:69:d1:3e:35:49:89:ff:34:a5:5a:82:ce:03:
4c:64:1c:82:23:55:0b:a2:b6:68:22:46:71:75:7c:
99:fc:df:c6:32:78:3f:64:29:51:d0:bf:85:b2:df:
3c:18:e4:40:53:2b:46:c2:dc:4b:c6:e9:b7:eb:c2:
87:b6:74:93:55:e5:6f:25:f1:bf:e2:61:c0:22:45:
4b:4f:41:29:c5:a0:cd:c6:f7:9a:be:56:e6:01:a1:
bb:c4:ab:9e:e8:85:ab:b0:1b:ee:68:c4:d2:24:3c:
0e:4c:35:22:99:68:7a:fe:0a:17:07:5c:78:0a:3a:
8d:54:ff:e9:20:c9:74:b7:6c:d8:51:4d:e4:48:ac:
32:6a:38:ca:a4:57:e9:1b:13:40:d4:58:37:19:7e:
85:3f:9a:24:9c:bc:64:3d:f2:89:c2:fd:60:e5:95:
03:78:2e:6f:2b:48:4b:b2:25:6e:fb:68:6c:07:6d:
06:09:72:c3:34:ed:97:9b:ca:29:0e:f8:cf:82:bb:
7c:c9:02:bc:6b:ad:d2:fd:df:da:ff:5e:1a:0a:30:
b1:c7:c9:f7:4e:d0:bf:e9:40:bd:79:e8:7f:06:e5:
39:75:57:8a:58:4d:68:30:c5:47:69:94:09:2b:58:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:40:5F:D3:5D:2C:A5:52:1A:EC:D8:0F:1F:9B:FF:B8:D4:9D:6B:BE
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3b:c3:1e:28:f5:32:d9:38:40:2e:ea:78:8a:d8:73:c6:97:
e2:93:51:ff:57:6e:15:5d:00:93:e2:9d:69:0f:2e:4d:50:32:
d4:9f:a6:42:75:13:0e:ef:b0:f0:87:da:d9:a3:51:7c:64:27:
4e:b0:37:c0:49:a0:5f:0d:a7:60:49:50:6d:43:86:f3:0e:b0:
00:cc:fc:7e:71:7d:c7:62:87:84:56:86:85:9f:f6:eb:b0:ee:
c9:24:7b:75:c8:ce:cd:fa:67:ce:ef:88:6c:dd:4a:d3:05:ae:
e9:d4:aa:29:3e:bc:03:ae:c8:a9:59:21:50:e5:fb:c7:b6:8c:
bb:d7:e0:d2:41:ae:a1:74:c2:c9:6b:b6:0e:f1:c5:c4:55:90:
3f:13:a0:5f:54:52:0c:a0:7c:a0:f0:f2:9f:1c:8f:66:b0:5f:
1d:13:18:ff:df:27:4d:63:b1:06:01:93:82:06:b2:17:ff:86:
85:b5:b5:cf:45:5e:69:c6:40:20:3f:23:12:05:70:6e:65:a2:
f7:76:5c:de:b6:a7:12:66:e5:ac:66:b3:9d:07:e5:b6:b2:69:
61:7a:20:01:6a:99:6b:09:0e:e7:8d:c7:7b:ee:46:89:51:3f:
07:36:83:1e:c8:31:36:13:c9:9e:a2:14:3a:fe:6b:1e:03:7a:
27:4a:b1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 18:28:24 2025 by rpki-client