Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: o8lhe2M6mBT8lL4E82Tqzyncpb67R3WSJ6RFSRJIFRw=
Subject key identifier: 59:26:66:95:1B:AC:23:F1:39:F9:8A:C1:D1:E7:76:4F:0F:8D:41:A2
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019771BF37DF4F978B7E53F0D987C1925A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 04:00:46 +0000
Manifest this update: Sun 15 Jun 2025 04:00:46 +0000
Manifest next update: Mon 16 Jun 2025 04:00:46 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: D9zQEB6TjPSxeX4rjhpmQhWSj1QNm/CA3t81HADQeSc=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:37:df:4f:97:8b:7e:53:f0:d9:87:c1:92:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jun 15 04:00:46 2025 GMT
Not After : Jun 16 04:00:46 2025 GMT
Subject: CN=592666951bac23f139f98ac1d1e7764f0f8d41a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:7c:e2:22:bf:28:b7:0e:4d:bb:84:26:b7:
b8:c6:59:c4:93:a3:fa:85:a4:3b:5c:e7:82:8e:2c:
88:52:6d:28:ab:7c:d7:f7:38:82:74:0c:77:4d:b8:
8d:4b:68:dc:4d:de:e1:48:89:13:19:2c:80:c2:fd:
f2:49:8a:c5:8e:c4:00:b4:45:47:d3:e0:85:51:f3:
c9:72:0c:53:e6:6d:28:ee:1c:7b:1b:5a:41:bb:3d:
d2:5b:0b:d2:62:fb:09:96:25:a3:80:cf:e4:3e:d1:
ac:66:c0:be:de:82:4c:48:23:ac:ca:b4:24:47:c4:
d3:99:74:c2:01:4d:22:bd:32:2d:d9:42:9d:d7:5e:
5d:ff:6c:76:3c:e8:92:04:14:6b:58:45:7f:89:4c:
75:32:b2:56:19:22:59:cf:24:f5:ca:c8:0a:98:af:
40:ac:35:df:69:4d:f0:cb:59:5e:dc:5a:93:c9:05:
b9:44:dd:82:50:36:f5:31:37:13:ad:75:bb:75:93:
8f:23:56:5a:73:d3:33:3f:9b:53:75:47:c6:2c:74:
ac:19:b5:fc:aa:cb:d6:74:7a:b7:aa:6a:44:d7:29:
3e:8b:e3:5b:1e:b0:19:98:27:aa:97:31:97:b7:27:
99:39:87:02:df:77:5f:35:57:3c:95:22:06:f7:a6:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:26:66:95:1B:AC:23:F1:39:F9:8A:C1:D1:E7:76:4F:0F:8D:41:A2
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d0:8a:da:02:60:96:a6:b1:1b:b4:a0:fb:82:d3:dd:5b:d7:
73:b6:d7:0b:d6:0b:da:c5:09:de:d2:74:92:e7:3b:2d:9c:b8:
a6:eb:25:7e:6e:5f:c6:39:0c:41:54:ed:77:3b:72:81:b2:88:
28:10:86:b1:7f:e3:6b:45:80:35:30:ab:58:86:3e:07:bc:09:
c5:af:44:09:d4:67:e7:b9:e5:06:0e:4b:8c:df:ac:21:51:7f:
8c:10:61:b2:2c:1a:8d:83:62:6d:93:3e:e7:0e:5f:03:fa:ca:
e3:ce:43:4d:34:6a:31:3d:80:59:29:4f:05:af:74:ad:b5:99:
3d:30:5d:b8:47:ac:d4:3d:ab:8e:50:f9:b1:28:b8:c4:e3:b4:
e6:4d:14:6a:f7:7f:36:6a:3d:59:55:67:69:02:3a:02:dc:87:
6f:04:28:a6:9e:0c:c7:21:8e:62:d2:eb:3b:0b:68:03:6f:66:
07:47:0c:0a:aa:6e:dc:f7:15:1c:41:c8:c9:2d:05:ae:bd:8b:
bf:73:ac:09:f1:5d:cb:fb:3c:9b:8c:bb:0b:e1:e6:81:08:4c:
10:da:c9:36:23:17:a9:53:2e:b3:9e:a2:2a:4b:e5:7e:c6:33:
e1:3a:2d:ab:30:60:7f:86:1f:7f:bb:44:88:ec:f4:01:c1:68:
cc:ce:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:53 2025 by rpki-client