Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File: HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier: azUFKhEYT2pJfBMlyzY8LaO1sO6xP4gtFrOVlHVgg48=
Subject key identifier: 57:BB:EC:4F:CE:14:EC:56:CB:B0:75:FC:B0:82:1A:F5:C3:38:C4:3E
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 01975E6F002433E0C67BFB7FA54DD5754764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number: 158B
Signing time: Wed 11 Jun 2025 10:00:22 +0000
Manifest this update: Wed 11 Jun 2025 10:00:22 +0000
Manifest next update: Thu 12 Jun 2025 10:00:22 +0000
Files and hashes: 1: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: 8t1HcrU4WChWy28AWLCz6cCRqCY1WSGmKqErjLz88+k=)
2: LrQvGSWjZ1_u3gVVuPLp2WxRk1k.roa (hash: ZcyQD8WEBHUW25dO4BlMcUXBz86xnVBSf9fbKGrRMB8=)
3: _reFuWE8F3Q1MCsGcykhYwVBWKM.roa (hash: O++vwJ85mD5AXwmEuMpGVw7mWSimyoQ3mta9DBkVsW4=)
4: dbWbArxAw26iNluKXUrcW4Vg-TI.roa (hash: btYEfLq8/9yx4IhA4v1IAzOkYKFAL79qzcrLbl8TnGs=)
5: t3uSAegbFXAgvcMRKArmSOOjc88.roa (hash: 4JXslF6DFYbC7wM1C83bbrfYplmPiSougkSoNLfd1xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:00:24:33:e0:c6:7b:fb:7f:a5:4d:d5:75:47:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Jun 11 10:00:22 2025 GMT
Not After : Jun 12 10:00:22 2025 GMT
Subject: CN=57bbec4fce14ec56cbb075fcb0821af5c338c43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:a5:b6:94:90:9f:fc:cc:96:d4:3f:51:4e:
4f:e3:c3:41:e2:b2:0b:c7:a6:2b:16:71:17:92:fa:
cb:b1:3b:fe:48:79:03:af:27:0d:f7:cb:3e:61:37:
e9:36:61:50:da:71:e6:8d:77:d8:04:14:bb:25:30:
4a:8d:73:68:62:66:75:2f:6b:3e:e7:b3:67:23:f5:
d9:0d:55:4c:ca:3d:e2:d4:35:4b:b4:91:c5:b4:c9:
e9:a9:7c:1d:e6:7e:98:1d:bc:4f:c6:41:e5:9c:80:
bd:54:03:c2:71:c1:75:b8:99:82:1c:6a:45:7f:d1:
3e:99:a7:e0:ab:43:77:5d:db:d5:a7:b4:f2:a0:bf:
e6:0d:a4:1a:06:b9:e8:b5:e9:e9:52:a2:ef:2a:5d:
40:6f:0f:5f:50:17:75:43:7b:7e:53:03:4a:fd:02:
6d:e9:ce:d7:43:18:8c:e6:53:24:db:0b:d5:a7:7e:
61:3f:32:d1:62:d8:5c:2c:83:14:85:c5:02:99:6c:
ce:37:3a:a4:77:05:e2:61:85:15:3a:ed:f7:ec:81:
8a:4a:98:eb:bc:17:82:ef:2a:f1:fa:1d:43:cd:cc:
00:9d:72:52:4c:4f:47:2d:1d:ad:b0:08:76:fb:5a:
1e:16:a3:04:5d:df:ac:94:ae:87:a5:9f:49:d7:f4:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:EC:4F:CE:14:EC:56:CB:B0:75:FC:B0:82:1A:F5:C3:38:C4:3E
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b7:62:6a:5a:5a:57:74:b9:05:8d:6a:91:7a:04:10:90:1c:
3e:10:20:6b:98:30:0b:15:69:13:8e:fa:af:b8:3f:ac:8b:33:
aa:8b:f5:57:9e:55:2e:ce:47:5c:5c:bb:da:22:67:2f:b4:a8:
04:25:41:67:18:a1:ff:d6:bc:22:ad:9a:ca:00:b2:7f:a2:93:
67:7c:a3:ae:4b:79:20:55:4b:f2:32:0b:64:0b:0c:67:1d:5a:
0f:6c:d1:a6:f8:b8:cc:ae:2e:e1:80:4e:f0:0d:f5:e4:8f:08:
db:29:7f:c1:f2:b6:a9:6c:3d:9d:d6:77:76:39:ca:d3:c4:4a:
36:3b:93:a3:1e:1c:4d:58:01:8f:83:b9:58:71:bc:ba:3e:a8:
b8:42:d0:93:84:b8:c4:94:78:b9:67:4e:79:1a:6e:1d:80:aa:
3e:1f:5a:18:79:36:5d:03:01:2e:bc:d7:cb:9b:b5:ef:c6:7f:
59:5a:b7:8b:59:e6:a3:a7:fb:04:9f:a9:2d:8c:f8:8e:a7:e2:
54:7a:f8:06:3b:e8:c2:5f:e5:6f:2a:77:ce:e2:3c:62:ff:66:
58:91:b5:69:ca:d1:ce:27:87:e2:ca:98:9a:b7:93:a0:d3:e2:
e2:31:d9:d6:e3:ec:88:47:96:2d:8f:13:3e:ea:dd:cd:72:bd:
7d:b8:5a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:33:45 2025 by rpki-client