Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: UFHKGcUsvcd3+l+UC5dlWh1qnWNycPf7pHOKvMLyQSk=
Subject key identifier: 79:68:01:8E:7B:14:26:1C:12:F6:E6:75:EC:B6:5C:94:C4:C1:F8:54
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 01974A0CEED57AA190CA281D5A469C0D0786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 1246
Signing time: Sat 07 Jun 2025 11:00:50 +0000
Manifest this update: Sat 07 Jun 2025 11:00:50 +0000
Manifest next update: Sun 08 Jun 2025 11:00:50 +0000
Files and hashes: 1: gTuMJj4zNk4inmWeuwHt2oopg5M.roa (hash: zopPOsMBU8dt9Dr0i+LUD1TPbnQUzJ4uDKxUzfrnRiY=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: 884wUHpAe6odcuSHVD0BmlTuhcfgakpim8PoZOuRNXU=)
3: rnwY-7oYw6V-trqxlfGxfeIKZIY.roa (hash: Yep0/R2aV0HSvC5J3JSqbOslIcQ/KKdPdI5bChqi8Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:ee:d5:7a:a1:90:ca:28:1d:5a:46:9c:0d:07:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jun 7 11:00:50 2025 GMT
Not After : Jun 8 11:00:50 2025 GMT
Subject: CN=7968018e7b14261c12f6e675ecb65c94c4c1f854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:f6:bb:22:84:98:ba:a5:e1:d1:62:c4:9a:
25:cb:08:66:fe:55:b6:74:0f:95:c2:e6:3b:e9:3b:
2e:a7:a4:d5:0a:56:e2:89:a4:f3:84:be:79:10:b7:
ab:59:35:3b:d0:8f:e1:bb:44:9d:a3:eb:16:7e:a5:
c4:f4:92:2e:fe:c6:f7:42:32:8c:de:9a:fc:ad:be:
2d:3a:7b:62:fa:e1:cb:fb:94:4a:88:b5:8b:79:f0:
27:b4:e1:3c:c9:36:ab:3b:31:3f:98:62:f4:61:1f:
cb:18:db:5c:46:40:f8:f1:a8:56:5b:d6:d1:f9:60:
d5:ab:38:ec:2c:8c:28:7d:c5:9a:31:40:71:bc:45:
1d:20:29:7e:18:fa:a9:67:29:27:f7:12:22:86:7a:
c6:1e:b7:ca:66:e0:a6:80:67:ca:e9:a7:43:ad:38:
31:3f:35:5c:93:75:a8:0d:a8:9b:aa:5a:72:2d:5c:
86:2f:8b:82:31:4c:a7:ce:5f:b1:3c:14:68:c3:bf:
e7:1d:92:a0:f2:83:79:39:2f:5d:2f:2b:59:ee:89:
5e:15:9a:cc:4a:7c:3b:d9:b8:11:43:8a:af:c4:ac:
d7:a9:09:09:a0:7f:5a:d2:61:92:eb:a4:5f:c1:af:
1d:0f:89:06:b5:2f:04:1e:39:a3:e6:50:fa:3d:68:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:68:01:8E:7B:14:26:1C:12:F6:E6:75:EC:B6:5C:94:C4:C1:F8:54
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:22:fd:dd:47:e9:ce:7d:db:1e:4b:e5:d6:4f:23:24:39:
e7:f1:cb:9a:a0:30:42:46:68:1b:a0:e0:cf:26:7a:a1:10:c9:
d9:15:e1:0c:7d:c4:91:ff:ff:bb:f6:4e:75:5f:76:0f:0b:8b:
05:b3:c6:24:47:df:b6:17:78:7d:05:f4:1b:1a:45:83:f6:32:
65:e8:bf:43:6c:d6:78:ad:95:93:b3:61:09:57:9f:73:6e:19:
fb:a6:be:f1:37:85:27:8d:b4:98:43:72:a8:71:25:ae:f4:58:
d3:a6:8e:bf:3d:9e:76:25:ab:4e:f6:62:4c:dc:4b:aa:d6:8a:
c6:b4:7f:3b:f5:b1:dc:83:25:3c:5d:b5:86:3e:8e:9a:83:95:
32:a9:bc:d4:88:18:65:53:86:27:29:9d:4f:00:5d:66:3a:bb:
d1:37:96:1e:0c:b0:e1:df:49:87:8c:22:85:ce:ea:2e:0f:ce:
cb:a0:38:d9:3e:f5:46:5f:58:3d:7c:dc:3c:23:a1:39:1e:fa:
a3:77:d1:d2:bf:eb:71:48:e6:9f:1f:fb:4c:2c:22:19:c5:5d:
69:95:f1:f0:5a:e8:0d:6d:4a:0f:21:8c:95:d3:bf:b5:60:e9:
c5:c5:22:8f:30:1c:4b:de:d1:fd:b4:17:03:9e:a1:e6:cf:d2:
e2:3d:9b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:46 2025 by rpki-client