Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: 4ZGbMFvFsjVY++ogr0s6wo3RmkTdLmRQ2MAIlWE2PX4=
Subject key identifier: 70:D8:1C:BF:C3:2E:86:09:5A:65:FF:02:86:EC:D8:EA:32:70:20:24
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 01974B567449C7F8D4974EFA9A5AA3C5CFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0E7D
Signing time: Sat 07 Jun 2025 17:00:46 +0000
Manifest this update: Sat 07 Jun 2025 17:00:46 +0000
Manifest next update: Sun 08 Jun 2025 17:00:46 +0000
Files and hashes: 1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: 8wSRrrq5PA3+JmIhOfsxb6fCeUEK/Mpg6v96A7DuDKM=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:74:49:c7:f8:d4:97:4e:fa:9a:5a:a3:c5:cf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Jun 7 17:00:46 2025 GMT
Not After : Jun 8 17:00:46 2025 GMT
Subject: CN=70d81cbfc32e86095a65ff0286ecd8ea32702024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:98:b3:79:69:b6:df:8f:a9:83:f4:49:d5:
e8:4b:ca:9a:bf:a7:c1:9f:12:00:4a:46:cd:31:79:
5b:88:92:d5:5c:c5:73:50:21:1d:40:12:34:7e:f4:
55:09:da:78:49:e0:62:e5:df:60:c6:c2:fc:ee:89:
5b:9f:12:c7:04:05:20:51:46:6e:55:2a:07:ff:63:
3f:e0:56:99:47:1b:20:7d:76:a4:3e:21:f0:09:85:
17:bf:7c:c9:5c:cf:f1:63:29:ff:f2:a9:72:55:b4:
34:b9:6f:bc:50:0f:b6:27:55:28:4b:b8:e8:04:40:
0c:89:e0:ad:ec:42:5e:e6:8c:bc:d7:6e:b1:57:8c:
73:df:17:ce:ed:68:f3:80:be:4c:96:b8:df:f7:f7:
cb:b5:fb:de:21:36:68:46:14:73:2f:f0:24:08:31:
42:78:d5:d3:8b:10:c3:03:4a:49:47:8a:52:96:6c:
ef:7c:5a:bc:d6:d9:9c:a2:59:67:2a:4d:dc:07:48:
35:92:ac:63:10:bb:27:7d:26:67:a7:90:13:fe:3c:
71:99:a5:23:24:22:85:c1:b0:43:c0:be:62:fb:b1:
ef:e8:14:1c:8e:90:9b:57:bc:23:f1:52:63:b0:3e:
8d:df:5f:9d:8d:ac:25:72:4a:64:95:c0:a2:33:99:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D8:1C:BF:C3:2E:86:09:5A:65:FF:02:86:EC:D8:EA:32:70:20:24
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:61:38:7d:26:d9:ad:85:b8:ee:21:87:8b:f9:58:92:64:23:
c8:93:56:6c:b8:77:81:0b:46:b3:59:20:4d:b5:e5:ef:42:38:
81:f5:dc:cf:67:b5:3e:52:6e:05:6f:49:3d:2c:27:57:ad:2a:
7c:db:47:37:30:15:45:4c:d6:b5:2f:40:e5:3d:a0:83:61:5b:
79:5f:f6:25:ad:d0:45:1c:ed:8c:ef:24:1b:ca:16:3b:a7:90:
f1:78:1f:68:52:d9:bd:6a:bb:5b:e1:6d:9f:08:57:c9:67:1a:
25:1f:e3:91:ab:45:3a:f9:11:d2:66:50:82:49:dc:29:3b:9f:
cf:93:4d:11:02:3c:26:de:c0:13:61:83:7a:94:e6:32:53:21:
c1:9e:c2:66:de:1a:ae:98:ee:e6:c7:72:f2:40:f1:1a:35:ab:
cf:57:c8:ec:d4:d7:58:64:44:03:23:f2:b7:32:21:37:d5:f7:
76:b0:c8:5e:ce:bb:83:1b:fa:4b:7c:70:f3:1d:df:9b:46:21:
fa:f7:c0:36:97:ba:40:9e:ff:d9:7e:71:b2:fb:9c:d0:46:dd:
54:8f:ca:d0:2c:4b:3c:a2:de:b3:79:e4:e5:45:27:7c:2b:9e:
f0:3c:43:46:0a:58:f3:0f:d7:96:9c:72:fa:12:3c:42:37:60:
e2:57:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:13:58 2025 by rpki-client