Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: kYSnnLvZRdxei8aOt15EDbk37HWMR9R9VfGWl9hrjyY=
Subject key identifier: 18:C2:BD:09:FB:74:46:A3:DD:5C:72:74:59:D4:75:75:FB:6F:8B:90
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019749D61B4AD17FC0DD3B62A56D0A2C49C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 10:00:57 +0000
Manifest this update: Sat 07 Jun 2025 10:00:57 +0000
Manifest next update: Sun 08 Jun 2025 10:00:57 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: W1D6I6bGrIZM8oQXAfwIyovYp/r68iSSyGeAGlkMu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:1b:4a:d1:7f:c0:dd:3b:62:a5:6d:0a:2c:49:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Jun 7 10:00:57 2025 GMT
Not After : Jun 8 10:00:57 2025 GMT
Subject: CN=18c2bd09fb7446a3dd5c727459d47575fb6f8b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:4a:19:1c:eb:6c:59:0a:a5:88:ef:75:7a:
6a:9a:b6:ef:b8:ec:42:34:e0:89:35:6e:4e:b2:bc:
0d:35:ad:49:a0:51:3b:de:94:22:94:79:00:b2:2e:
a4:4a:30:05:b5:2c:f7:2b:21:9b:bc:e8:2f:84:e9:
1e:c8:ac:62:9f:a7:dd:6f:ea:58:6f:b9:fa:4e:83:
e2:9d:42:61:57:59:21:30:7c:32:36:5a:62:46:4e:
7f:8c:f2:7c:a8:fe:e7:66:25:c1:78:e5:c9:88:1a:
dc:8f:1a:a8:06:77:77:06:13:5e:d9:23:30:5b:14:
64:af:0d:64:fa:db:25:33:e2:9e:0e:dd:d0:7e:6c:
b1:83:32:bc:b0:96:d3:4d:b1:6b:66:b3:a1:4d:76:
46:f4:8b:b2:78:7b:70:1a:07:ea:f2:5b:cf:a3:3b:
fa:f1:c5:13:a0:d7:d9:19:c9:91:92:e4:43:ec:c2:
76:a5:97:44:20:74:c6:97:f7:85:e2:49:1c:7d:38:
9f:be:38:53:31:e9:3d:52:43:c7:5c:c8:1e:00:0c:
5b:23:fd:98:67:e2:a0:fe:db:06:9f:12:09:fc:fa:
10:bb:ce:94:63:85:d4:4a:f9:92:4f:ad:68:2e:f7:
47:28:36:6d:7c:a4:74:07:88:c7:56:01:d0:51:23:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C2:BD:09:FB:74:46:A3:DD:5C:72:74:59:D4:75:75:FB:6F:8B:90
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2b:7f:9d:e6:fb:82:5d:c6:0b:7a:97:f3:29:07:70:ca:6b:
27:29:a1:17:2f:20:61:e5:e2:35:0f:c0:e3:cd:41:fa:be:5e:
ce:40:4d:52:f4:55:b5:f8:8a:28:02:92:e4:76:77:c3:2b:96:
18:83:a1:0a:45:6b:8e:cc:68:18:53:d1:99:0d:cf:7a:2d:f3:
36:b4:9f:b0:69:40:89:d6:ca:db:f4:ed:30:74:92:6e:8a:3c:
73:af:73:92:02:8b:f1:ed:05:e3:e2:2f:c7:9b:6d:62:bc:34:
b4:e8:e5:cf:19:e5:29:70:20:05:14:04:a1:7f:04:15:70:0e:
8e:ab:05:6b:4e:c3:a8:c8:18:33:e3:68:8c:6b:99:9a:b7:10:
68:b7:26:69:9a:59:a9:86:d1:0f:20:1d:d2:b8:b8:0c:98:28:
ef:f9:86:1e:cc:62:78:94:46:8d:7a:68:6e:f5:03:2c:54:88:
b2:1b:f1:84:df:01:38:ba:e4:65:0a:61:dc:63:0d:6b:27:34:
d4:cd:68:8f:e8:49:59:69:3c:31:23:a9:42:5d:f2:b3:99:92:
bf:fb:6c:50:cf:77:b2:09:a7:36:52:66:86:8b:68:97:72:30:
60:66:3e:f9:5f:a5:9e:7a:79:39:a6:78:1f:71:ec:2c:52:7c:
bc:66:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:20 2025 by rpki-client