Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: va9OCaXTxINeSD4kDBJLN2IBhd+sBpgNbHfU/4/uwD0=
Subject key identifier: 96:93:80:1C:32:C9:72:8D:51:6C:22:3B:43:AF:7A:FD:F2:E8:B9:B5
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019751217BB2336B92A4BC54A1B95C7E0932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 051E
Signing time: Sun 08 Jun 2025 20:00:38 +0000
Manifest this update: Sun 08 Jun 2025 20:00:38 +0000
Manifest next update: Mon 09 Jun 2025 20:00:38 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: CZruSvb2BkYaHJvShbx8+DjaaAXj4oiXDR2uctnoA4g=)
2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:7b:b2:33:6b:92:a4:bc:54:a1:b9:5c:7e:09:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Jun 8 20:00:38 2025 GMT
Not After : Jun 9 20:00:38 2025 GMT
Subject: CN=9693801c32c9728d516c223b43af7afdf2e8b9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:25:2c:7b:ad:14:b2:60:af:6c:33:df:a8:
51:9a:8c:9b:14:76:e6:74:06:90:79:6f:db:27:16:
8e:c8:ba:2c:40:55:4c:fc:37:91:a5:22:0b:8e:4f:
3e:d8:bc:c5:9b:ba:bd:a2:64:6e:73:ce:cc:fc:0b:
6c:8e:59:02:bc:84:52:a5:d5:60:07:bb:15:08:56:
e8:8f:cd:65:56:29:b5:10:e6:b1:b7:4f:2c:b4:1a:
84:55:18:a9:9c:3f:b8:37:18:f0:75:07:12:55:71:
4e:1e:4b:b4:a6:6a:88:65:b7:ea:ce:a0:aa:7b:21:
b1:37:a0:09:f8:9d:c5:65:81:7b:bd:3a:b1:c9:48:
69:63:25:76:22:5c:bc:6f:f0:e8:87:8b:49:6a:fc:
aa:74:1f:f3:7c:47:75:f2:63:21:37:58:85:4e:1b:
2f:49:f9:57:40:e6:f8:e8:a3:84:4a:20:c3:66:a1:
5e:ac:f2:5d:05:1d:61:d8:79:fb:28:43:b2:b9:7d:
a7:7a:16:98:71:60:cd:1f:03:07:ca:db:c7:48:0b:
83:cd:f0:81:cc:7f:4e:40:75:e1:38:13:36:34:6a:
c9:1e:cc:f5:e3:6b:83:2e:31:8a:6c:25:b6:a6:57:
29:c4:ed:43:5b:a1:9a:00:03:55:10:2f:93:f8:80:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:93:80:1C:32:C9:72:8D:51:6C:22:3B:43:AF:7A:FD:F2:E8:B9:B5
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7e:fc:d3:c1:e5:f1:82:a0:82:73:34:f4:e8:63:da:4f:0d:
ee:70:25:6e:00:45:53:66:aa:7c:a6:97:69:ee:f6:eb:88:9a:
36:75:6d:6e:3b:04:9f:0c:2f:69:8b:1b:6a:30:6d:d1:96:0b:
8a:c5:35:aa:51:9e:61:1e:ec:1d:d6:f8:90:27:12:29:f9:30:
07:ee:87:b2:e9:09:10:65:8c:db:2a:0d:62:a8:93:f2:16:6f:
43:3a:b0:26:e3:bd:c6:1c:1a:e6:3c:89:5f:14:65:6a:19:29:
f0:86:ae:63:21:12:19:79:41:4f:83:9e:8b:9d:df:f5:26:3d:
4b:d7:28:01:6f:c7:b7:b0:4e:04:26:9a:de:82:4d:4c:74:ac:
a4:24:ba:f1:8d:17:ee:0e:e8:c7:a9:41:96:fe:e1:63:7f:2a:
34:f5:e6:cf:c2:b1:19:63:47:7b:02:7c:af:5c:dc:3f:57:7c:
c4:e6:1c:33:66:ee:41:c8:9e:86:3e:e7:51:e2:cb:e1:3d:a0:
fd:fe:b8:6a:07:db:52:ec:cb:da:97:15:4a:5f:c4:ea:32:50:
70:30:be:5e:a8:76:cb:5f:84:12:6e:db:70:5e:a2:ae:52:dd:
8b:77:83:3d:11:ee:b5:5e:58:60:33:10:fc:ff:bc:93:f1:3d:
8d:53:52:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:29:16 2025 by rpki-client