Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: IgWspbZOo/5PBApI0VOQ/XuRvZRcmlkBglnAJRdcM8w=
Subject key identifier: 85:88:A8:AB:2B:E3:64:B5:F7:DB:6C:50:E3:AB:00:1D:82:EE:31:57
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 0197499F388A6475B1B6382E2EE7A5735A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0C6E
Signing time: Sat 07 Jun 2025 09:01:00 +0000
Manifest this update: Sat 07 Jun 2025 09:01:00 +0000
Manifest next update: Sun 08 Jun 2025 09:01:00 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: IOsJI1WZUjMT/FI8YN54aU/Dykuyfc58S/vgxnpigEU=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:38:8a:64:75:b1:b6:38:2e:2e:e7:a5:73:5a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Jun 7 09:01:00 2025 GMT
Not After : Jun 8 09:01:00 2025 GMT
Subject: CN=8588a8ab2be364b5f7db6c50e3ab001d82ee3157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:6d:b8:8f:98:e6:ee:28:40:30:b9:b6:e7:
36:e4:72:34:c8:c6:ec:c7:de:71:57:68:c3:d3:fc:
f9:0c:6d:89:c5:e0:b3:a4:79:5e:3f:be:1b:aa:bb:
1d:4a:78:25:a0:79:18:d6:1c:5e:f4:4b:6a:9e:90:
73:f3:15:0d:6b:74:2b:7e:e1:58:2d:b7:b6:02:cc:
28:3e:83:f1:02:e5:cb:d3:94:d6:c9:56:46:57:39:
0b:1f:c5:db:07:f4:4b:22:a6:4b:4a:66:7e:1a:aa:
dd:33:d3:0b:9a:13:a8:af:20:08:2f:a5:80:53:8c:
35:cd:98:78:77:f5:4e:69:cd:e0:6a:27:25:ac:b7:
03:e4:cd:cc:00:73:1c:c3:6d:f4:a2:f9:27:02:c4:
31:75:4d:6d:94:8d:21:03:ce:9d:c8:82:35:61:09:
ae:0d:89:d9:43:b5:bf:bb:5d:60:7d:ff:42:e5:1c:
a9:76:a6:3c:6f:f2:07:64:f7:2a:e8:c4:b2:69:bb:
ea:af:35:f2:13:10:52:d2:30:9e:b2:23:88:dd:43:
2d:a1:eb:c5:53:9f:77:bc:3f:1e:b7:17:25:20:cf:
d5:fe:c6:77:2b:ab:5e:7b:9a:99:0d:b0:4f:8a:45:
81:74:ce:e6:6b:15:6f:63:4f:2f:f0:54:50:4d:f6:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:88:A8:AB:2B:E3:64:B5:F7:DB:6C:50:E3:AB:00:1D:82:EE:31:57
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c4:79:74:43:e6:c6:02:ff:b9:a4:7b:d9:06:0d:13:15:9d:
07:7f:8a:3b:8a:c2:9e:9d:6c:eb:10:87:7c:ae:03:56:c7:52:
82:5e:81:20:81:b7:41:b4:51:bb:73:43:e8:c8:31:ca:ad:97:
0a:20:6f:2c:ca:b6:f7:a1:d5:33:a8:4a:fe:31:11:63:48:9c:
0d:1b:a7:e5:78:3e:4f:43:de:bf:66:e4:9f:99:b0:67:55:63:
36:d5:c3:67:02:d2:cd:d7:72:dd:ba:d7:ad:ec:66:a3:32:96:
ac:8d:e3:ba:80:7a:13:41:fb:72:89:ef:9a:8b:21:4d:c1:25:
de:d2:d6:ea:9e:65:58:c6:dd:0a:77:22:69:75:6f:a6:5d:67:
be:83:18:e4:c8:7d:c2:3e:2d:5f:f7:d4:e5:90:a1:1f:be:95:
88:30:11:1e:bd:0f:7d:15:ae:9c:41:80:0b:d1:e0:bf:a5:6a:
78:a3:5f:cc:81:7e:cd:eb:43:94:da:a8:26:9a:5d:bc:3b:45:
f1:4f:87:f5:fb:57:e9:be:a1:d7:4a:ba:b4:de:4c:2a:d1:59:
a1:4e:5a:3d:5c:61:99:61:91:9c:18:b3:ea:74:64:39:73:60:
74:8a:75:2f:c8:ea:4a:d1:65:5e:52:ee:41:89:38:66:3f:7c:
86:bd:f4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:56 2025 by rpki-client