Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: kf0grjWRGB6gwbnt/55txcKY+/9h/4d1PCNchXNIVbY=
Subject key identifier: BC:77:B0:A7:4B:11:45:8F:67:C3:E4:49:D5:CA:1E:F3:54:F7:8F:E6
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 01974A7B6BC1DB709B8ED24423D92FA19E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 0401
Signing time: Sat 07 Jun 2025 13:01:31 +0000
Manifest this update: Sat 07 Jun 2025 13:01:31 +0000
Manifest next update: Sun 08 Jun 2025 13:01:31 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: rTiaTFIPS9BQFIb6xufenugifuvOnuNcZQvR5QH/JpI=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:6b:c1:db:70:9b:8e:d2:44:23:d9:2f:a1:9e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Jun 7 13:01:31 2025 GMT
Not After : Jun 8 13:01:31 2025 GMT
Subject: CN=bc77b0a74b11458f67c3e449d5ca1ef354f78fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:24:3a:9f:38:49:2b:ea:ff:62:eb:ce:b0:
22:36:6d:a9:66:72:5d:97:f8:86:c7:ed:fc:74:92:
dc:fc:12:c0:20:1d:98:9b:93:fe:9a:22:b2:46:79:
da:ee:29:b6:b4:15:01:b5:c9:a8:02:16:8f:7f:26:
85:af:bb:80:ab:35:ea:4e:51:0b:47:f3:7c:ad:47:
df:c0:7c:4f:2d:38:6a:0c:20:fb:c5:eb:4b:3d:2b:
f0:57:a8:c2:f3:a1:d0:13:11:97:9e:ea:30:a7:dd:
90:85:d5:b3:d1:34:0e:50:fb:8a:ee:52:ab:ae:82:
89:f8:e2:52:53:c5:93:0a:46:4f:95:85:49:3a:e1:
25:14:40:c1:94:09:3f:ec:7d:e4:02:08:5e:23:f5:
ca:bd:cb:c8:cd:be:e4:4f:39:c0:49:92:9c:9b:59:
15:01:eb:7e:1b:f5:e0:cf:7b:52:90:c7:86:97:d1:
2c:50:74:3e:78:21:a5:0d:86:4a:97:b6:34:c7:45:
5f:fd:24:e4:13:29:ce:fe:b3:c5:17:21:e0:2e:b4:
da:af:a0:d8:b0:6e:13:ce:75:de:63:58:f1:a3:e4:
b5:a8:15:ad:06:3f:32:07:63:9e:fc:90:62:b1:83:
01:f9:d8:30:a6:46:42:e0:9d:9f:7d:aa:aa:52:35:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:77:B0:A7:4B:11:45:8F:67:C3:E4:49:D5:CA:1E:F3:54:F7:8F:E6
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d9:b2:26:6d:ac:f9:92:d8:c8:2c:e9:8b:8f:ce:57:be:37:
64:4a:44:53:c0:6a:2e:f3:e5:dc:cc:c4:a1:15:29:1a:df:61:
67:07:b4:d5:44:01:2f:92:27:ac:e2:3c:6c:a4:80:a2:d0:e6:
12:7a:b5:d9:ce:46:33:21:9b:91:34:50:62:92:4e:0d:06:f7:
c5:28:ad:e4:f6:aa:80:20:e6:69:69:a9:1d:53:b0:a8:cb:d6:
47:f7:8f:72:70:a3:d8:e6:72:a4:da:2c:87:67:d9:90:71:5d:
e7:df:34:a8:68:19:f6:ab:94:6e:6e:4b:1b:91:98:1a:07:dc:
b0:e0:aa:d1:e5:f2:3f:cd:2c:2b:23:c4:8c:b1:8c:6a:1b:ed:
43:7b:3a:44:a1:2d:dc:6e:cd:36:24:aa:b9:a3:e5:27:95:81:
49:90:58:f5:35:36:26:17:11:bf:d6:0e:64:3b:3f:c8:18:4f:
61:4d:3b:9f:ca:75:ad:6b:48:02:fe:b5:25:9b:42:b4:b7:75:
ab:8f:ad:9e:3b:9a:cb:49:1c:cd:3e:61:d5:18:2a:91:a3:1a:
59:b5:a5:db:cc:b2:a5:d4:1f:39:83:f5:56:16:cc:dc:0a:21:
97:cf:49:92:19:27:16:af:a4:80:ac:79:2d:cf:38:4c:81:bd:
60:fc:17:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:37:36 2025 by rpki-client