Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: tiXyavB6tptwC9Ip/KgZL4/o0kydpptAvqjOauK8FCk=
Subject key identifier: 9E:39:6C:36:93:3D:6A:F4:53:57:0F:55:9A:1D:29:B1:49:A4:AB:DA
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 0197470C355F340799320CA53731436F66A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 1580
Signing time: Fri 06 Jun 2025 21:01:11 +0000
Manifest this update: Fri 06 Jun 2025 21:01:11 +0000
Manifest next update: Sat 07 Jun 2025 21:01:11 +0000
Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: h/zXROsUOXG3KRU8xRQ4ghkK1jKX+WWzelpa5VXgO4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:35:5f:34:07:99:32:0c:a5:37:31:43:6f:66:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jun 6 21:01:11 2025 GMT
Not After : Jun 7 21:01:11 2025 GMT
Subject: CN=9e396c36933d6af453570f559a1d29b149a4abda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:2b:0f:74:89:f9:30:59:30:60:48:f2:e2:
96:9b:46:46:23:87:05:e1:c3:36:06:fc:b0:10:1f:
cb:89:96:b5:9f:59:b0:2c:aa:ac:2c:c0:e2:c1:66:
8c:20:95:24:2f:66:7b:c6:80:9f:fe:36:51:40:25:
d9:c1:15:75:a9:f9:e0:dc:30:f7:9f:02:a4:c1:a3:
05:d1:71:4b:70:5c:c2:f5:17:f7:69:e5:b0:b2:73:
14:77:00:7e:34:00:39:9d:dd:1c:7a:54:f4:83:f7:
3a:36:35:1b:11:68:fb:9c:80:0e:1d:80:32:28:cf:
d3:9b:b8:e5:44:cb:24:4a:f6:cc:0d:f7:a2:de:8f:
69:15:ae:1d:19:f0:4e:d6:4d:4b:c6:65:43:bd:8c:
1f:68:f6:85:cb:85:a9:f0:af:19:a0:f6:40:6a:ac:
c8:c9:be:1a:62:93:0e:44:b1:a9:1a:5e:0b:f7:4b:
8f:41:63:2a:95:2e:5b:69:f7:85:d3:47:33:27:97:
e4:6b:25:8c:a7:1e:ad:c8:6f:80:8f:a6:02:d1:35:
5a:8e:05:84:34:f9:1f:f3:e2:55:8a:84:98:21:e3:
4f:10:44:ec:3a:13:2b:47:5a:8a:a1:3d:0f:1e:4d:
21:6a:b0:e2:8f:ac:aa:bc:07:f2:a1:fa:7e:ef:7a:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:6C:36:93:3D:6A:F4:53:57:0F:55:9A:1D:29:B1:49:A4:AB:DA
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cf:ba:56:fb:17:b4:28:96:b0:56:4d:31:c4:7d:bc:c8:0d:
16:66:52:24:d8:04:bd:67:d0:84:01:a4:c9:40:61:eb:7a:31:
e3:c7:23:24:a7:79:e1:2b:e3:48:d7:85:8d:93:ba:55:9b:fa:
e5:8d:43:1c:f9:6b:8d:34:f2:6b:1a:1c:26:a9:d9:6d:d8:a2:
7d:fa:60:a0:c8:15:6a:8b:89:b5:51:e5:6d:58:00:78:8f:54:
b0:78:09:79:fb:bd:ed:e3:3a:85:fb:e8:52:03:51:53:c6:da:
ee:27:e8:88:fa:37:bb:96:ed:df:fd:74:e4:94:d9:ee:5d:d1:
4a:ba:11:77:bc:ca:b2:49:6f:85:63:c3:30:da:5e:a3:79:5a:
9c:08:26:41:32:19:08:7a:46:37:ca:44:c8:75:ad:bd:ac:23:
d5:bf:d7:8d:ae:d1:1e:96:5e:f4:0d:5b:af:5f:75:28:ef:44:
1c:cd:e3:c0:9b:6c:0c:80:ac:5a:79:f4:c1:c1:df:6e:a6:bf:
71:d6:b6:f5:fd:9f:51:86:42:b6:bd:1c:1d:75:3f:24:33:6a:
f4:71:f7:ee:d6:04:6d:b3:71:02:4a:99:9a:f1:0c:86:64:42:
09:13:f8:c1:1b:64:e7:fa:8d:2c:0e:ca:e9:13:d9:20:88:8a:
0b:9d:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:44:59 2025 by rpki-client