Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier: fSbYiBFOK/SeCtBxWOrsUytpCMc0uh7od4/RdyWdPmI=
Subject key identifier: 9B:4B:86:3E:2B:82:7F:A8:67:C3:82:95:A1:19:40:FE:82:1B:01:2F
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 019748C2EFA924E9329373FC5E8D0086411A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number: 08C0
Signing time: Sat 07 Jun 2025 05:00:24 +0000
Manifest this update: Sat 07 Jun 2025 05:00:24 +0000
Manifest next update: Sun 08 Jun 2025 05:00:24 +0000
Files and hashes: 1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=)
2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=)
3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=)
4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: w1Df3ZLpMcFv0dnCB95XYsM7sFO3nZ/YFqLC3ogJVlg=)
5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:ef:a9:24:e9:32:93:73:fc:5e:8d:00:86:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Jun 7 05:00:24 2025 GMT
Not After : Jun 8 05:00:24 2025 GMT
Subject: CN=9b4b863e2b827fa867c38295a11940fe821b012f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:60:af:42:4d:d5:fb:5d:9e:4b:28:45:40:
10:02:7f:67:9b:79:23:2c:c4:d3:15:50:fe:67:da:
82:b5:96:e8:2d:6e:f6:16:08:63:34:2e:93:3c:70:
d4:7e:7d:c0:c6:ca:90:aa:28:df:e5:0a:1e:48:94:
e9:f7:3b:5b:c4:e3:61:66:32:cd:e1:a5:42:13:14:
4a:46:ea:b1:2c:52:7a:6c:0b:c3:8c:cb:10:f7:7b:
61:5c:ea:d2:25:ac:f0:30:17:82:75:fa:a6:14:15:
65:87:04:cc:ae:93:2a:36:55:47:e4:56:ac:af:f1:
5f:8f:8e:55:d2:0c:8e:70:36:ba:ff:f2:ae:a4:0b:
f0:21:e2:0d:c8:12:26:fe:c2:e0:9e:92:f0:93:69:
c3:37:c7:4d:91:23:33:51:1e:68:20:26:d4:b9:37:
d7:e1:0e:20:69:12:88:bb:0d:cc:d6:f2:df:66:7d:
c0:8c:5f:8e:5d:14:57:7e:3a:f2:6d:41:76:cf:9f:
22:8a:c4:92:c7:b4:e7:9e:a0:e3:7a:80:72:42:08:
78:cf:d0:9e:b1:9b:2e:ff:8b:3c:50:c7:de:5c:fa:
4d:07:43:8a:4e:4e:1c:88:32:a5:53:74:02:2b:38:
50:b5:23:46:78:bc:70:ae:9e:69:68:d7:5d:af:af:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4B:86:3E:2B:82:7F:A8:67:C3:82:95:A1:19:40:FE:82:1B:01:2F
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:49:77:69:d4:01:23:bb:95:ff:7b:0e:eb:77:f0:72:68:b7:
48:25:84:17:dc:3c:d0:96:66:c8:6a:de:52:0f:09:16:38:82:
c5:89:d2:79:a3:00:6c:77:de:e5:f9:d0:4d:d8:59:0a:59:41:
63:0f:19:cf:36:ec:66:7e:9c:c1:0c:c1:3d:55:99:0e:48:b1:
ec:1f:2f:f4:b6:d4:c9:c1:4b:fb:53:2f:0a:d4:00:97:c8:b9:
6f:de:50:51:08:9b:1e:a9:b0:fa:0f:a6:b9:59:42:62:e0:e9:
84:ba:b7:8b:ba:56:ba:01:9f:c4:0b:12:f5:f0:7f:fb:b5:69:
a1:f9:bb:70:b9:0c:2d:10:e9:ef:31:e4:18:64:d6:e0:19:b0:
1c:f7:e6:f9:7d:14:3b:22:00:84:3b:85:56:19:11:ab:ad:ce:
0d:69:b1:10:d0:16:ea:08:d7:c7:c4:ab:3f:f8:33:ef:a1:f2:
b1:f9:9b:56:d2:0c:2b:7f:7e:e4:68:3b:d2:d7:50:b1:50:a3:
6a:fa:c7:df:81:0a:c9:a3:d3:f7:fc:c2:d3:53:a1:e2:a9:a7:
21:fc:bc:26:eb:8b:11:cf:96:4c:fc:f2:a9:78:d5:49:0b:65:
2e:e9:0f:63:eb:52:f6:82:59:6a:fc:a2:ce:bd:92:43:29:5e:
91:88:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:22:19 2025 by rpki-client