Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: cvt70uxI7yhKxYqwVt+dPKxgE6o7x472NfN3G/AqvXM=
Subject key identifier: A7:10:2C:41:A3:D5:BA:1A:E2:E6:31:31:F3:A2:E2:01:6B:5B:7F:21
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 01974779446FFF96444F5D28F24B84E0BDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 23:00:18 +0000
Manifest this update: Fri 06 Jun 2025 23:00:18 +0000
Manifest next update: Sat 07 Jun 2025 23:00:18 +0000
Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: KyN8JS5LzA6KW8jevvcymhNjbWEke7f98BXKmmEr03g=)
2: PGC2gjbo2htZQJwYOmeelo5Z83Y.roa (hash: JFulXR+ljWTJG0RiuMIfac488bMeOxp9OF6JRC9SK3k=)
3: kTvVn_B76BHAkt21A667VWLx85c.roa (hash: RlO7Fkyzwvg6DOaLdLA5nagDWX7X86stBqbWJQSamrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:44:6f:ff:96:44:4f:5d:28:f2:4b:84:e0:bd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jun 6 23:00:18 2025 GMT
Not After : Jun 7 23:00:18 2025 GMT
Subject: CN=a7102c41a3d5ba1ae2e63131f3a2e2016b5b7f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:f5:da:ea:fa:83:3f:d0:68:02:3a:9a:83:
b3:63:38:9c:1f:21:e2:e0:1e:9b:8c:2a:a7:20:a2:
7f:d5:bf:e2:e5:b7:9a:be:82:f3:84:4b:ab:3e:47:
28:38:68:32:f1:ec:95:84:8c:6c:fe:d8:15:e3:81:
1f:61:c2:d8:63:2e:ab:90:18:4e:2b:ad:6f:83:06:
0e:d9:19:1a:6b:f8:f5:9a:76:94:f3:a5:40:6b:0d:
99:85:a0:31:29:d7:01:c0:83:f2:a8:1b:f4:50:7c:
8a:2c:8b:e1:04:e3:a1:4a:3f:44:d5:06:54:66:08:
c9:66:cd:5a:0b:3e:80:14:1c:60:61:69:66:53:af:
1d:d7:89:1e:dc:74:cb:ff:42:76:36:47:12:f4:a6:
bb:c7:aa:7b:a6:8d:b4:39:df:b7:bb:77:e4:e4:9a:
8a:89:37:3e:46:53:fb:b2:7e:f6:c9:c9:de:01:62:
7d:65:78:25:d0:33:bc:e0:6b:0e:54:46:5d:c4:49:
39:f8:e6:9b:81:0d:78:a6:94:7a:36:74:57:81:26:
b8:14:21:7f:47:b0:1b:7a:84:cf:5e:0a:d2:b0:cf:
0e:b2:2d:71:87:21:40:9e:8d:c2:00:20:29:4a:72:
c9:31:16:21:ec:35:74:95:eb:a3:28:b9:4d:70:f6:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:10:2C:41:A3:D5:BA:1A:E2:E6:31:31:F3:A2:E2:01:6B:5B:7F:21
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:55:ce:e4:00:5b:e7:ea:54:bc:b4:a5:bc:ae:63:66:99:b9:
62:63:55:68:d0:75:76:01:c2:49:15:41:9e:e3:90:93:ac:2e:
ea:69:f1:c7:b9:ab:63:ba:2b:18:8b:f7:df:7f:87:a3:1b:aa:
83:f7:cd:8c:60:ed:f3:f8:5d:cf:73:f6:54:27:66:fb:1b:90:
aa:95:4e:ff:be:c4:95:c3:cc:f7:55:90:9e:44:52:7a:75:de:
e4:43:c0:42:6a:93:67:d7:5b:e1:0d:7b:f2:07:d3:54:f6:cc:
ba:fb:8a:b1:40:b8:10:3b:ba:ee:cb:f8:f8:47:00:86:36:1f:
d2:75:85:61:80:8a:8f:3f:f6:6d:e5:eb:91:40:fd:63:4c:1c:
74:b0:14:4e:bc:28:31:02:16:c1:12:c6:17:52:4a:ab:c3:12:
07:a6:be:6c:a8:ff:2d:dc:25:08:c3:2b:9f:ec:79:da:b4:2a:
46:d8:7b:a2:9c:2b:c4:3e:24:8e:f0:60:46:14:b0:b1:e9:f9:
4b:33:fa:03:a7:d2:0f:df:54:42:bd:a2:81:5a:8c:47:14:5c:
a5:1a:d1:0d:4c:17:31:d6:47:9d:de:52:e0:1a:cb:d3:19:de:
d2:83:44:29:63:6a:bc:91:c4:1f:be:9f:2c:24:17:95:15:b4:
f7:f6:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:59 2025 by rpki-client