Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier: hzyWdEOphw1TClsKQ5+wTUmrPhvCcJlcwp/yqSVjhuU=
Subject key identifier: 2E:0C:42:35:1D:84:F6:71:A2:41:62:F4:C8:8C:91:EA:1D:B3:D9:06
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial: 019770AC6AF8A5B1D275984EEEDE158A6BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number: 108F
Signing time: Sat 14 Jun 2025 23:00:37 +0000
Manifest this update: Sat 14 Jun 2025 23:00:37 +0000
Manifest next update: Sun 15 Jun 2025 23:00:37 +0000
Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: U/iCZzzC096Enxaee4NT7A+IbSuOppIQp3pAZYhjvck=)
2: jIFgf1lBNqu6NES_hhmJCRkx6WU.roa (hash: b4SkMZ2qfegq/aAVSnzcin5lHV5SoqB7AozMTZpTRfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:6a:f8:a5:b1:d2:75:98:4e:ee:de:15:8a:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Validity
Not Before: Jun 14 23:00:37 2025 GMT
Not After : Jun 15 23:00:37 2025 GMT
Subject: CN=2e0c42351d84f671a24162f4c88c91ea1db3d906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:d2:2a:4a:7b:5a:49:15:2e:14:94:56:6b:
12:36:23:ff:43:0b:5f:1f:99:db:f3:7a:0d:b0:b2:
13:d1:7a:f1:9c:ce:11:67:d8:7c:f1:f1:a0:e9:1a:
3f:3d:0d:67:47:e7:87:0d:bc:a8:31:56:7c:23:f6:
93:8d:72:ae:3f:94:7d:5d:8c:c8:db:1f:1e:75:4e:
84:fb:5c:60:43:03:8a:b7:45:4f:9d:76:3e:b7:8d:
bf:5f:90:ff:e9:20:6d:f2:6f:54:7d:13:aa:19:00:
7c:06:5f:bd:ba:7e:fa:c8:70:7e:c6:4c:f3:13:da:
b5:dd:fc:e0:00:a0:4c:cd:cc:5c:0d:c3:08:e9:17:
c6:54:a8:63:53:48:ed:f5:d4:27:0d:d4:13:a0:29:
59:e4:bb:be:68:ea:2f:31:32:66:49:2d:50:14:99:
05:85:d6:d5:9a:30:d2:c2:00:3d:a1:cd:26:a4:07:
19:f5:8d:cf:cf:5b:99:22:45:f7:00:45:ac:5f:17:
7b:29:7c:65:e2:e4:4f:cc:1b:20:c7:82:d1:7b:f6:
ad:22:bc:00:95:4c:0a:11:a3:87:bf:56:ab:84:7d:
a9:ed:fa:6a:31:e3:06:b7:f8:d7:ca:d9:3d:09:3d:
c6:a0:b7:2a:95:3f:ed:68:63:9d:02:d4:f1:ca:40:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:42:35:1D:84:F6:71:A2:41:62:F4:C8:8C:91:EA:1D:B3:D9:06
X509v3 Authority Key Identifier:
keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:eb:a3:a9:cb:fc:19:23:43:32:a1:d1:05:65:19:69:6a:f3:
c1:91:61:2e:5e:34:d9:1e:4d:4b:33:74:88:0a:4e:86:12:d6:
7e:25:4e:63:e9:06:fd:a6:7b:d9:a6:eb:d9:31:88:81:a7:b9:
97:15:42:00:f6:60:0c:b7:ac:44:71:45:c8:7a:0a:30:5d:10:
e9:e9:96:7e:ee:e8:c0:9f:59:7f:85:b9:88:2c:f4:a1:d0:3b:
f5:0b:93:08:29:43:a5:72:b8:08:99:8e:fb:2b:78:29:e7:4b:
82:55:4f:bd:a5:ce:fc:df:07:ae:83:67:67:21:12:ce:05:95:
70:3a:dc:4d:68:ea:e6:23:ac:da:c3:07:b6:fa:2d:6a:81:22:
f2:e9:ea:aa:7d:11:d7:86:69:77:01:3c:ea:57:da:a4:b2:fb:
f8:99:b9:9c:19:ff:3a:28:22:1f:a8:8f:7a:eb:f4:ff:78:4a:
e1:04:48:c4:72:09:c1:a6:f3:9b:41:78:77:b5:13:3b:08:1c:
0a:55:14:38:5e:3c:2a:77:6e:42:90:09:a7:12:48:aa:78:4d:
cd:39:bc:f5:56:91:56:a8:04:99:4c:8a:fc:c9:04:b5:dd:f8:
de:79:3d:ed:5a:af:39:02:72:08:53:a6:53:bf:fc:ca:3a:ce:
d3:d8:da:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:40:17 2025 by rpki-client