Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: ZVBuCzSOVVUDWWQ/PBa7xjsOa9F+g7p/dnuRmeFM7Vc=
Subject key identifier: 06:45:75:1B:6D:EC:D0:3D:DC:D9:68:C9:8B:F2:0E:6F:9E:B8:FF:24
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 01974742BE9DA4004C307BD78F14FF6D8AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: C7
Signing time: Fri 06 Jun 2025 22:00:45 +0000
Manifest this update: Fri 06 Jun 2025 22:00:45 +0000
Manifest next update: Sat 07 Jun 2025 22:00:45 +0000
Files and hashes: 1: O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa (hash: 3xRQqmBaiPMEC6+BvwWE12p1a9per8d/4WLoxHZdLwY=)
2: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: Izy2OpBTaBiiDPwj8HxkxUk8O30/KEk/Y1ErAbHRboY=)
3: hs1Ttmuuy8oKm2rJqVYgyDXaPIw.roa (hash: Byo6rO4TnKOVrKw6LlKH8flPLRHULJLiFuZMsf82Wv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:be:9d:a4:00:4c:30:7b:d7:8f:14:ff:6d:8a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Jun 6 22:00:45 2025 GMT
Not After : Jun 7 22:00:45 2025 GMT
Subject: CN=0645751b6decd03ddcd968c98bf20e6f9eb8ff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:00:bf:a0:54:ac:83:c7:bc:65:c5:05:82:
58:a5:fd:85:c0:0b:56:33:09:94:47:ff:b8:78:6f:
72:11:09:76:84:5b:18:78:f7:f8:3c:a9:85:e5:fb:
b0:49:69:4e:f9:9f:d2:e8:85:db:de:ec:ff:ce:ac:
9b:c2:ed:05:74:3c:9a:af:2e:5c:21:71:07:24:3e:
7f:2f:0c:75:6b:4b:1d:26:b6:e1:e3:af:f1:9f:a2:
a3:ee:a6:42:37:5c:15:e9:bc:1a:77:ea:fa:3c:a8:
c0:d3:fa:a4:5e:3f:67:15:41:9d:38:a0:43:98:ce:
49:95:4a:35:49:e6:fd:c2:71:e9:35:55:be:5d:1b:
ae:34:c6:d0:97:39:21:2c:be:ed:e6:01:81:65:84:
13:b4:da:24:31:55:65:43:8b:c9:4a:9f:e9:12:6a:
b9:7e:31:c0:a0:2f:fd:30:e3:f4:0b:92:d3:14:4a:
47:1b:72:c4:d3:e1:57:0b:fa:da:00:8b:cb:da:7b:
41:62:e9:d0:29:df:a7:75:ea:63:71:55:5a:8b:6a:
47:af:6d:ee:6f:f9:42:41:0d:99:13:10:67:86:00:
da:4d:a3:e5:2d:9d:b0:67:0e:40:7b:49:0f:53:42:
89:b9:5d:44:30:b0:c3:7f:02:75:27:f4:53:29:3c:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:45:75:1B:6D:EC:D0:3D:DC:D9:68:C9:8B:F2:0E:6F:9E:B8:FF:24
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:38:90:d0:6e:29:e4:74:b4:09:6f:cc:9d:45:7f:59:03:20:
b2:3f:e2:86:bf:b8:29:f5:28:6d:a6:cd:a1:f2:18:7f:2c:84:
d0:b2:11:b6:d8:03:c3:9f:27:ae:50:2c:49:16:3b:80:b9:ea:
40:70:27:1b:26:91:18:3f:51:48:00:ca:a5:ff:3c:c4:36:50:
c7:db:7a:ac:c5:41:b9:7b:d5:57:41:f3:0a:5f:ba:98:0f:ea:
7c:68:35:b3:27:73:ee:6e:79:8c:ee:c4:17:3a:82:a0:55:b4:
03:2f:27:48:54:b4:c6:36:47:73:4c:b2:3a:85:c9:82:92:82:
ea:ae:8c:ce:56:75:d4:b2:33:bc:d1:53:68:35:39:7f:f0:c8:
d2:6b:d5:8e:a0:22:87:de:80:e2:ae:6c:00:d7:0c:8a:45:d4:
84:89:41:d5:a5:4a:1d:a6:b6:66:a7:76:a8:d2:2b:44:1a:a1:
fc:a0:1a:a2:ee:86:d7:ee:4a:75:9e:33:85:34:9d:73:7a:28:
47:3d:3e:b3:77:21:2b:1c:38:f3:d7:f0:0b:97:07:ad:8b:9d:
33:6b:38:fa:72:9f:99:3d:82:ab:ab:97:e1:4b:14:f1:0c:13:
55:1a:ea:7b:c3:d5:84:a2:3a:52:14:53:0f:bd:4c:de:c2:ee:
3a:12:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:29:17 2025 by rpki-client