Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: 2T3WX0WqczmfiwOjVvLbx/E07Cti+X5QKrGxbVVs2ac=
Subject key identifier: BF:3A:2B:00:24:B0:15:7F:03:39:A8:83:5A:B7:47:CF:25:CD:5B:FC
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 019766CDBFCEC4A38B9EC68EFB65C88712BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 0A90
Signing time: Fri 13 Jun 2025 01:00:49 +0000
Manifest this update: Fri 13 Jun 2025 01:00:49 +0000
Manifest next update: Sat 14 Jun 2025 01:00:49 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: Iq2QuEyD5pqdqx3i6kqSxkE2LJJ0pnhtEecwIt1YAns=)
2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:cd:bf:ce:c4:a3:8b:9e:c6:8e:fb:65:c8:87:12:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Jun 13 01:00:49 2025 GMT
Not After : Jun 14 01:00:49 2025 GMT
Subject: CN=bf3a2b0024b0157f0339a8835ab747cf25cd5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:41:c6:3e:5f:5b:55:dd:d8:61:7c:40:73:
71:aa:04:54:a8:9b:dc:0e:77:28:63:99:08:fe:c0:
cf:8e:ed:67:58:08:9c:8f:0d:43:d8:d8:82:b7:d8:
f5:0f:2d:2d:24:56:ab:e1:84:65:66:1c:98:93:44:
2a:7c:9c:2e:cc:9d:d4:e1:fd:db:57:25:5d:bd:f3:
9f:77:58:4f:27:fd:14:a4:fe:16:92:c6:65:43:9d:
e8:0c:87:b0:21:2e:ed:c8:69:6b:b0:2a:3c:f5:6e:
46:74:12:40:dc:30:8f:45:3c:26:f6:73:07:c6:39:
27:43:c7:e2:a7:dd:14:d2:e0:1b:74:5b:ac:78:c4:
2b:1e:e6:20:5a:25:ef:af:94:02:2b:d3:11:af:c3:
d2:7f:ee:ef:40:9b:d8:c7:21:5f:37:58:54:42:fa:
ba:7f:de:de:25:f6:a9:a4:f9:fd:1e:0f:fa:1f:2f:
72:02:8f:99:ac:40:1e:c5:e6:0e:db:7a:98:6a:1c:
f7:09:22:96:16:a3:23:b0:cd:73:4d:4e:aa:56:88:
99:c7:67:3f:16:59:f2:0c:60:a5:1a:f7:6e:e3:fc:
65:c7:24:ee:0e:6d:6b:92:34:e8:44:6d:bc:03:c8:
03:d5:8a:85:7e:fc:f5:34:eb:6c:fb:7a:37:fa:83:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3A:2B:00:24:B0:15:7F:03:39:A8:83:5A:B7:47:CF:25:CD:5B:FC
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ef:b9:ec:c8:be:fc:28:57:f3:85:45:92:25:51:ba:6d:21:
b1:d3:d8:b8:c1:71:28:35:5b:70:a3:99:fc:48:d3:73:f3:1d:
27:eb:d7:cc:53:89:6f:47:6c:9a:76:e9:ea:fa:c7:99:53:5a:
7d:19:b0:94:be:cb:35:32:ac:d9:0d:44:58:da:87:c5:76:cb:
43:10:a8:81:e2:c6:f4:4d:b9:76:0a:1b:e7:a4:9b:e8:2c:d8:
0f:82:84:96:47:dd:c5:eb:da:d4:10:04:36:1b:ca:2c:f0:46:
4f:dd:3a:6f:ff:2f:fb:00:66:59:46:de:bb:c3:a2:a8:89:51:
62:db:9c:4d:54:fb:f6:a9:77:9b:39:84:5f:c8:22:20:a9:27:
be:6e:e1:74:72:51:d3:1e:46:2d:45:af:aa:f8:ab:f3:d4:a0:
04:bb:6f:ce:ec:e7:3a:d2:af:06:59:e3:c1:b9:68:45:b1:7e:
63:21:f4:f5:51:c2:72:95:22:22:63:73:ed:3c:b8:c2:db:dd:
18:d6:a3:dd:17:92:2c:3b:04:20:d2:78:a1:b1:3d:46:48:70:
9c:3c:28:0c:b9:4d:d8:91:9f:0d:37:2c:43:db:75:e0:74:2a:
50:70:a3:aa:c6:57:60:38:00:51:54:6e:13:4d:55:39:6d:3e:
a3:ef:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:06:21 2025 by rpki-client