Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: huMVZcNkmMJqY6/kQZsT5+8lE7L31z3BdwDNcqHk8Sw=
Subject key identifier: BB:2C:2D:A1:CC:FA:20:46:50:00:FD:40:3C:46:AA:E6:69:58:06:B7
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 019764DEF3F8AD7053EF232C55EDB2E2D213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 0A8F
Signing time: Thu 12 Jun 2025 16:00:22 +0000
Manifest this update: Thu 12 Jun 2025 16:00:22 +0000
Manifest next update: Fri 13 Jun 2025 16:00:22 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: Xyd7gnn88nzlpujqvsnrjJB/ECtQDg0Iw9+1E+T1QMA=)
2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:de:f3:f8:ad:70:53:ef:23:2c:55:ed:b2:e2:d2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Jun 12 16:00:22 2025 GMT
Not After : Jun 13 16:00:22 2025 GMT
Subject: CN=bb2c2da1ccfa20465000fd403c46aae6695806b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:5b:66:19:2e:d2:5e:fa:9b:9c:42:c5:1c:
97:de:db:9d:62:d3:a7:58:6a:7c:5e:2b:f2:57:58:
47:57:00:da:84:ee:58:47:b0:28:38:96:35:7f:50:
4c:56:ce:d8:bd:7a:7a:96:87:4d:ad:24:ca:8b:81:
93:4d:f0:a9:4c:d5:c8:24:76:d9:cc:48:92:ff:d6:
e8:55:ed:4a:fa:9d:b1:3c:44:ec:51:9c:5e:6d:0b:
42:a4:c2:02:b3:04:fa:5f:84:65:68:f5:f3:35:fc:
56:4a:69:c0:f7:60:ee:d3:fe:88:0d:9b:15:5c:0a:
e8:3e:fd:29:b1:5e:ef:fc:24:26:ab:a1:16:8c:c5:
15:92:3d:d0:14:e1:60:d3:21:3e:46:b2:4e:1e:6a:
8d:58:3f:15:d4:4f:b8:5a:7d:0f:71:36:1c:dc:2a:
83:dc:93:3f:06:0b:07:e8:18:00:dd:ad:58:90:d0:
88:94:3a:b2:75:65:23:10:fd:16:5e:92:c4:a1:64:
dd:5e:3d:49:36:89:7f:34:e0:05:83:ca:1d:06:87:
8f:93:81:7b:32:6c:2f:c6:4b:4c:b8:11:30:49:88:
4b:6d:e0:fc:eb:80:d8:44:14:9f:66:f3:69:a2:f4:
b6:5f:a2:d3:27:80:86:d8:0f:78:c0:59:81:f7:73:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:2D:A1:CC:FA:20:46:50:00:FD:40:3C:46:AA:E6:69:58:06:B7
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:90:5d:33:59:a3:25:b0:94:9a:ff:5e:79:a9:58:f2:30:
94:64:4f:4a:26:40:f9:a9:9a:ad:6f:f4:d6:45:10:dc:0a:29:
12:98:9b:1e:86:87:c9:61:a8:4d:69:10:89:88:17:4a:03:51:
7a:49:15:12:16:a3:0c:0b:52:1a:17:80:d3:74:30:47:1f:50:
d0:14:5b:9f:fa:30:33:d0:ad:b0:0c:ad:f6:39:7a:c2:36:ec:
ba:e6:04:8b:96:21:86:84:a2:a1:e2:98:0c:5a:29:67:6e:6b:
46:01:7d:a7:00:21:1f:9d:52:47:4f:e9:7a:d4:cb:0b:dc:88:
39:21:11:78:4a:4c:a3:4d:86:88:6e:15:2e:c3:39:a4:4f:f3:
25:0b:2a:57:27:8e:ba:44:2b:14:af:f7:36:6c:c8:79:bc:ee:
7b:37:c6:0b:3f:a3:cb:2a:f6:8a:ad:03:a6:05:bd:b3:ec:ad:
7e:98:07:f3:12:5c:49:b5:51:d1:65:d0:63:44:1f:d8:13:eb:
1f:40:fa:da:a7:f4:78:74:29:f5:b6:07:37:f7:a3:ac:dd:e4:
46:70:6f:63:f0:67:57:b0:7d:42:59:ee:58:9d:c7:99:bf:9e:
0e:c7:3b:20:50:28:fc:46:15:16:40:ca:5d:23:d2:b9:4e:e8:
ec:88:0a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:16:47 2025 by rpki-client