Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: 89+TamQnfp5S/As6e6vGbvrDJErDLzPYlXz6bwy2Bgc=
Subject key identifier: 45:93:02:D6:67:66:DC:7D:05:AC:0B:41:DC:9E:E3:1B:36:C4:A2:95
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 0197462FE32BCDF174B211ACA6ADA86A7DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 17:00:32 +0000
Manifest this update: Fri 06 Jun 2025 17:00:32 +0000
Manifest next update: Sat 07 Jun 2025 17:00:32 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: YXMotOTtfbkh/Cily/vfRWX0M+xd0DLCky6iuBI88p4=)
2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:e3:2b:cd:f1:74:b2:11:ac:a6:ad:a8:6a:7d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Jun 6 17:00:32 2025 GMT
Not After : Jun 7 17:00:32 2025 GMT
Subject: CN=459302d66766dc7d05ac0b41dc9ee31b36c4a295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:2e:44:d1:b9:5c:b3:b8:11:05:23:b2:79:
28:46:1b:8a:59:29:c6:77:a5:3c:7b:d0:31:ff:a8:
22:04:51:d2:4d:8a:cf:d0:de:3e:11:56:79:bc:f6:
3e:9b:5d:21:a5:cf:e4:e0:35:72:75:3c:d0:29:99:
0a:59:b3:62:ec:81:38:6b:d6:c4:dd:ba:5b:30:22:
0c:38:e0:23:48:b1:79:46:38:41:e6:37:bf:1d:12:
de:8d:98:57:a5:e1:8c:26:ec:3a:b2:2d:b4:40:41:
34:cc:0c:4d:37:db:d8:e3:9f:7a:df:15:e4:7d:88:
4d:b6:ef:dc:de:e6:ae:22:c9:2e:9a:c9:3b:48:a3:
2f:95:3d:f1:38:6d:54:f9:f1:1e:94:c1:e4:b0:66:
48:e6:c5:f5:59:08:0d:dc:ab:1e:fa:92:41:d0:aa:
4b:3e:ff:c4:b8:73:c7:92:d5:29:6d:b3:b9:3b:ce:
b6:f7:5a:32:b6:19:e0:1d:9c:6e:bc:9f:2e:71:5e:
f1:74:f7:21:44:4a:9d:ea:ff:d9:86:51:ec:ac:7c:
f4:9f:f9:a1:57:be:19:05:a6:62:fb:1e:70:36:79:
84:71:52:a1:3e:f5:c4:7a:f7:19:e5:06:52:72:96:
ab:ef:9b:ca:db:83:2c:fb:c4:cf:43:94:74:0a:91:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:02:D6:67:66:DC:7D:05:AC:0B:41:DC:9E:E3:1B:36:C4:A2:95
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b7:2b:44:2f:1c:a1:03:ac:3d:b6:84:6c:b1:19:b7:54:a7:
fe:2c:70:44:5b:aa:f6:e5:ed:97:6b:13:e0:da:63:d8:d5:84:
18:40:b2:bd:ff:f1:4d:0c:fa:82:e6:2e:5e:b6:7d:9d:4b:a6:
2f:e3:8f:e3:c6:f9:02:11:31:36:4a:f6:be:a5:11:6d:7b:a2:
2b:b9:c4:c3:10:9c:ae:08:23:9f:c2:f5:bc:a6:14:a4:ef:cf:
90:2e:cd:08:1b:ae:b8:58:58:01:30:81:43:94:53:fa:3c:5f:
03:04:9c:11:36:75:0b:8f:ab:5e:ad:57:cd:2b:2b:d2:5a:cf:
1b:73:03:8c:5b:6b:66:31:28:18:94:ed:25:27:c9:ea:a8:8b:
b1:20:b1:45:ca:22:29:0f:78:3e:6a:9c:b3:84:97:25:8b:68:
44:d3:90:38:4d:33:4e:12:1e:a0:5c:d3:6f:9b:6d:0a:60:80:
f1:67:46:5a:fe:ad:eb:85:50:70:c8:01:5e:af:0c:56:5d:19:
ed:39:90:42:9c:01:4a:08:8f:f5:90:36:6d:10:14:46:db:31:
56:92:ab:e7:bd:4b:3f:c8:4b:5a:10:37:ea:8f:3f:2e:f6:10:
a0:23:e7:16:1e:e1:be:70:b9:71:dc:78:72:d0:81:34:0a:ca:
ae:8d:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:40 2025 by rpki-client