Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier: Ke62JQVGg31CgGxCf+WGn8Mo0vLSUXuRwEWRSPYvflc=
Subject key identifier: B2:B8:EE:53:C1:F1:76:C8:37:4B:58:69:AB:DD:6A:1D:EF:12:A6:98
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 01974779AA6BC10AFA619AEBDFA8F7FD4ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number: 10A7
Signing time: Fri 06 Jun 2025 23:00:45 +0000
Manifest this update: Fri 06 Jun 2025 23:00:45 +0000
Manifest next update: Sat 07 Jun 2025 23:00:45 +0000
Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=)
2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: hfKH+sDaeXCAF08BpPiOBUP0PcYK1g6Y1n9qxY5vRuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:aa:6b:c1:0a:fa:61:9a:eb:df:a8:f7:fd:4a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Jun 6 23:00:45 2025 GMT
Not After : Jun 7 23:00:45 2025 GMT
Subject: CN=b2b8ee53c1f176c8374b5869abdd6a1def12a698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:61:26:e5:8d:4c:f5:56:e0:9c:3a:14:5e:
38:46:29:78:d7:8b:5a:01:2a:91:9c:e9:60:0f:52:
dc:32:9c:e6:be:b8:43:1c:51:94:7e:30:bd:b4:cf:
26:58:e5:91:53:7e:88:74:a9:a5:94:71:14:92:f6:
73:e7:a8:ff:ab:c5:1b:59:d7:9f:54:d1:87:f8:bd:
52:e5:6d:5e:17:28:c4:a8:f9:7b:00:92:52:84:49:
77:ff:f9:36:69:bc:b9:9e:3c:73:21:b9:0b:55:93:
7c:61:d8:1d:3c:aa:09:25:70:29:d6:de:75:b4:a2:
38:cd:50:a3:43:63:9d:0c:a9:79:af:68:c3:2e:4a:
81:33:88:31:c7:67:90:79:f5:b1:22:86:a7:c0:db:
b0:c0:0b:e2:e3:32:88:30:27:49:ba:42:61:cc:51:
26:b5:22:66:a6:38:1c:de:ae:07:a3:cd:93:22:d5:
1e:ed:ce:a1:0c:00:a8:06:63:e9:82:c3:65:2f:b2:
1e:eb:99:8f:32:84:fb:7d:97:64:fc:dc:8c:34:b2:
b1:bb:b3:27:73:0f:14:5f:cf:64:78:64:16:c1:b7:
18:c2:6a:00:67:cb:06:ab:8f:9c:b2:71:65:f6:5c:
85:2b:df:c1:15:f5:87:01:2e:1c:6c:c8:27:c7:27:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B8:EE:53:C1:F1:76:C8:37:4B:58:69:AB:DD:6A:1D:EF:12:A6:98
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f8:c3:22:90:bf:e3:25:08:39:8c:b5:e9:05:57:72:f5:f0:
7d:f7:31:92:51:1f:72:de:e3:37:bb:91:8e:f7:e4:05:c8:7d:
51:2d:d8:40:ea:71:b7:c5:51:0d:b3:71:f8:f2:63:64:e9:b1:
7b:24:59:0d:81:ed:4f:b7:b7:e6:c0:e4:fc:4e:7f:27:52:11:
f4:df:25:78:b2:a2:42:8e:91:30:30:20:ed:2c:74:4e:47:91:
1f:2b:1d:4f:d5:79:a4:09:6e:17:9f:5f:39:34:0e:ad:39:33:
e7:69:67:b9:f3:52:d1:37:61:8d:86:83:af:39:34:54:73:74:
93:19:42:89:9e:36:cc:ba:77:60:c4:32:4b:61:9e:ad:4d:52:
86:12:7c:19:24:b7:ca:7b:ad:eb:0b:5b:34:42:67:f8:c1:92:
df:bd:0b:15:75:45:14:90:43:af:18:34:a9:dc:0a:8b:a0:57:
14:d4:06:70:bc:0d:a6:54:46:17:b0:93:d1:43:5c:7e:d5:2e:
da:50:07:82:eb:ff:cb:bf:64:7f:11:ca:cc:f1:0a:12:5b:e4:
b2:13:ae:9d:3b:94:bb:32:85:d6:0f:d5:00:91:d5:b7:3c:4d:
7e:cb:6b:67:62:1d:ce:e5:8a:14:02:a3:e4:b3:4b:f8:41:70:
14:42:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:17 2025 by rpki-client