Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: llWkd0J4u3iI9/DHVOrSXztsrVXVpLzYEt6v0+6WU8A=
Subject key identifier: 0C:0E:02:60:9B:5D:97:55:31:36:1E:85:F2:3C:5A:B5:22:C5:FF:26
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 01974E577E2D9DDF2813D0E96CD38F4E55B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 028E
Signing time: Sun 08 Jun 2025 07:00:45 +0000
Manifest this update: Sun 08 Jun 2025 07:00:45 +0000
Manifest next update: Mon 09 Jun 2025 07:00:45 +0000
Files and hashes: 1: UUl9tjMfoZ7A5klfeBDKB274xTs.roa (hash: SBvHQQieYmwuldne0ESh4KLqZuA1XSHveZCrpCqrHvQ=)
2: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: 6qB0ET0IwF0yxwsVqjvoK5RAw2dTYS5xtAYqgCZgL1M=)
3: k3kU5aAomwikuRNdsT68Tqjcik4.roa (hash: wCPtZXM9gkCUtgXFEirTaWeSRaiZvXJy0sUEtKPb0ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:7e:2d:9d:df:28:13:d0:e9:6c:d3:8f:4e:55:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Jun 8 07:00:45 2025 GMT
Not After : Jun 9 07:00:45 2025 GMT
Subject: CN=0c0e02609b5d975531361e85f23c5ab522c5ff26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:77:d4:b5:6c:34:d3:46:dc:68:e2:fd:28:
c9:fe:bd:d1:63:a3:a7:35:4c:ae:7d:01:e7:4b:74:
b6:2f:eb:c0:c9:e9:b6:55:2d:d4:bd:06:8d:f1:32:
dd:1f:3f:51:5a:ff:7c:03:95:b4:f4:0c:96:ea:e8:
ed:52:9d:d9:07:88:0f:9c:8c:d4:96:c5:e3:1a:7c:
c4:f3:ec:2f:0d:48:2e:58:ca:99:cf:5c:19:cc:74:
36:8d:d6:e2:9b:a5:5a:5e:ed:9d:ce:cb:88:0b:04:
e5:ea:dc:f8:d7:f7:3a:30:66:a7:22:ea:a8:9d:d7:
27:12:66:ac:d3:c4:d0:50:ee:cb:28:b4:36:6e:ef:
53:7d:59:f9:a6:36:7b:70:ba:9e:81:31:f0:eb:64:
fb:53:67:aa:4c:6e:42:ea:cc:78:12:07:ae:c7:40:
fd:f2:83:2a:e2:f6:89:de:1b:f9:dd:b8:cc:21:69:
71:24:cc:3f:8e:8d:d4:c4:ba:cd:1e:92:f3:2f:3b:
4c:8a:fb:f6:92:76:b9:95:8d:b6:83:fc:32:6e:8d:
b2:b9:cd:e2:23:7e:94:71:c3:fa:59:6e:43:88:86:
a0:c1:fe:3b:00:16:68:a3:66:44:6f:f5:c9:cc:c8:
f9:30:f3:7f:6a:d5:ff:06:2f:f0:14:6e:d4:b1:6d:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:02:60:9B:5D:97:55:31:36:1E:85:F2:3C:5A:B5:22:C5:FF:26
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ba:f2:6c:59:0c:a0:56:ba:6c:94:3f:fb:c8:ca:a8:17:c4:
65:94:cd:96:47:70:cf:fe:cd:55:37:12:42:d3:b1:8d:52:b4:
98:dc:69:fc:5e:08:0d:6c:ee:d8:dc:87:51:df:30:00:35:8b:
17:b0:e2:e6:94:61:c2:38:4e:a3:83:03:1e:8f:88:fe:1d:67:
a9:e1:b5:b7:a0:a8:d2:dc:1a:6b:98:3b:75:cf:b0:8b:f2:b9:
e9:b3:64:2d:37:bd:e9:25:9f:cb:ce:87:fd:e9:83:a5:6e:3e:
b0:be:fe:23:ef:35:ed:23:e2:af:1a:ac:5f:e5:95:de:33:d4:
43:a7:2e:37:80:a6:8e:68:c3:00:31:14:60:0f:3b:cc:66:3a:
98:51:a2:2f:2c:31:04:73:2d:b1:5b:72:09:44:67:8f:33:e6:
6b:fb:d3:54:61:78:51:b3:a7:85:5d:32:83:de:e8:4c:d5:b3:
89:f5:c5:47:9f:24:01:42:47:a5:28:74:0f:e2:a9:f9:1c:36:
94:e9:5f:ad:a1:08:8a:84:a5:3a:32:0a:05:d8:b7:bd:84:e3:
a3:ae:02:21:41:5f:9f:b5:95:48:31:de:c5:c7:af:e6:03:42:
a6:a4:af:35:9d:b1:2f:68:1e:0b:e9:be:fc:61:e3:08:f7:78:
d2:f4:c7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:02:34 2025 by rpki-client