Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: p8KbcVGPU4fuEq482AhxA/cmmxAF6klLwh9W2dYAfBs=
Subject key identifier: D2:AA:B6:0C:99:AD:63:22:9F:B7:BF:A3:1F:73:39:66:E7:DB:6F:89
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 01974B8DD25226B66172051B1AC243DDE999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 0521
Signing time: Sat 07 Jun 2025 18:01:15 +0000
Manifest this update: Sat 07 Jun 2025 18:01:15 +0000
Manifest next update: Sun 08 Jun 2025 18:01:15 +0000
Files and hashes: 1: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (hash: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: AwbpjZZfGo/fEV/r7WZjZ+W/ZtmZ5rH8c8CyPd7SE7w=)
3: qiRFgTjVRdabsTRRM1YWXUGLw64.roa (hash: lCjSoDx/oZnpAtqpweWxZW6jo+ICoZqCCQhV41u6/VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:d2:52:26:b6:61:72:05:1b:1a:c2:43:dd:e9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Jun 7 18:01:15 2025 GMT
Not After : Jun 8 18:01:15 2025 GMT
Subject: CN=d2aab60c99ad63229fb7bfa31f733966e7db6f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:10:76:52:9f:c9:79:90:35:ec:84:20:fa:
a3:17:1a:aa:cb:5b:fb:7f:90:4d:2f:56:a6:09:59:
91:e7:f1:f4:99:ec:e7:8c:0f:e2:90:d3:fe:2d:13:
ba:20:3a:0b:88:72:b4:77:10:ed:4e:65:4c:57:2e:
93:07:3e:79:7a:aa:22:83:81:b0:49:e7:c1:e2:5e:
16:c2:34:49:69:fd:fe:ff:3f:69:72:b0:68:cd:b5:
be:7a:fe:5b:d5:d6:26:47:49:85:e8:5a:27:20:f3:
24:9d:6c:cc:2d:cf:af:c1:7e:f6:b2:05:ff:fc:2e:
59:a3:a5:c2:64:b8:ae:05:92:b4:b1:06:0c:42:71:
9c:e4:52:f4:cf:da:28:7d:84:cd:44:29:4b:ba:f0:
99:ad:b4:8c:16:22:a3:db:56:17:c1:6d:e5:a6:10:
f5:69:fe:a5:bb:8c:cc:1f:27:bc:91:33:3f:59:75:
69:81:5e:d4:2e:d6:16:1f:04:05:b1:bc:0b:bb:42:
61:30:a7:1e:55:ab:6a:3f:1c:50:b1:0a:73:49:89:
c5:db:70:04:ac:53:0e:e2:ff:fd:23:68:7e:06:ce:
d0:2e:60:22:b6:50:21:43:6a:12:a5:da:1b:38:75:
34:ef:36:5a:2d:b1:9e:21:6a:db:3b:76:9a:7b:79:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:B6:0C:99:AD:63:22:9F:B7:BF:A3:1F:73:39:66:E7:DB:6F:89
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1b:d2:02:7a:32:be:89:d8:22:93:6e:07:b4:ba:6b:3b:d1:
f6:50:2e:34:9a:de:17:24:39:1d:61:e7:a6:31:64:c6:57:2e:
09:57:2d:74:14:23:28:23:04:7b:dc:0e:2a:52:dd:bb:f1:7a:
86:a9:94:0b:d2:f7:a7:78:6c:c0:b8:49:bd:31:2d:06:25:ec:
60:b8:50:52:b8:17:38:d6:78:ba:aa:60:0a:56:1d:21:71:a4:
c0:17:58:9f:ef:ba:85:23:46:28:c4:cf:e5:0d:4b:ff:f0:f1:
40:5e:1c:38:93:54:87:85:e8:8d:a6:e5:b8:85:1f:11:3b:0b:
d9:24:98:16:4a:67:4e:3c:ff:53:8c:81:0f:9b:2e:10:a4:c4:
df:5f:b9:a4:ba:30:8b:af:cf:07:c4:54:d0:04:d9:7e:85:82:
44:82:12:26:0d:23:d5:0c:a9:95:5d:88:48:30:bc:30:f4:db:
cb:0a:d0:41:3c:f2:11:70:2d:79:51:88:d0:5e:eb:82:f0:6a:
9d:81:60:8a:80:bb:dc:0a:43:84:f6:66:bf:e6:14:b4:fd:e3:
b6:30:bd:59:b6:79:4d:fb:45:20:f6:e7:ef:b3:71:c8:08:5f:
6a:32:ab:79:4c:77:d8:c8:11:8c:62:b4:5e:1e:8c:0f:bd:1c:
d6:a5:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:43:33 2025 by rpki-client