Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: onnOl4+DCQOaXPzXv5bv2fmE9/fOXCbGGRFlvFW+LgE=
Subject key identifier: 6E:50:3A:2B:C0:37:5B:18:4B:2F:82:9A:27:D1:90:D4:B6:14:72:74
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 01974BFB92509CAFAEC499B09CF1B994126A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 0216
Signing time: Sat 07 Jun 2025 20:01:07 +0000
Manifest this update: Sat 07 Jun 2025 20:01:07 +0000
Manifest next update: Sun 08 Jun 2025 20:01:07 +0000
Files and hashes: 1: c4kqcT1XSHJJ0FNREY_3KgQV5Zg.roa (hash: BFqJRUOC40P0vfCEnDcc5S1ZBpr8qXlnCPbjKvFWFf8=)
2: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: eXv9G/huLTPc25z0xtE5vfhseG4DuvjA29UTt1MFX74=)
3: rHbDbOyUaIh8TDURqX1ieGWXWQY.roa (hash: GnpW8sbC72mBlbxSlssELbw/VvK2heRrWW+jN0rRSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:92:50:9c:af:ae:c4:99:b0:9c:f1:b9:94:12:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Jun 7 20:01:07 2025 GMT
Not After : Jun 8 20:01:07 2025 GMT
Subject: CN=6e503a2bc0375b184b2f829a27d190d4b6147274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:f3:ba:54:f5:d0:17:d9:e5:62:75:40:1a:
ec:61:5b:92:68:7a:9b:f5:a4:56:af:94:96:26:b9:
cd:91:a4:5c:09:b0:b2:b8:7d:ad:54:b8:0d:00:39:
1b:2e:b6:92:1c:15:66:b5:82:4c:ed:96:4a:e5:c1:
a2:bb:3f:b1:27:df:1f:a4:6b:a7:94:0e:52:f7:4c:
8b:7a:0d:bb:4a:71:08:0b:e6:33:98:02:ec:0c:c9:
2d:12:5c:1d:ef:c0:8d:52:31:05:eb:f0:04:02:f0:
05:36:78:7c:ae:5d:ff:a3:61:5f:d9:ce:4a:6e:ca:
e1:cc:a5:fe:94:08:1f:7f:c9:23:47:88:9f:4c:96:
4f:02:08:4d:3d:8d:5d:f5:6b:f8:a3:14:c1:db:e4:
73:0f:20:fe:c4:8e:06:8f:3a:f6:07:b5:1d:7a:19:
17:e4:b7:fa:de:12:48:bb:f4:96:2d:24:c7:51:13:
65:20:c5:c0:a0:72:e1:a9:b4:dc:30:58:20:bb:d1:
23:9d:22:7e:63:87:87:33:1c:96:df:0f:f0:90:dd:
bf:20:ff:21:0e:76:80:bc:6e:69:8e:84:39:e4:3d:
1f:a2:e2:24:c0:5e:db:9f:07:92:d2:61:ab:ed:b2:
64:d4:67:0f:92:0e:b0:4a:fe:1e:71:e2:ef:da:54:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:50:3A:2B:C0:37:5B:18:4B:2F:82:9A:27:D1:90:D4:B6:14:72:74
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:b7:e6:aa:83:e9:f6:2c:25:2c:2c:76:9d:0b:71:1c:ec:
1e:dc:d8:ed:d6:e8:d2:a9:31:c3:d8:8d:8d:03:55:50:3a:55:
1f:fd:6f:83:57:01:5c:60:17:fc:f5:24:08:55:1d:6a:ae:20:
55:5e:53:62:d8:25:3b:fd:b0:37:51:1d:d2:34:a6:79:3e:06:
e2:22:27:30:9c:83:90:78:cd:31:df:e7:c5:9f:8d:12:6c:ee:
bf:78:17:e6:a8:37:62:71:02:c2:37:2f:a0:d2:0c:44:b0:d4:
c4:ed:a3:6f:aa:63:41:f0:cf:0a:b9:bb:d4:74:53:e9:32:23:
1c:bc:19:0b:75:bb:6b:46:bf:a3:7c:9f:17:ec:78:a5:e9:a2:
4f:7d:21:f9:fd:01:f9:a4:36:1e:f3:90:f5:41:5f:a4:36:74:
f2:85:59:37:c2:33:74:42:3c:7f:8a:cd:5e:9b:e5:94:a4:21:
9b:a3:a2:b0:39:e0:78:82:92:1f:ee:73:46:e2:f1:d6:b0:09:
7b:45:ea:d9:04:7a:23:d1:aa:e0:96:4a:a5:ca:8a:07:2e:d9:
f1:0b:d3:7a:fc:2f:00:74:7a:c8:52:54:59:27:d4:25:a8:7f:
4d:f6:d3:72:84:5d:68:dd:55:27:14:fa:6b:cd:4c:02:ad:d6:
e6:6d:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:15:20 2025 by rpki-client