Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json)
Hash identifier: oXHzDhGIGNva1dVHXfzIWa/PdSQGD4SalVuyR3XJeLw=
Subject key identifier: 24:32:A4:2C:A3:4B:AB:45:64:B9:50:3C:F2:77:F2:E3:88:81:0E:6A
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 01974AE85543875A073A9E39D6CC181DE9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
Manifest number: 0A47
Signing time: Sat 07 Jun 2025 15:00:29 +0000
Manifest this update: Sat 07 Jun 2025 15:00:29 +0000
Manifest next update: Sun 08 Jun 2025 15:00:29 +0000
Files and hashes: 1: 0nY8WimC5lB0bql9f3U9kRi_8I4.roa (hash: 8StTkkNbb/yW2jlpCIQh00ucmFvEjZPmIDJRuFhboiI=)
2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: dhDemUaTB88DCFVbQO/Yr3tU/9unI5FgqVbOEqozqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:55:43:87:5a:07:3a:9e:39:d6:cc:18:1d:e9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Jun 7 15:00:29 2025 GMT
Not After : Jun 8 15:00:29 2025 GMT
Subject: CN=2432a42ca34bab4564b9503cf277f2e388810e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:c8:fe:0d:d3:6d:3a:0a:c9:74:96:55:b5:
fc:34:cb:96:8c:0b:c0:a6:6d:33:53:50:02:4c:e7:
98:85:3f:f7:e9:58:3e:f5:22:6f:40:ab:db:55:b0:
75:f4:03:b2:91:18:6f:c1:ae:53:30:ad:1d:08:5a:
08:52:9e:af:3d:78:76:b0:b9:af:8d:76:e9:e5:3e:
0f:6a:50:a7:fd:13:2a:d9:9f:8e:4e:b3:a6:42:94:
d7:21:7a:54:fa:49:f7:8a:32:ee:3e:22:88:7f:ff:
4f:5a:1d:35:42:bf:4a:f0:78:6c:22:3d:6f:6d:6d:
94:7f:7e:73:a9:f4:63:82:14:f6:70:42:e7:74:fe:
c6:61:da:93:e0:2a:4a:ae:12:29:09:41:15:b7:a5:
fd:e0:7e:a1:8b:ff:3e:03:d7:d2:7d:ac:88:f5:34:
3c:1e:12:9e:9e:23:ad:08:47:77:27:e6:6e:46:48:
f0:f3:c6:6f:18:67:43:eb:e0:48:3d:b4:7a:c2:c2:
55:5f:96:41:91:3c:9a:29:b6:b6:8a:5f:a8:a2:ff:
7d:6b:f9:04:61:bc:ce:1e:c2:4a:40:25:a2:0b:ff:
6d:7b:e6:5b:bb:71:74:b2:ec:5f:5a:e7:09:fa:7a:
29:74:4c:55:ab:af:87:fb:d9:4d:72:ab:ae:80:e9:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:32:A4:2C:A3:4B:AB:45:64:B9:50:3C:F2:77:F2:E3:88:81:0E:6A
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fd:f9:b7:66:48:e3:a9:18:01:37:c9:61:4c:12:f0:43:9b:
12:39:a1:22:53:fd:7f:e4:a9:58:74:4a:88:32:f5:13:25:73:
a1:8c:d2:c8:fc:e4:99:cc:3c:99:10:dc:89:b0:77:25:21:a5:
77:27:fc:2f:cc:6b:c2:6f:ef:c7:c8:9c:1c:a3:ae:22:7d:75:
75:22:89:73:27:7d:36:be:c5:a1:37:4b:57:0c:02:a0:a1:2c:
3a:cd:aa:f9:b3:0b:6b:dd:c9:dd:df:f2:80:55:37:2d:6d:dc:
83:97:e6:25:e2:79:8b:9b:e1:ff:ad:d0:3f:40:f0:bf:66:3b:
4c:40:9f:fb:b8:eb:94:e8:5c:4c:55:4a:5f:4f:00:c0:45:ff:
48:a1:6a:e7:b0:68:9f:68:8a:46:f5:53:0e:c1:ec:53:9a:d5:
45:f0:15:e9:ca:ba:ee:45:6d:b0:a7:b0:de:78:1b:e5:2e:29:
9f:fa:e7:13:6a:fb:6b:f2:1b:44:13:ab:f3:77:20:1b:90:b5:
ce:73:85:26:ea:f2:9e:0e:e4:08:dd:bc:c7:39:f1:55:f5:34:
c9:52:9f:0e:5b:69:c4:d9:0f:4d:b2:7a:dd:1e:39:38:4d:a3:
da:d8:66:36:ca:a0:c9:9f:9a:e1:b8:d6:72:6b:0f:7a:f8:59:
e2:2e:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:16:29 2025 by rpki-client