Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: 4msqY1DsSpwmMLgI9Eqp7jc6D54EDGXQEbJdq0YbYBY=
Subject key identifier: 71:D3:B2:DC:DC:7F:B1:8C:E6:A7:DD:E2:8E:FC:18:39:FE:5C:6F:94
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 01974D44EB8038E1344424CAE0DE78451627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 0466
Signing time: Sun 08 Jun 2025 02:00:51 +0000
Manifest this update: Sun 08 Jun 2025 02:00:51 +0000
Manifest next update: Mon 09 Jun 2025 02:00:51 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: l19Swr/ZWQiMp6ZxYNBAsuY2fnxMWb41cXZytpeah7k=)
2: d11D5FMeuAx9oHmui2Kj1XfjoC4.roa (hash: 5zOzBJZzZedY0D2DOhw0oc3kUo+4Q35gEG0yeOPr0rg=)
3: sUBkgJCpD3ZqzX_7qmTArV5BEgk.roa (hash: dqlXGiz9swMXmXvL7AO/g9/wLQ3iDn3rNE6iqCcU0fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:eb:80:38:e1:34:44:24:ca:e0:de:78:45:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Jun 8 02:00:51 2025 GMT
Not After : Jun 9 02:00:51 2025 GMT
Subject: CN=71d3b2dcdc7fb18ce6a7dde28efc1839fe5c6f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8f:99:fc:37:64:e4:bb:9c:de:d8:d6:33:ed:
81:c5:a8:9c:21:a9:6b:b4:f3:95:a4:c9:c8:08:e7:
e8:40:da:cf:af:ca:71:0b:a3:06:5e:8d:f7:53:8b:
12:5e:97:28:6c:a3:aa:79:d1:e4:7f:d6:7b:dd:ed:
50:ad:76:a2:76:bc:7d:d5:90:85:da:dd:24:6b:56:
34:7a:f5:6f:f1:93:c0:a2:27:11:2a:2f:15:4b:7f:
bc:e4:61:f7:72:e5:5b:ed:42:52:36:2c:31:64:60:
f9:9e:bb:b6:fe:66:e4:17:c7:90:fe:a9:d1:38:32:
1d:05:5d:f0:41:a9:ba:00:67:dc:00:a9:6b:a9:84:
6a:57:a1:08:eb:dd:e0:99:5e:1f:5d:9d:83:da:35:
cc:eb:39:1d:41:5f:2d:a7:df:b3:3b:33:6a:16:b2:
89:be:8c:11:f8:f9:c7:fa:ff:a4:24:fe:70:d4:40:
22:9b:f8:73:44:d1:81:95:dd:cd:fc:4e:6e:60:73:
ab:8f:18:03:32:ec:77:98:7b:ad:1a:e7:fb:7f:2e:
b8:7d:4e:dd:d8:ed:90:90:9f:26:a5:c5:f6:ed:73:
1b:be:f1:ff:64:7e:31:f7:04:9e:62:6a:04:06:d9:
b2:6a:63:5d:8b:3f:16:de:96:48:02:53:ec:33:69:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:B2:DC:DC:7F:B1:8C:E6:A7:DD:E2:8E:FC:18:39:FE:5C:6F:94
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9b:b7:3b:ac:af:62:55:56:e6:d3:11:fb:6a:42:82:8e:fd:
42:9b:d7:0e:50:db:a7:cd:eb:7f:f2:fa:e7:2f:61:1d:71:aa:
9c:ca:49:7b:cd:3a:18:5a:ff:44:24:6a:80:74:92:b8:8b:bd:
ca:a7:98:31:81:bb:b8:e3:04:08:5a:2f:a1:8d:53:80:f8:1b:
05:aa:e9:12:46:06:9e:ac:70:5f:57:dd:45:44:f1:a1:ec:ea:
3b:30:be:a2:ad:4d:7e:5f:0a:6e:d3:ce:de:d6:f5:10:cc:29:
fc:0e:1c:f2:67:ba:8e:a9:6d:ec:91:c9:53:af:7a:46:8d:58:
57:0f:18:51:ce:b7:5c:c0:b3:7a:04:51:8f:75:63:fb:87:25:
3e:2f:da:e3:21:b3:c1:07:c2:c3:4a:38:52:36:c4:0c:d4:83:
26:95:eb:c6:ee:da:cc:a0:dd:40:7f:1c:d1:8d:d5:79:b6:5d:
a3:1e:c9:c5:fd:17:31:f0:79:c2:54:e9:3a:3f:4a:57:4e:d6:
53:f7:a3:66:b1:c5:1a:b1:7d:e5:ce:d8:90:24:3a:10:e7:23:
b4:fd:a9:49:d5:60:6f:d7:93:ca:cf:3c:09:83:8d:7a:c9:b8:
33:4f:15:dd:02:ef:5b:10:6a:0d:38:ca:14:c7:b4:d8:96:93:
a7:97:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:56:21 2025 by rpki-client