Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: m9PWhgEDKSulph6p4Q2Azu5k5agiI+tKmh6HFAR8qAA=
Subject key identifier: EE:4B:C0:4E:F5:24:45:BE:50:2F:08:0E:DC:F8:8C:AE:29:61:9B:41
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 01974A7A7FEAF509540A7FCBBFB726A0E945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0895
Signing time: Sat 07 Jun 2025 13:00:31 +0000
Manifest this update: Sat 07 Jun 2025 13:00:31 +0000
Manifest next update: Sun 08 Jun 2025 13:00:31 +0000
Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: KJBVUsRjpiZoEObk2FZFs2s5qn2aE5A8NFUim3ggN6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:7f:ea:f5:09:54:0a:7f:cb:bf:b7:26:a0:e9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Jun 7 13:00:31 2025 GMT
Not After : Jun 8 13:00:31 2025 GMT
Subject: CN=ee4bc04ef52445be502f080edcf88cae29619b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:f1:7d:79:67:82:7f:85:ac:f3:af:df:ef:
a9:33:7f:45:fd:f2:5f:68:6e:bb:26:3a:43:e3:c4:
ce:a1:00:46:83:a5:bc:bf:fa:1f:61:d8:82:73:90:
41:fc:75:e5:a3:01:49:30:2a:90:9f:98:4a:9e:5c:
43:07:f9:60:7e:ec:4a:d7:08:6a:c8:2d:46:29:15:
59:a6:fa:08:25:66:e8:3a:eb:96:9c:72:c3:aa:c3:
9b:af:ec:6a:53:82:af:6d:fa:69:e1:19:66:84:e3:
87:71:3f:2b:e9:28:ff:96:22:e3:76:17:48:d5:32:
a3:08:fd:90:17:bc:a0:f9:09:71:51:ca:50:d3:ae:
c7:82:84:15:fe:d7:fc:6b:3c:92:67:c0:14:39:f9:
cf:bb:09:f0:41:2e:80:0b:8a:0a:7b:2e:23:e8:c8:
8b:13:08:81:fe:b3:71:e9:63:c7:2b:8b:97:a8:44:
66:98:6e:bf:6e:8a:95:77:e1:f9:80:ca:81:de:31:
fc:4e:bf:5a:34:68:4c:7f:3f:fa:8d:8a:e0:62:9a:
a2:a2:c3:dd:a5:5f:e9:d8:13:c0:a5:44:69:63:31:
5c:65:13:a1:15:75:a5:8d:b5:20:c3:68:a1:6d:a3:
15:ca:1f:e4:e5:8a:6e:d2:78:38:8e:d1:81:f6:2d:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4B:C0:4E:F5:24:45:BE:50:2F:08:0E:DC:F8:8C:AE:29:61:9B:41
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:61:ef:e0:65:b0:e3:c3:fc:45:5e:77:2e:65:28:02:b6:2a:
7f:ee:95:cc:db:a3:2c:b1:b6:b0:6f:f9:bb:76:83:da:17:7d:
10:34:a8:67:f7:12:be:e5:07:95:fb:72:56:36:3f:b7:77:6e:
58:47:50:93:55:0d:88:9a:6e:cc:8a:1c:40:3f:b9:63:4f:1d:
19:d7:45:d1:6b:38:20:ff:b6:63:4f:bb:33:63:7f:c4:68:dc:
2d:bd:29:ff:d7:08:12:07:5c:9e:d4:d8:24:9a:18:41:3e:86:
87:d2:b6:2c:66:f1:74:68:67:54:bc:99:c4:77:43:9b:54:2a:
7c:ca:00:de:d4:28:42:e7:22:81:cf:f9:9c:e9:05:e0:36:fe:
99:13:c9:0f:5b:82:1a:ce:35:6c:9e:68:fc:a1:7c:88:09:b9:
08:2c:30:5a:92:e9:3d:30:43:bb:9a:d3:66:ad:f4:b0:d8:44:
f2:86:d1:74:82:8d:bb:d2:e6:de:44:3b:4f:8e:c8:d3:8b:50:
1f:6f:4a:f0:88:b0:1f:3b:61:be:24:b0:cb:e3:61:8e:96:61:
37:b0:2b:c4:2f:45:3f:93:72:cc:f3:a6:72:c7:d0:08:45:16:
7b:9f:01:80:49:ad:2c:69:c8:eb:49:9d:18:b6:a5:e4:da:17:
4e:2e:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:12 2025 by rpki-client