Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: T34rEaDRpb9TiX56QyYtwCvbDc/ttPQft2EMs7y0+NQ=
Subject key identifier: 93:44:FA:FD:76:92:48:AE:5E:6A:0B:5C:2A:B1:6B:AB:8E:1F:B3:D7
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 01974B8DCBB0376A9BBA8937642DDC471D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 18:01:13 +0000
Manifest this update: Sat 07 Jun 2025 18:01:13 +0000
Manifest next update: Sun 08 Jun 2025 18:01:13 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: IO2F2WWfwCpxMhILqmNrr0oMC8eWSPwiNS4Ghd2PsEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:cb:b0:37:6a:9b:ba:89:37:64:2d:dc:47:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Jun 7 18:01:13 2025 GMT
Not After : Jun 8 18:01:13 2025 GMT
Subject: CN=9344fafd769248ae5e6a0b5c2ab16bab8e1fb3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:7e:60:2c:da:d7:86:77:c9:91:0b:62:75:
78:db:7b:3d:e4:dd:4c:a5:a4:62:63:b8:18:dd:59:
59:e3:3b:56:22:1d:8d:da:42:d0:e7:26:81:a3:25:
43:e9:19:c8:60:2e:9b:b3:48:82:be:9e:57:2a:af:
b1:51:80:34:20:73:53:e4:e3:59:3d:aa:8b:e5:78:
9b:f6:9a:b4:2e:ce:2b:dc:f1:bc:c2:8f:09:da:bd:
8b:fa:03:55:a8:1b:8a:69:94:ff:ef:45:bc:2c:59:
1b:0c:6c:b2:ae:f5:b5:be:19:7f:3a:ba:87:ed:62:
41:89:01:89:e9:62:27:9d:56:fd:63:24:d7:18:2c:
be:e0:fd:55:ba:72:7f:e2:a1:36:da:1c:a8:bc:24:
46:b2:e1:3e:91:e8:32:2b:32:63:c9:46:40:79:31:
be:26:ee:59:e2:54:d0:58:32:9e:32:15:d7:7b:95:
e8:90:98:1d:dc:35:89:74:cd:e7:ce:51:c0:20:ea:
0e:57:6a:ad:4f:e2:76:56:4e:02:0d:4f:e0:ee:da:
f2:ff:15:2e:8a:a5:de:bd:ef:d0:d9:ec:5c:c3:fd:
0c:cb:ce:11:6b:1b:1f:d6:b6:e9:af:45:6e:8f:dc:
3c:25:f8:2b:9b:75:bc:7f:25:67:b2:39:5e:58:bc:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:44:FA:FD:76:92:48:AE:5E:6A:0B:5C:2A:B1:6B:AB:8E:1F:B3:D7
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a9:ef:4e:70:9d:91:c7:af:84:e3:b4:dc:ee:35:fd:d0:81:
c7:32:2f:29:ee:e1:38:1c:b3:9a:92:e3:99:28:04:e1:b4:f5:
3f:1f:26:63:65:03:af:77:1d:28:3c:3e:b1:28:6a:35:93:dc:
79:58:4d:80:1b:5f:e0:0d:cd:1f:98:5d:09:ef:c6:90:98:55:
d5:0f:11:e1:3d:85:30:ae:8c:12:e6:de:68:cf:98:05:3b:8f:
af:ab:1e:de:2b:c1:69:bf:fc:cb:72:58:31:fc:c6:49:e1:18:
41:82:5d:c8:35:cf:bf:18:d4:b6:68:1d:da:4f:c8:3d:27:d7:
00:c6:03:e1:16:af:3c:13:b8:a5:e3:10:47:fb:3a:c1:44:29:
a9:73:b6:4a:ea:74:97:f1:51:35:5b:69:d9:ca:b5:07:98:27:
45:fa:e2:46:ae:7e:cc:7e:f8:19:44:76:dc:e7:c2:c3:d4:51:
ae:ec:94:70:26:f0:6e:74:0e:7d:7c:80:c7:8c:ad:54:68:77:
53:c0:49:76:6a:0a:53:4d:71:83:c0:15:73:6d:67:b8:32:aa:
1d:eb:17:76:55:d4:68:42:48:f0:77:aa:ab:d0:f8:02:a8:70:
84:c6:84:56:92:ee:99:34:2c:6e:9c:d3:fa:de:0a:9c:77:a3:
f1:15:f6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:10 2025 by rpki-client