Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: V/h0fneVNj2cDpGAE0KY2YzP9zAQ9wDV7502RFENKks=
Subject key identifier: 56:33:50:D5:88:AA:12:B2:C4:16:BC:99:F5:7E:CB:32:6F:39:9E:BC
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 01974B8D9FEFB144F980879FAF266329F99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0B16
Signing time: Sat 07 Jun 2025 18:01:02 +0000
Manifest this update: Sat 07 Jun 2025 18:01:02 +0000
Manifest next update: Sun 08 Jun 2025 18:01:02 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: LbiSGLXybRtqQjOW4+j/zkJGn4Svt+CiGSwxkCgddqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:9f:ef:b1:44:f9:80:87:9f:af:26:63:29:f9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Jun 7 18:01:02 2025 GMT
Not After : Jun 8 18:01:02 2025 GMT
Subject: CN=563350d588aa12b2c416bc99f57ecb326f399ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:da:41:a3:42:90:91:ee:c0:8b:6f:48:66:
38:6f:d9:3e:bd:fb:f4:26:2d:ab:fd:e1:3a:87:1a:
5d:e6:4e:82:d1:37:c4:ea:4d:be:68:fc:0b:32:f2:
72:97:8d:99:09:45:cf:16:ed:ad:25:f6:03:fd:5c:
48:ff:35:d7:54:32:d2:e4:d6:68:f4:91:2d:7c:97:
0a:b5:b8:a8:3e:d0:3d:d9:d9:65:cf:0d:12:e0:60:
d9:f0:a3:e1:4b:2d:ac:13:4c:ff:b1:82:d8:34:a2:
26:4e:30:e7:db:73:24:a5:dd:2a:06:c9:9d:b0:04:
5f:0a:23:46:c6:e8:bb:f3:c4:f4:58:b4:38:fc:e6:
3b:13:2a:16:78:e3:dc:6a:98:00:3b:b4:58:22:1a:
0d:a0:0c:53:e0:42:41:e9:0c:ab:9a:2e:a2:76:99:
57:73:07:f8:e1:7b:4c:f4:c4:ca:4d:b5:7a:1e:67:
5b:d0:ed:de:78:b3:d4:19:0a:72:69:74:cc:83:a4:
8b:4d:ae:a5:19:5b:ac:11:1f:9e:0e:23:bd:4d:6f:
ec:77:e6:be:e6:be:f3:b6:32:5c:7f:55:a4:f9:00:
cb:67:58:de:10:d9:ed:90:63:d5:4e:9d:b3:ad:dc:
69:dc:b3:c4:89:b1:33:a7:2a:8c:64:21:08:78:e1:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:33:50:D5:88:AA:12:B2:C4:16:BC:99:F5:7E:CB:32:6F:39:9E:BC
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e1:a2:95:58:7a:99:da:47:01:cb:ac:6e:ae:1d:b3:1d:bc:
ed:68:36:07:bf:ad:f0:cc:62:7a:cc:e1:ec:98:40:16:1b:76:
9f:a7:df:7c:26:fa:71:80:f3:1d:a3:54:10:9b:ae:fb:28:16:
2b:a1:99:75:5e:37:82:46:85:a8:b6:e1:d7:f0:7e:7a:08:34:
e5:9d:41:3a:f0:46:e2:af:e9:23:17:e8:6b:56:28:09:81:63:
3a:10:e4:13:92:ef:d5:c0:68:eb:f7:00:08:17:9f:07:72:6f:
72:51:01:69:7a:8d:79:ef:ae:a2:33:1f:d3:54:e9:67:18:13:
6f:53:a4:de:bd:c1:b6:ad:d8:6e:99:4d:94:a8:f8:9d:56:4d:
ea:1d:b8:56:bd:bb:60:fe:a7:d5:cc:c3:c0:f0:57:ac:99:b7:
02:f5:a3:89:b5:65:b3:fe:ec:9d:df:96:e6:58:f4:74:3a:da:
97:5f:e9:ec:12:c0:38:b8:c8:6f:8f:91:d4:68:88:23:c5:57:
6d:bc:f3:87:97:6b:79:2d:6b:b9:a0:22:af:96:0a:4d:08:c0:
18:f8:a8:e1:37:68:01:b5:17:5f:84:5f:b9:66:97:8a:7a:66:
3c:83:0e:91:19:a8:2e:00:4a:17:bd:a0:3e:13:69:07:88:3b:
b6:26:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:27:20 2025 by rpki-client