
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: /Hl7N86zVDsXPYKzN4N1ZOTP1a6/WoeecGmk6Pz9T3w=
Subject key identifier: B3:06:8F:F9:C9:AA:70:D0:10:25:0A:AA:ED:2B:1C:CC:88:9B:86:3D
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 019748FA12C139A7B9A3366ACBC28973F36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 114E
Signing time: Sat 07 Jun 2025 06:00:37 +0000
Manifest this update: Sat 07 Jun 2025 06:00:37 +0000
Manifest next update: Sun 08 Jun 2025 06:00:37 +0000
Files and hashes: 1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: RiFkbP+r1v0GKJPCP3j2JTQRSaSunt7h6AJ2F4uBNIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:12:c1:39:a7:b9:a3:36:6a:cb:c2:89:73:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Jun 7 06:00:37 2025 GMT
Not After : Jun 8 06:00:37 2025 GMT
Subject: CN=b3068ff9c9aa70d010250aaaed2b1ccc889b863d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:8d:2b:1b:96:3b:89:cb:68:fb:06:e1:79:
e2:5e:2a:5c:25:3a:2a:cf:36:46:68:09:42:40:7a:
c9:a3:3f:1a:f5:fd:ba:ea:74:68:70:9e:52:c4:d5:
27:68:c3:8a:fa:27:cf:1b:64:a9:74:b2:bc:e9:73:
c2:2a:8a:48:0b:e3:74:0e:29:eb:77:bc:36:e5:f2:
77:e3:03:5e:84:e7:63:38:17:e6:e7:af:76:ec:e5:
1e:ba:1a:00:e9:cd:68:ad:9a:6f:c9:08:06:be:3b:
a3:1a:7e:54:8e:43:23:11:08:2f:5b:79:ac:b2:47:
de:49:58:40:1f:a9:2f:ff:05:2e:8f:59:ad:f2:0c:
04:36:1b:58:f3:a2:85:14:2f:64:6c:73:eb:04:d2:
0e:d7:42:ea:2f:d8:fc:d1:e5:c3:56:d3:fd:b1:f2:
fc:65:94:94:7e:b1:3c:71:3b:d3:23:a3:f1:43:70:
eb:17:40:9e:f1:aa:27:d6:46:6b:bb:d7:71:dd:bc:
08:35:ba:48:59:3e:47:2d:4e:58:53:d8:16:ed:44:
48:d5:a7:fa:55:bb:23:f8:68:0f:19:d9:05:7d:fb:
22:06:7b:45:24:fb:df:44:a4:ba:b2:e7:8f:3c:ef:
84:9f:11:99:60:89:a6:b0:ee:4c:88:57:5c:fd:8d:
fb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:06:8F:F9:C9:AA:70:D0:10:25:0A:AA:ED:2B:1C:CC:88:9B:86:3D
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b3:38:bd:5b:d5:1e:27:29:a7:d4:25:5d:92:1a:4d:06:05:
a8:b5:6d:d5:82:d4:ae:f4:2f:73:44:44:c2:d8:dd:d2:d3:08:
8c:13:38:85:4b:1a:9a:54:37:27:4b:10:f6:27:37:04:d1:1b:
79:87:4b:ad:b5:ea:a8:b0:07:a3:8c:9b:fe:ee:f9:00:1e:36:
f8:d9:8c:69:5c:bc:05:88:d3:51:83:8a:92:44:ce:26:e4:c2:
a5:a5:48:1d:7c:31:68:f9:bb:2b:48:50:7f:71:38:3f:8c:17:
bd:ac:5e:b0:36:83:17:8c:ff:2b:c0:b3:8f:98:b1:22:c6:a3:
1f:df:62:10:a4:3c:99:87:53:24:1c:a4:f0:66:78:43:4f:e5:
f8:6c:fc:82:22:02:8b:1e:5d:81:fa:25:9e:c9:d6:8c:81:22:
61:bd:08:dc:5f:cb:5b:49:51:a2:eb:5f:fb:e6:ff:b7:f1:fd:
70:57:ff:f8:78:35:db:69:7d:c4:ee:32:24:5e:40:27:13:78:
a7:3f:f9:1d:70:01:af:5d:38:18:3b:14:2b:67:a0:f0:44:67:
df:6b:af:d1:1a:92:b9:9c:61:c8:e2:45:1c:e6:bd:a2:89:2e:
68:ed:04:b7:46:32:4e:46:2b:22:6b:f0:60:53:52:21:bf:f8:
70:69:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:39:33 2025 by rpki-client