Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier: uJbr0G4TxqShLpoX0l0bIZ47uzZob9m9cmEv2BE0kyM=
Subject key identifier: 9A:81:8C:09:B6:CD:5C:87:1F:93:8E:BA:2A:A7:FA:60:EA:90:5C:71
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 0197469D9D2E80C53780F90B17D2CE053D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 19:00:23 +0000
Manifest this update: Fri 06 Jun 2025 19:00:23 +0000
Manifest next update: Sat 07 Jun 2025 19:00:23 +0000
Files and hashes: 1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: IyiVOIfSfYQVVYAH44Fsa0un5IOu/sitXPNprVV4xGI=)
4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:9d:2e:80:c5:37:80:f9:0b:17:d2:ce:05:3d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Jun 6 19:00:23 2025 GMT
Not After : Jun 7 19:00:23 2025 GMT
Subject: CN=9a818c09b6cd5c871f938eba2aa7fa60ea905c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:8a:7d:59:da:bc:e3:e3:dc:b4:38:b4:c7:
da:55:ac:9e:6d:f2:c5:04:b9:b7:da:ec:f7:0d:e1:
e0:c2:47:84:08:a9:5e:d9:13:b8:c7:71:4d:32:f7:
35:60:a6:cd:9d:76:b4:8b:14:b8:00:c1:2a:a3:dc:
86:68:84:dd:ab:b0:0c:bd:b4:c1:ff:9a:f4:c9:90:
51:4c:00:1b:41:19:09:c4:e0:2e:62:79:a1:2f:19:
b3:36:50:9e:bd:13:24:18:f8:de:19:4a:3b:3c:8c:
66:9f:45:f6:60:4f:4f:1a:0b:e2:a3:82:3d:1a:c4:
8d:cf:6f:2c:62:e3:1d:32:68:f8:98:20:0f:48:6a:
b7:ef:79:a8:b2:21:ac:a6:c4:56:3c:b3:ed:73:d6:
ea:51:85:ef:67:76:73:c4:7c:c1:e1:5c:3c:8c:9e:
f0:5b:74:b1:1c:df:93:df:c7:ea:87:09:0b:fd:8d:
a7:4a:35:b6:3a:7b:17:cc:a3:25:59:1c:17:ce:62:
4b:15:77:39:e3:44:cf:15:fb:2c:a7:d5:fd:c1:3f:
1d:25:fe:9b:18:6a:50:fa:d1:01:ca:10:69:e8:6c:
94:cb:c8:13:1f:18:14:82:1f:2d:dc:dc:f3:47:e5:
aa:67:1f:31:f0:6a:e9:de:48:1a:27:fd:e6:d8:0b:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:81:8C:09:B6:CD:5C:87:1F:93:8E:BA:2A:A7:FA:60:EA:90:5C:71
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ff:f8:70:e2:71:ed:8c:a8:30:41:bc:b6:22:1b:20:fe:65:
02:d2:b4:88:ff:37:f4:46:dd:7c:fb:4b:cb:21:ef:63:d6:a9:
f3:cc:9f:96:c0:bc:7d:89:4d:38:ca:1c:e0:d2:01:18:08:e2:
23:89:75:0e:a8:9c:6f:58:19:08:4b:5e:c5:9c:4c:5e:a2:ca:
ff:21:be:e5:28:a2:8a:84:77:76:e5:1f:dd:64:55:78:86:9b:
df:85:23:04:ca:13:d6:27:59:59:91:81:d0:8b:15:08:44:1f:
df:47:e3:7d:60:0d:98:95:12:78:ee:43:56:db:66:26:37:c4:
01:8e:77:29:4e:0c:e6:86:29:77:35:4b:27:94:6b:6d:b1:75:
ff:21:73:20:d0:d5:e0:3f:1c:c9:3c:1e:96:78:3b:09:97:32:
c5:8e:b8:15:db:34:b1:84:da:2b:f0:7d:98:51:8b:1c:99:1b:
f7:ca:39:81:de:56:82:f1:ea:45:54:92:54:2c:12:39:1b:1a:
3d:0c:c3:5b:00:0a:61:63:d8:90:2d:93:eb:2e:c8:fc:dd:16:
c1:fb:18:d5:b8:b4:f4:ec:f8:c1:6f:b6:85:5d:14:7b:c7:0d:
5a:08:ff:ac:4f:96:21:66:82:e1:18:b2:3a:76:a2:1a:3e:9a:
cb:90:30:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:20 2025 by rpki-client