Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: BpyIINm236t9AU4mYPIRTjyzZnpsuaqbVDzOVcWljl4=
Subject key identifier: FD:3D:97:6A:BE:6F:60:24:9C:6D:AA:1C:D2:83:FF:EA:10:33:7B:FD
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0197665FAFBEA0F0E9D8F839D176ED5485E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 23:00:36 +0000
Manifest this update: Thu 12 Jun 2025 23:00:36 +0000
Manifest next update: Fri 13 Jun 2025 23:00:36 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: oDY1dqA+4cmcn25+54+vC8Mcaa0iM2jQaZykBTDA+00=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:af:be:a0:f0:e9:d8:f8:39:d1:76:ed:54:85:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Jun 12 23:00:36 2025 GMT
Not After : Jun 13 23:00:36 2025 GMT
Subject: CN=fd3d976abe6f60249c6daa1cd283ffea10337bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:88:51:28:37:45:61:4a:59:68:d2:a1:22:
08:f2:8f:3c:e7:79:ea:ee:72:28:85:54:ff:c0:bb:
72:73:2e:6e:c2:4d:c3:58:98:4e:ba:ca:2a:62:d8:
44:be:21:dd:85:4e:87:3a:66:a2:5e:54:b0:7c:f6:
5d:d1:11:85:99:a8:fe:39:f6:ae:7a:bc:81:3e:13:
ba:0b:82:74:b9:04:05:f1:dc:2d:6b:cb:16:cc:bd:
c5:de:14:ca:61:2d:94:8e:46:5e:89:14:ca:d3:c9:
0c:72:91:36:e6:9f:55:99:a5:0f:81:98:13:37:de:
e3:3a:8f:d4:0d:c3:ee:fc:2b:d0:46:7d:cb:a7:e9:
63:92:cf:38:51:07:b0:ab:54:4b:20:fd:7d:a4:cf:
b3:36:4c:5a:a8:d6:c0:bc:9c:bc:f5:46:1b:73:e0:
76:91:93:75:30:d6:c6:8a:6b:c5:e8:8d:a4:de:95:
2e:96:e2:54:5d:60:c9:ad:95:17:89:24:3e:02:cc:
67:91:cd:50:e4:ad:7a:1d:62:70:2b:0f:9d:0e:6c:
fd:ae:50:52:29:f8:4f:a2:0c:49:4d:1c:c1:38:b2:
f9:84:06:7b:f9:a5:1a:46:79:f2:73:73:b8:1d:68:
c1:c2:1d:e7:77:10:62:52:40:78:49:48:ae:75:cc:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3D:97:6A:BE:6F:60:24:9C:6D:AA:1C:D2:83:FF:EA:10:33:7B:FD
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:f9:79:81:a9:09:4a:c2:d8:63:dd:d8:65:81:c6:f9:bd:
f5:05:66:d8:80:ff:14:e9:57:8a:86:80:4b:bb:fc:33:24:23:
34:50:66:1e:2a:49:16:a6:0c:70:45:f2:cd:16:ce:d5:7a:15:
37:31:9c:1e:d9:da:c8:a4:5e:c7:9b:08:1b:38:71:5f:05:b0:
e8:8f:2b:f7:bb:61:64:3b:18:65:ad:af:cf:d3:dd:e5:be:a4:
39:3f:53:43:6f:7b:13:8b:9a:f0:a4:2a:56:cd:54:b3:55:f0:
2c:be:e7:16:66:28:d8:c1:6b:66:a9:6c:d1:44:5a:83:fc:b8:
13:9d:7a:8a:eb:ac:b3:1a:57:c3:39:c1:1c:c1:7a:17:bd:26:
bd:d4:74:9c:e4:69:8b:a1:5c:86:4a:5c:6d:76:f1:1f:f6:4a:
cc:e1:83:aa:84:07:9d:03:01:ea:f6:c1:08:e0:a3:82:ad:5c:
6c:97:83:97:8d:33:b8:7a:80:b3:dc:e6:43:46:19:0c:5e:66:
d1:7d:a0:65:86:94:5f:da:f1:aa:9b:e2:c4:cf:19:0c:37:9c:
ab:7c:2a:92:b8:99:21:b0:96:c7:e4:16:be:23:b2:2f:03:3f:
de:15:ff:f7:f1:f5:6b:56:c1:37:6c:d7:d1:6b:e8:a7:6a:bf:
2b:30:9c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:36:37 2025 by rpki-client