Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: olZJncG0sM6HkkUfzl7F0OhPXNkeDPMIESauyPd0lPo=
Subject key identifier: D0:2A:3A:B0:92:01:CB:96:D6:CB:0C:9C:9A:92:05:64:2B:76:43:CE
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 01976094F48BA3FCE33B580DF54E3D27E25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 20:01:04 +0000
Manifest this update: Wed 11 Jun 2025 20:01:04 +0000
Manifest next update: Thu 12 Jun 2025 20:01:04 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: Dz3Yuf421q0+7NEmObkwugGDAS5//gBWdPgv+N3UNsU=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:f4:8b:a3:fc:e3:3b:58:0d:f5:4e:3d:27:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Jun 11 20:01:04 2025 GMT
Not After : Jun 12 20:01:04 2025 GMT
Subject: CN=d02a3ab09201cb96d6cb0c9c9a9205642b7643ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:6d:00:fa:ec:5c:05:9e:b7:9a:d0:ea:10:
c4:d8:dc:87:6a:e8:5b:1c:19:df:86:1f:67:4b:07:
cd:95:26:62:af:9a:77:c7:37:4b:af:7f:0b:bf:8f:
8c:1f:1e:78:7c:57:a3:89:d1:29:28:34:67:37:40:
28:dd:66:e4:14:db:3a:6c:e0:f0:3a:c2:b5:94:4a:
15:4e:15:09:a8:45:3a:88:2f:19:e4:37:8e:43:ef:
cc:f0:b0:c7:36:32:2e:8e:81:3c:46:a4:fb:2a:4e:
b2:26:f5:84:39:03:c3:bf:8b:4c:6f:46:af:26:dd:
ac:07:ab:87:b4:f6:0d:24:c6:13:68:df:cf:af:06:
ac:c1:71:63:59:27:e3:fe:9f:56:60:23:4e:a7:ea:
fd:d5:b8:05:ac:6a:6d:b1:a0:a5:67:7b:86:0a:99:
70:64:09:08:7a:a5:61:73:60:1d:c5:38:f7:f2:8e:
06:ff:9b:65:53:2b:e7:5c:20:6c:84:d9:ba:ce:6a:
8f:29:56:2a:7a:9f:ca:c8:a1:20:bf:c6:c3:b2:cd:
c8:85:12:e9:3d:32:1a:6d:dd:0d:84:50:f3:16:2d:
46:8c:71:ed:d1:ea:76:37:ec:7a:8a:11:f8:9c:68:
41:74:b2:ec:c1:dc:e6:ae:39:af:a6:bc:d5:42:08:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:3A:B0:92:01:CB:96:D6:CB:0C:9C:9A:92:05:64:2B:76:43:CE
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ff:f4:55:aa:4e:8d:45:20:e6:70:4e:a3:54:5d:3c:5e:45:
d4:6e:4d:ba:02:5a:95:0b:bf:1c:95:7b:a3:a1:75:af:b4:19:
eb:19:66:6e:d7:76:2e:80:ee:f8:13:7a:07:1e:58:56:22:50:
96:f5:f1:82:8b:b1:30:89:f1:9a:29:b1:b0:40:5b:8a:a1:a8:
8d:2e:26:fd:e0:1b:ee:e9:b2:61:f1:3d:2e:71:92:7e:bf:81:
fd:37:a7:97:99:4b:c0:31:f0:0c:ed:3f:36:76:ca:a9:c9:6c:
22:5e:ad:36:7e:81:dc:b8:3a:ee:c4:98:50:92:1a:ee:ce:c3:
80:f6:73:6a:1a:1c:6a:71:c4:ca:72:3f:cf:8b:26:0b:f0:81:
84:5e:f3:40:1d:78:04:c7:d6:17:f5:66:ab:75:29:de:23:29:
0e:3f:6d:6b:5e:00:c1:fa:90:0e:3f:c5:67:98:f3:fc:e5:48:
a5:04:d3:7a:d6:74:94:0b:f1:0b:65:77:20:4b:8d:f0:36:49:
2b:51:aa:79:de:d6:9a:71:16:f8:cb:82:a9:6b:a1:2d:d8:65:
cf:ea:b2:00:1d:10:8a:8f:a6:78:1c:4d:a0:ad:11:dc:a3:02:
34:27:e9:ac:a0:59:20:d5:c1:0e:34:dc:c3:54:f0:d8:3f:05:
32:c9:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:09:54 2025 by rpki-client