Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: k+MQCJok60Ws2PrrSMdKfFIRekUEMxUQPTXcSxTYotg=
Subject key identifier: FC:20:61:91:7C:46:02:FF:09:90:45:EC:1E:42:22:E9:53:4B:9A:4F
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 01976C2B37030C695B825AAB9638D673EE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 02:01:00 +0000
Manifest this update: Sat 14 Jun 2025 02:01:00 +0000
Manifest next update: Sun 15 Jun 2025 02:01:00 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: EIPdClTJ1iry+fH1bmt1fuaod18oLB0z3K78aw6PMx4=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:37:03:0c:69:5b:82:5a:ab:96:38:d6:73:ee:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Jun 14 02:01:00 2025 GMT
Not After : Jun 15 02:01:00 2025 GMT
Subject: CN=fc2061917c4602ff099045ec1e4222e9534b9a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:ae:02:a2:03:01:0f:d4:de:47:4b:2e:ca:
5c:8f:55:cb:18:cb:68:f9:16:b8:d2:7e:69:cd:69:
54:77:88:6e:3f:35:b8:4d:8c:95:0a:df:18:5f:09:
76:de:2c:7c:fe:cf:cd:27:8f:f4:b0:08:04:3f:bb:
1f:4a:31:9e:ef:b0:01:67:76:a1:19:68:c3:01:64:
3e:03:b4:1f:33:fe:02:ac:4d:cf:0b:f2:ae:8e:89:
9b:92:ea:a6:df:b5:b9:a4:2d:fe:85:af:65:e7:d0:
87:34:01:a8:8a:95:3e:f1:0c:32:e7:36:f4:8a:35:
6f:bc:23:8c:5d:3f:d0:4b:49:5c:f7:48:1f:c5:97:
70:1f:cc:1c:4c:6d:a0:d0:39:ec:50:7c:72:98:51:
8c:7c:b1:b9:91:dc:99:cb:d5:ce:30:4c:fa:b6:61:
c9:2a:89:ca:95:1f:99:79:22:60:10:75:68:a0:0c:
e8:6d:76:30:72:c3:87:17:84:f5:eb:eb:c2:7d:2c:
82:80:45:9d:16:84:0d:e6:d9:a7:59:12:47:09:ee:
51:8d:66:78:7f:4f:09:bc:15:73:2d:d8:ac:2a:53:
85:e8:d0:d8:f1:af:7f:93:28:60:cb:57:38:46:e0:
38:96:df:54:74:63:79:6e:f6:b9:89:46:73:ac:35:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:20:61:91:7C:46:02:FF:09:90:45:EC:1E:42:22:E9:53:4B:9A:4F
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3d:e9:0c:1f:3c:6a:36:16:b8:3a:00:71:0d:40:f8:29:55:
a7:3c:48:4f:36:12:27:73:2c:23:47:4d:ad:a8:d7:d2:24:4a:
f5:6c:99:fc:a2:8c:9a:6a:5c:31:b0:15:b5:2e:10:e2:97:ae:
2f:b4:00:7e:bf:21:01:d8:86:59:3e:28:65:88:94:bb:30:08:
a2:4f:09:b7:45:da:5d:d0:51:62:7e:83:74:33:26:f8:bd:58:
e2:14:7f:49:ad:b1:f6:94:e8:59:32:ec:4e:67:9d:8f:d5:f8:
92:5b:94:09:af:f9:92:3f:3e:c7:e4:7d:5e:e1:89:97:da:8f:
e1:d7:49:7c:f6:03:62:b3:b4:4c:29:08:ad:d0:6e:d7:94:96:
3e:91:3a:fe:03:66:0c:12:75:ed:1e:5b:35:57:cc:93:37:4e:
49:43:3f:25:f0:a3:eb:e0:2c:34:5d:67:85:66:dc:de:fb:ff:
67:a2:2c:69:71:8a:c4:a1:7f:50:5d:45:1b:73:a1:13:4f:2d:
37:5c:21:a9:5b:90:8d:81:81:c3:ee:95:cd:69:a4:d9:aa:01:
38:38:e9:d6:7c:40:f1:c3:5d:7e:bb:38:79:f7:b6:7f:9d:90:
fb:14:7c:00:5a:2e:25:0e:5c:24:59:63:d3:03:3e:a8:14:39:
77:0a:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:26:35 2025 by rpki-client