Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: aIID2/TNPZ2z0bFDfJp3/U69U6AzKBqgs1U39Munpik=
Subject key identifier: 3D:CD:EE:F8:15:B5:D1:C9:05:77:1C:D5:32:80:9C:EA:97:20:FF:FD
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 01974D7BBE056978B875F91E328793C5F6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 01A1
Signing time: Sun 08 Jun 2025 03:00:44 +0000
Manifest this update: Sun 08 Jun 2025 03:00:44 +0000
Manifest next update: Mon 09 Jun 2025 03:00:44 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: CnBy+oAldBIjJCd3kWxwFvindNBpMJq7uPXQxGWpERw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:be:05:69:78:b8:75:f9:1e:32:87:93:c5:f6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Jun 8 03:00:44 2025 GMT
Not After : Jun 9 03:00:44 2025 GMT
Subject: CN=3dcdeef815b5d1c905771cd532809cea9720fffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:9a:41:35:bc:ae:97:33:1b:a8:59:10:fe:
59:f7:82:8f:db:2c:2d:28:78:5e:94:87:37:0f:18:
43:46:90:67:7d:f6:6e:46:7e:a9:c9:c8:4c:01:0d:
16:3b:8e:e1:5d:fb:d2:bd:4c:ee:62:a2:5e:80:75:
66:38:54:35:6e:e4:b1:fb:ae:09:f7:08:6b:84:d1:
fb:d2:56:e5:63:ad:cb:0f:ff:06:06:73:60:8c:3e:
7f:1f:e2:bf:b1:1e:79:ee:5a:12:b8:f0:1a:da:aa:
15:b9:a1:2c:af:06:dc:0a:6e:69:eb:ac:33:32:04:
32:06:49:80:95:c0:3d:35:77:54:fe:0b:9b:37:06:
d4:b0:64:4d:1e:75:4b:f5:65:70:1d:30:b1:6c:0c:
d3:2a:8c:8b:9e:1f:6f:d6:8b:16:ed:24:bc:93:51:
06:d2:e1:74:50:6c:fb:df:18:7c:db:2e:a1:57:20:
3a:70:92:12:a2:70:e8:f3:fd:a8:41:98:7e:76:ee:
a5:d6:e4:d0:eb:52:99:3b:a0:b2:6a:05:6e:24:44:
87:e9:f8:83:03:71:50:7c:e8:69:4e:3f:b6:40:ee:
26:3f:94:b6:5b:30:92:c5:1c:b6:22:fb:38:0d:c7:
9d:2f:ed:19:6d:22:c9:3d:db:17:0b:f7:87:23:1c:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:EE:F8:15:B5:D1:C9:05:77:1C:D5:32:80:9C:EA:97:20:FF:FD
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:52:49:37:4a:05:66:7c:7f:35:4f:c0:47:10:dc:06:e7:04:
d9:b9:fb:07:c9:ce:e5:06:fe:8d:f5:85:29:98:37:b5:c6:4c:
31:1f:16:1c:1e:aa:00:f7:26:a8:1b:50:87:08:b0:2c:59:18:
a8:2d:c1:51:c4:d7:e3:6a:32:b4:f9:42:8b:60:4d:47:19:a8:
5f:bb:f3:10:a2:f1:43:ad:3f:20:aa:af:40:f5:e3:59:7d:3e:
a5:3f:a3:4e:63:55:4e:a2:d2:6c:b3:74:36:21:00:52:0d:b5:
1a:99:a0:7a:10:47:dd:2a:8b:e3:86:ef:94:55:3b:31:d3:fd:
6d:8e:24:e6:ba:c2:ed:c6:e5:de:66:db:d2:b8:21:35:af:4f:
8b:a1:4a:16:41:26:e0:72:9f:a9:ec:9b:36:d5:74:a2:3d:04:
0a:00:77:aa:bd:56:fd:89:90:5a:3f:2a:9c:1e:52:3a:01:55:
b3:3e:35:23:6a:b2:dc:74:7d:2c:b0:00:a3:8a:70:aa:8b:d6:
41:e8:50:c5:db:20:5b:f3:5a:e5:c8:48:86:34:19:72:a4:0b:
d6:a2:8b:be:02:3e:15:f6:50:22:d5:75:2d:67:0d:b1:e6:00:
b6:70:59:a8:c0:f4:eb:6f:7b:63:7e:dd:a3:79:73:c1:e6:d0:
cc:5c:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:20:19 2025 by rpki-client