Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier: Z7XGopEL/5B7F0G3EZ8pYaCLdk6GWvyJtnZqOXiVc8A=
Subject key identifier: 96:F3:35:81:AC:68:CE:A0:63:10:8E:C8:CC:08:0E:EC:5B:95:CF:E4
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial: 0197518F6E728FDAFFDF559D6263589AE171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number: 0495
Signing time: Sun 08 Jun 2025 22:00:43 +0000
Manifest this update: Sun 08 Jun 2025 22:00:43 +0000
Manifest next update: Mon 09 Jun 2025 22:00:43 +0000
Files and hashes: 1: Vzz9bAfXoV_CbBlQ5On5u4sMVy4.roa (hash: 9L5UOAnznGuqnwBvCvaXb3wcpMtqdknz4TA8q7GIbmw=)
2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: GoPORT0hBuaCiiOyzN0baerpwzcMrVcEpGrzDPnVQUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:6e:72:8f:da:ff:df:55:9d:62:63:58:9a:e1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
Validity
Not Before: Jun 8 22:00:43 2025 GMT
Not After : Jun 9 22:00:43 2025 GMT
Subject: CN=96f33581ac68cea063108ec8cc080eec5b95cfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:51:88:93:0f:c8:d9:c2:39:cd:48:5c:6d:55:
bc:35:97:36:f8:ec:2b:3e:27:7e:28:05:6a:4e:9a:
00:03:b3:61:07:8b:3f:d8:74:af:cc:da:d6:75:4c:
69:08:19:c7:c3:80:ad:72:34:a6:8a:1d:7e:53:7b:
df:81:47:40:0f:4c:49:b5:a6:98:d0:73:07:cd:44:
8e:94:bd:47:c1:58:d9:4e:4f:3a:b2:ea:cd:5a:fb:
f8:27:81:ce:a1:c6:73:7a:41:d4:11:62:e7:f9:47:
4f:dd:3c:02:7b:2e:d0:8d:f4:f1:9e:f0:47:e5:ed:
95:0e:78:0f:65:a7:41:ba:33:08:75:94:0e:a0:a7:
ba:5a:e0:d9:95:f8:c8:67:be:29:57:40:3f:7f:51:
57:6c:6d:4d:ee:f2:d0:6f:67:5c:35:cf:f4:d7:b1:
2c:ce:1a:6c:cd:08:1d:c0:d9:72:b8:9c:25:d3:c0:
80:27:88:3c:75:8b:e1:f1:21:89:6a:75:b7:3e:7a:
7c:1a:48:e9:41:c0:32:68:56:2c:39:a3:38:dc:ab:
b5:36:94:68:42:b3:90:1a:33:83:35:1f:e1:53:6c:
ab:8d:e7:93:3c:75:fc:41:6c:62:59:ab:d0:23:bb:
95:cb:d7:c0:83:a3:82:32:59:7c:6c:5b:4b:7e:3d:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:35:81:AC:68:CE:A0:63:10:8E:C8:CC:08:0E:EC:5B:95:CF:E4
X509v3 Authority Key Identifier:
keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f3:01:58:9d:a6:5a:66:7d:a1:58:76:e1:82:7d:bc:e8:a1:
03:78:35:e7:d4:fb:fd:ea:30:2b:25:41:eb:ad:3b:a9:f3:ea:
dd:d0:3c:ea:1b:6a:4a:9e:38:ed:ae:79:40:89:d0:ab:e8:04:
d4:9e:77:a8:37:4a:04:f1:d2:bf:07:60:05:16:58:4c:6d:c3:
38:9d:48:b9:af:1d:e7:83:08:21:38:a9:08:d9:4c:ed:e6:09:
36:38:de:d7:e1:f4:e7:56:6e:2e:80:08:0d:ad:37:ef:e3:03:
10:2b:c3:1b:11:fd:0f:fa:18:03:78:74:a6:24:00:53:65:3d:
f9:89:25:ce:8c:4b:a0:ef:96:82:3f:17:45:47:8f:98:96:e9:
5a:bc:27:8f:8a:a0:f0:4d:da:d9:eb:aa:83:e3:5e:65:a7:e1:
89:3a:8f:16:6a:e1:e5:1b:da:58:b8:99:e8:1e:79:64:02:69:
cc:77:01:0b:76:56:1f:dd:bf:ac:38:46:50:eb:af:56:0d:cd:
84:70:0f:4e:47:22:1b:86:74:8f:d4:15:9a:a0:b2:87:58:21:
06:cb:c2:f9:8c:c1:85:3a:25:cf:54:c0:0e:01:a6:88:82:21:
13:1c:ac:7e:6c:e6:d2:58:bd:38:36:05:6c:49:31:4c:2d:d6:
f0:e1:1d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:36 2025 by rpki-client