Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
File: hP-lQvPYybB7926uioaYWj17Tcc.mft (raw, json)
Hash identifier: ULFZwyXb/Ihd+WYCXf3Ho+d9TPjo3+2u0S1xjVjXK9Y=
Subject key identifier: 2A:34:BF:51:0A:4D:C7:8E:DA:B0:64:9E:3E:59:0A:D2:50:FF:06:14
Authority key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
Certificate issuer: /CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Certificate serial: 01975234810E2E6EEC2DEAB333D5A3E84ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
Manifest number: 0F4A
Signing time: Mon 09 Jun 2025 01:01:01 +0000
Manifest this update: Mon 09 Jun 2025 01:01:01 +0000
Manifest next update: Tue 10 Jun 2025 01:01:01 +0000
Files and hashes: 1: hP-lQvPYybB7926uioaYWj17Tcc.crl (hash: 1h2cxNJzUVB8yyokNVg4eq2GequMO/w0K7LuYnZ4XL8=)
2: uVc-YEHIfoCC97dYSAB-pvf1GkY.roa (hash: xpxJQ9Mtn3be8wfSELsmv9qWpA192efhc4xx/FDBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:81:0e:2e:6e:ec:2d:ea:b3:33:d5:a3:e8:4e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Validity
Not Before: Jun 9 01:01:01 2025 GMT
Not After : Jun 10 01:01:01 2025 GMT
Subject: CN=2a34bf510a4dc78edab0649e3e590ad250ff0614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:8b:ec:e4:77:4f:ac:66:e0:da:6c:bc:f6:
fe:69:d4:66:9e:1b:de:50:12:02:b0:8f:b9:7c:b1:
0a:6c:c7:f3:4f:77:77:80:b7:40:97:fa:0f:cc:b8:
c5:99:b8:35:ac:ae:c2:89:ec:ed:e7:51:df:a8:2c:
0d:5c:e2:5a:8f:5a:e0:8d:75:90:ef:2b:e9:6d:7c:
06:1b:eb:f8:e5:83:49:26:78:de:42:e6:68:1c:f9:
f5:e9:1f:eb:38:02:73:61:c6:ec:eb:c2:7c:26:21:
c2:78:8f:46:82:7c:62:6e:4f:fd:18:35:b7:57:f5:
81:12:83:1d:89:54:5f:08:de:80:38:65:12:8b:01:
e1:e2:28:c2:5e:d8:ba:57:ae:ff:04:a6:f3:6f:08:
84:a4:a5:21:d8:0f:b4:33:7c:b4:ba:97:97:00:ad:
55:72:d2:c0:70:62:d8:19:85:9f:c5:b3:ba:f0:6c:
fd:c0:82:46:fc:9b:69:2b:5e:33:5c:3c:5c:4d:07:
3b:0a:6a:b8:33:46:57:47:35:f4:3d:51:17:33:87:
e9:65:48:aa:3e:f4:b1:f1:f1:0d:15:f2:c2:fb:1b:
55:24:35:f2:ed:90:28:c3:ae:17:23:86:a1:69:e4:
d8:9d:43:a7:c8:98:6e:ed:7e:d4:09:45:ae:ea:6a:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:34:BF:51:0A:4D:C7:8E:DA:B0:64:9E:3E:59:0A:D2:50:FF:06:14
X509v3 Authority Key Identifier:
keyid:84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a2:f7:e8:54:3e:d7:f1:82:cc:fb:18:f0:ed:61:f9:a0:7f:
9b:ff:2f:02:6a:ce:a2:ae:e7:1e:92:7e:58:41:31:25:e5:fd:
e7:eb:75:be:f1:0e:93:c4:ea:96:6a:a8:35:f9:5f:e4:91:26:
9c:2d:5b:53:d6:5f:61:0f:b6:c6:04:de:c5:4e:6b:f7:b1:85:
9f:f3:54:67:6d:56:96:c8:e8:7b:64:ff:d2:ca:74:0e:7f:45:
ee:dc:92:d7:9e:88:c1:f4:01:29:ac:a6:9e:c6:e9:6e:d8:ec:
c6:af:46:be:30:cb:17:72:7c:18:ce:b2:ea:4c:a0:6a:5a:1b:
dc:12:87:fb:31:e8:0e:e9:9d:6f:33:b3:a7:47:4f:3d:46:66:
36:0e:16:e4:ec:62:15:4f:56:be:23:e1:d6:2c:fd:c2:f5:7b:
33:a6:3d:48:fc:bb:54:36:cc:c1:ab:b5:3a:78:26:fa:8f:2f:
87:a8:96:41:fb:f0:78:0a:47:2f:9d:1c:24:36:56:42:da:4f:
b9:8f:20:fd:49:1e:4c:68:7b:d8:6b:d4:5a:8a:34:c1:d4:3f:
c4:47:fc:89:b1:b5:d2:7b:8b:d2:f3:57:ca:e2:7b:f8:ba:5e:
69:5d:3c:47:65:db:35:63:dc:0a:b4:1a:e7:1a:b9:4b:f6:73:
cd:ef:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:44 2025 by rpki-client