Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: 68QGhwfwDhJD3b1MM3tCsN8RVtW21eUbXcw1grKrG0g=
Subject key identifier: 95:FF:EA:5A:19:66:BA:C6:C6:63:B0:07:49:18:B2:C3:96:07:E3:F2
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 0197515870D2EC663410FE084CF39EF9CEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 0648
Signing time: Sun 08 Jun 2025 21:00:39 +0000
Manifest this update: Sun 08 Jun 2025 21:00:39 +0000
Manifest next update: Mon 09 Jun 2025 21:00:39 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: 4pGZP3VMs35s8aVuLTKursGPHJE2eA6gMITiQJpnt0Q=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:70:d2:ec:66:34:10:fe:08:4c:f3:9e:f9:ce:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Jun 8 21:00:39 2025 GMT
Not After : Jun 9 21:00:39 2025 GMT
Subject: CN=95ffea5a1966bac6c663b0074918b2c39607e3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:49:1c:20:53:50:f7:19:63:b9:ef:eb:59:
4e:50:c6:8c:a8:bc:40:49:dc:40:3f:eb:71:d4:85:
2a:57:d8:aa:aa:2c:b2:f3:af:34:9a:46:57:a6:83:
d0:dc:6a:e6:a4:e9:48:52:e8:48:4b:8f:8e:7e:a8:
22:07:49:b8:8c:09:8e:61:64:5d:bc:68:bd:8b:58:
f7:52:d5:b6:44:be:de:2c:39:e8:bf:1e:f4:da:e8:
a8:33:75:58:e5:4f:84:0b:3f:93:ea:73:09:c5:e0:
4a:76:36:6d:64:cb:c7:e4:d1:93:0f:a4:7c:17:70:
fe:89:ba:8c:5a:d2:98:66:1f:10:17:66:9b:44:e2:
2b:69:6c:28:10:5a:45:fe:23:ce:c0:28:a8:f0:00:
0d:08:04:06:ba:9a:03:3d:1e:85:50:2b:7d:9e:d5:
cf:f7:47:7c:a4:6a:c9:d9:09:a0:7e:c4:a3:fb:22:
83:f2:52:77:0a:80:68:cf:cc:a9:e3:2a:d3:a9:f9:
2d:74:48:88:0b:ac:02:41:45:af:48:20:54:32:5b:
81:dd:8d:d2:a8:cc:bb:7f:a2:5c:aa:51:72:65:31:
36:13:cf:83:51:a1:4c:fc:f7:72:13:37:49:56:b7:
01:46:73:44:15:98:91:41:23:ae:de:d6:05:c1:40:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FF:EA:5A:19:66:BA:C6:C6:63:B0:07:49:18:B2:C3:96:07:E3:F2
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6d:e2:57:f7:4d:bc:bd:46:74:b2:ee:2f:aa:43:69:85:fb:
98:a2:d1:c1:dd:a7:2e:ca:64:92:98:8a:74:39:cc:e3:5a:21:
f5:e9:00:25:70:71:19:62:2d:9f:18:e8:b2:c8:fd:2b:30:24:
82:55:5e:7d:f2:f1:cb:a8:85:31:c3:d2:14:db:e7:4a:a7:cc:
61:53:d1:c8:3b:75:b9:e6:02:9b:f9:5a:9a:d8:ad:01:e1:f2:
99:9c:0e:fb:7f:62:be:14:04:2d:33:47:37:2f:15:ed:ff:1a:
fa:ef:57:76:b5:9a:65:06:69:28:2b:a6:d6:a3:3b:8b:07:bb:
c9:e3:24:b3:fa:98:d9:af:3b:ae:79:63:87:1f:85:ad:03:15:
e5:5a:5c:48:a7:9d:99:98:fd:a9:70:d2:a5:96:0e:57:c8:67:
00:c9:35:c5:db:4b:38:78:f6:cf:3a:90:0c:bd:95:17:f6:df:
b1:5e:5b:4c:33:a4:ee:25:e6:02:a6:e1:10:4e:3e:d5:18:a6:
e6:d0:b4:e3:76:c5:70:3b:e0:90:6f:a0:1c:58:77:4f:a3:1d:
b2:dc:17:ea:c6:ad:83:26:43:77:a0:e0:50:6f:22:23:f9:1f:
81:b9:0a:b0:80:37:60:54:57:08:97:3c:e4:43:1d:e1:bd:44:
12:10:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:07:00 2025 by rpki-client