Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: kc7pgOd/FtHmeeOS9+VxssZvOVznTaQGEmrDyG71Apk=
Subject key identifier: 79:03:BD:DB:D2:FF:92:C3:F4:41:38:84:3B:99:17:C0:0D:96:4A:44
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 019746D49D75D24F6E76BE6DA6EEE95AC3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 0133
Signing time: Fri 06 Jun 2025 20:00:28 +0000
Manifest this update: Fri 06 Jun 2025 20:00:28 +0000
Manifest next update: Sat 07 Jun 2025 20:00:28 +0000
Files and hashes: 1: NwE-Q3U5NROLLw8YZo5SdVq6prU.roa (hash: 4nK8pCzkjFWGecL8LPoOkleHLxc20BBIlahc8LVNGkQ=)
2: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: mcI6Th+NUeiq3x0UGgt82sJUh8YZEXowSPJApYQcsZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:9d:75:d2:4f:6e:76:be:6d:a6:ee:e9:5a:c3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Jun 6 20:00:28 2025 GMT
Not After : Jun 7 20:00:28 2025 GMT
Subject: CN=7903bddbd2ff92c3f44138843b9917c00d964a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:17:b2:c4:4f:39:c9:20:86:d2:ee:70:c5:
a0:3c:c8:3c:e3:43:53:a7:0b:ff:ff:7e:c5:29:f3:
b1:ea:12:81:77:8a:a0:31:f9:fe:9e:17:52:d2:ab:
5b:a9:e1:7d:57:c5:6d:fb:ef:67:55:fe:a3:61:68:
16:21:08:82:0e:aa:aa:38:08:63:72:95:6e:81:d9:
a9:a3:7c:ce:46:9d:1f:b0:84:ef:09:0e:b2:01:96:
ff:37:18:b5:41:33:28:ec:df:0b:0e:dc:6d:6f:7a:
7b:cb:45:3f:4e:b1:6e:ca:2a:43:b1:ae:ae:ca:ca:
90:bb:5a:30:c8:47:20:ef:de:20:bc:15:61:e7:41:
12:ba:1d:87:25:dc:f0:4f:a5:67:42:5b:38:78:5f:
44:3a:05:7d:10:b8:13:f2:86:93:dc:7a:76:68:07:
00:75:e5:ea:97:c2:dd:af:5a:bd:fa:2c:11:0e:80:
d9:da:f9:ac:fd:a4:8a:a7:33:f6:87:2a:42:3c:1f:
77:3b:0f:98:e7:91:63:e6:46:b3:ec:53:ca:a2:50:
db:a8:3a:2b:10:37:12:5c:7d:40:2b:b1:c8:f4:29:
8b:c9:7c:9f:ab:6a:91:8d:86:07:e0:03:19:c3:07:
3c:9a:53:04:a3:21:ec:b4:ac:a7:bf:0e:e6:d1:5c:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:BD:DB:D2:FF:92:C3:F4:41:38:84:3B:99:17:C0:0D:96:4A:44
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7a:9b:01:29:40:dd:96:80:eb:d9:c1:1c:77:1f:f4:3e:8e:
03:72:af:eb:a6:c5:9b:76:a1:08:ef:45:06:ed:ec:66:e6:99:
eb:9d:42:f2:d2:15:18:23:36:bd:13:4f:e9:50:0c:c9:60:50:
08:96:7f:0b:d0:38:9d:aa:8c:54:fe:27:36:0c:5c:9f:38:00:
b1:7d:42:80:1d:cc:6b:c9:ae:c5:26:b7:2f:e1:31:9d:64:1c:
25:dd:da:84:c8:2a:9c:56:16:dd:68:8a:ba:63:62:ff:3e:bc:
c2:10:61:86:e0:76:68:a7:60:35:55:73:54:2b:59:b4:63:b7:
d9:2a:db:02:5b:f5:a5:eb:ec:16:28:92:43:0e:1c:fc:ed:93:
dc:88:05:b7:11:1f:8b:b0:b1:79:4d:2d:95:27:d0:36:8f:f1:
89:00:a3:ed:4b:40:e9:9d:1e:35:47:1c:a5:58:38:8b:e1:80:
0a:29:99:97:b7:a0:2a:25:bf:a3:2b:14:4f:63:bd:3a:58:d6:
85:e2:b3:98:b6:f2:91:fb:c3:2b:f2:36:fc:44:9e:7f:51:3a:
56:88:5a:a9:1b:e0:67:ec:c5:74:09:61:e8:d6:e0:cb:4e:a1:
20:22:c2:4c:a5:39:ec:a4:c9:a6:95:f5:3e:3a:5c:ca:2e:c9:
13:b0:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:35:49 2025 by rpki-client