Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: nGqatHLHifTUqZepSL49mleq7Sy8Ql/JoH8qYr5U9xI=
Subject key identifier: B6:64:0F:61:9A:E5:C2:2A:8E:4D:21:A4:8F:C7:59:B2:6C:40:0A:55
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 019751587FB21357DA7476E432E3FEFDEFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 087A
Signing time: Sun 08 Jun 2025 21:00:43 +0000
Manifest this update: Sun 08 Jun 2025 21:00:43 +0000
Manifest next update: Mon 09 Jun 2025 21:00:43 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: NmOcB8hWU5etYIWUpsWFshkggrxNETu+uLATY06Zo9E=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:7f:b2:13:57:da:74:76:e4:32:e3:fe:fd:ef:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Jun 8 21:00:43 2025 GMT
Not After : Jun 9 21:00:43 2025 GMT
Subject: CN=b6640f619ae5c22a8e4d21a48fc759b26c400a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:1c:e5:68:33:f5:9a:26:09:7c:24:e8:4a:
53:f2:96:5c:5b:74:6b:c2:02:9a:cd:f3:b4:bd:6f:
c4:b8:e5:92:f7:a4:42:3a:7b:6f:aa:2f:97:b9:f8:
34:cb:b9:87:90:39:d9:3c:e3:14:02:4e:1a:9a:a1:
dd:99:52:6e:50:f5:82:fb:3a:2a:75:c1:4e:a5:8c:
f9:d6:38:c4:22:6c:72:bf:c0:68:2d:64:14:64:f3:
7b:f1:f3:e2:4e:7e:86:b7:95:57:0a:f3:6a:5a:e9:
fa:be:00:5a:f7:9b:00:28:03:d1:91:0c:c4:90:ba:
9c:c3:e9:b5:90:2f:d2:87:65:63:a6:e4:b5:b8:ca:
1c:a5:b7:a5:cd:19:95:fa:f6:47:4b:8b:72:21:b6:
1f:e0:bb:4f:cc:cd:e2:f3:76:d1:06:d0:0c:da:07:
04:8d:00:bc:0d:cb:7e:66:bd:2e:b9:ad:2e:1f:56:
9d:d2:f4:ce:3a:f2:fb:31:fc:3f:94:e8:ed:4c:2d:
4e:a1:ba:57:00:32:0a:ec:dd:0f:4b:a6:8a:2b:92:
8b:90:16:98:df:f8:85:cf:b7:3c:f3:f5:cb:7d:8c:
69:4a:22:52:d8:42:72:61:82:f9:fc:cd:b1:fb:f3:
39:aa:77:e7:b2:52:53:79:55:89:cc:6b:6f:8f:9e:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:64:0F:61:9A:E5:C2:2A:8E:4D:21:A4:8F:C7:59:B2:6C:40:0A:55
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c3:b8:8b:76:2b:97:93:dc:02:9a:98:50:f4:27:bd:60:55:
c8:1c:68:35:0d:6e:f6:13:d5:39:6a:b8:fa:53:ac:67:c6:a5:
eb:aa:e5:bc:2f:04:6d:df:f9:ca:89:ab:36:f5:1d:e8:ab:8f:
0d:3e:c7:ed:b0:f1:f4:93:48:61:6c:d9:8c:62:02:31:ac:60:
b8:41:a6:26:dd:8e:61:4a:a9:17:a8:aa:f7:30:8e:56:14:be:
10:fd:3f:0d:58:06:98:ac:bc:4b:37:02:92:d8:ce:e2:96:e1:
74:35:a9:5f:63:8a:5a:d8:e4:99:16:4d:c8:09:af:7b:f5:d5:
04:96:bc:0a:93:9e:8e:39:98:37:5f:7d:53:68:a3:2c:7d:a2:
a0:ef:ab:50:ea:e4:3d:9d:52:bc:10:3a:96:a9:8e:ca:7f:2d:
4e:bf:4d:46:23:7e:3b:df:cc:00:de:55:19:2b:b8:6a:e3:c6:
fb:45:91:3b:70:67:fa:ba:ba:7f:8b:c9:c9:67:a6:96:63:ef:
de:6f:98:dc:32:73:ad:0d:c5:a8:70:22:f0:d9:d5:1b:26:24:
3b:c1:68:02:73:d2:d8:99:b1:4e:cf:62:23:6a:27:19:b2:2c:
e3:a4:6b:d5:b1:7b:47:5c:d3:f5:46:46:82:c9:5f:e7:94:5e:
7b:b4:fd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:17:09 2025 by rpki-client