Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: 487f2wMOltW5NS23lwAufrZqlFbhjWSqSBoxfwdI+0Y=
Subject key identifier: 1F:C7:BA:2C:A3:37:04:91:C9:38:6C:A3:10:45:C2:0D:0F:FF:99:5D
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 01974C68DEDD83A7D2BF7673220290AD68E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0B86
Signing time: Sat 07 Jun 2025 22:00:30 +0000
Manifest this update: Sat 07 Jun 2025 22:00:30 +0000
Manifest next update: Sun 08 Jun 2025 22:00:30 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: DhKidlT/SOHyP7S8UW5JKXUPvtXvuixUqjh3AvSs/YU=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:de:dd:83:a7:d2:bf:76:73:22:02:90:ad:68:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Jun 7 22:00:30 2025 GMT
Not After : Jun 8 22:00:30 2025 GMT
Subject: CN=1fc7ba2ca3370491c9386ca31045c20d0fff995d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:74:57:21:b1:d1:d8:06:0e:03:d2:16:48:
89:fb:2f:f9:b7:88:0f:86:ea:23:a5:34:2f:45:80:
67:64:97:6d:e0:17:17:66:83:8a:69:f5:9d:a0:c5:
0d:92:9d:c4:36:29:51:80:d2:aa:e6:bd:48:4e:87:
1f:8b:89:a1:94:71:eb:09:dc:14:43:f0:d7:d7:22:
94:3c:22:89:ca:d3:51:3f:48:15:04:c1:e0:f1:26:
b0:1b:c8:de:d3:73:1d:ef:df:96:13:18:62:3b:31:
7f:cc:e8:62:21:8b:bb:52:27:19:cc:41:23:a6:7f:
9d:a6:30:e3:41:18:0e:57:cd:a7:4b:90:c1:25:e3:
de:f7:58:c1:e7:c7:c2:66:e0:31:d3:81:a6:ae:7a:
3d:3b:b5:2d:ef:69:3f:85:0b:23:9d:f2:7d:f6:6d:
b1:1e:2b:fe:be:d8:16:3d:7c:51:ca:4b:c1:77:46:
ad:6e:f7:02:3c:d8:f8:c2:84:29:23:67:9e:7c:f3:
6f:1f:c5:f9:e9:d7:d0:80:0a:9a:b1:79:b8:e3:c2:
04:ed:79:48:f2:0a:c5:ef:23:4a:44:11:44:f8:ea:
9f:85:ad:eb:41:b9:3d:8b:c2:ec:b2:b7:b6:ed:f1:
b0:5b:1c:b9:25:e7:b8:b6:ba:35:9e:42:e6:50:7a:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C7:BA:2C:A3:37:04:91:C9:38:6C:A3:10:45:C2:0D:0F:FF:99:5D
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:df:e1:41:cb:96:5f:30:e0:18:e3:dd:7d:b0:3c:74:81:
7a:89:11:2a:7f:4a:fa:34:f4:fd:31:6c:82:a5:1a:e2:37:d2:
37:b4:5e:c5:ee:c0:e4:41:79:a9:9b:ff:42:cb:64:f3:e9:4e:
d8:c6:17:66:8b:e5:8d:7f:ff:43:b0:56:61:c1:22:67:91:8d:
db:27:06:52:75:50:17:7d:59:80:b7:97:8e:29:60:01:2e:6e:
3e:19:9f:21:1a:be:f0:b0:a7:06:67:86:64:87:bc:d6:18:ca:
e3:c6:58:c9:3d:aa:e1:9f:d4:3c:b5:39:5d:c0:01:a1:6f:c3:
32:aa:f8:98:c2:1c:f9:e3:b2:21:d9:03:6e:6b:92:2c:ef:79:
bc:37:de:a6:59:a8:34:bf:07:29:f6:e8:f2:c3:5d:73:a6:ae:
91:bb:34:cf:46:3f:c6:63:f6:b9:0f:a4:82:7a:50:90:e9:98:
7a:e2:e1:a2:f5:cb:68:cc:69:ce:38:78:cc:91:32:4b:b1:78:
74:ae:f6:ba:12:30:76:5c:44:a7:32:ca:7a:e2:53:0f:c2:ed:
9b:8d:7b:09:ed:4e:24:b4:a2:10:38:80:8a:bd:5c:46:b9:d5:
02:7e:75:53:72:3e:9d:f2:52:cb:fe:26:db:49:c6:9b:4d:c5:
46:79:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:49:29 2025 by rpki-client