Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: evX+tIQGl4bthiOQ6PIghSnLcKVhOcetro2qu3w/5Qk=
Subject key identifier: AB:CA:66:EF:4D:16:98:98:B0:B3:A2:71:82:7A:E0:CB:5D:25:19:27
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 01974CD6FD26DF271B1BCB7E63054D3ACC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 02AD
Signing time: Sun 08 Jun 2025 00:00:47 +0000
Manifest this update: Sun 08 Jun 2025 00:00:47 +0000
Manifest next update: Mon 09 Jun 2025 00:00:47 +0000
Files and hashes: 1: MIsHJfMxCSM1WvbxV6mjQ2268Dg.roa (hash: 7IHu7bEPJwg7z9jyxbfl0xePWRPgEqdEgg/sFRD/jOU=)
2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: XRHDKZLReXTODDL86ntTsJ2FqLDilSGNNGkrtGnUg8o=)
3: tXUyhf07-eQaf37r4yK9NmJ5yPE.roa (hash: GWIxTVoGfPA2NfNvC8esjl5GZCoj69LgeTwNbdVaqCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:fd:26:df:27:1b:1b:cb:7e:63:05:4d:3a:cc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Jun 8 00:00:47 2025 GMT
Not After : Jun 9 00:00:47 2025 GMT
Subject: CN=abca66ef4d169898b0b3a271827ae0cb5d251927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:93:18:e4:13:a3:37:86:33:20:04:ce:43:
81:3a:9d:92:f0:cf:87:9b:17:28:5b:55:bb:8c:37:
4b:9f:6d:17:5a:e3:42:19:c6:66:4d:92:cc:36:2c:
28:4b:e1:d3:5b:b6:58:45:36:9a:15:fa:b6:7c:0f:
ee:b9:6e:74:b0:94:7e:f1:42:8b:b6:81:a9:39:e9:
d0:24:84:27:63:41:bb:ea:b8:56:53:25:c0:de:a3:
68:27:9b:28:15:72:d7:60:f7:97:fc:28:0a:46:db:
45:5f:2c:76:75:72:d1:aa:79:bd:6a:06:b7:c8:80:
ec:b5:7f:8c:d7:49:85:e6:10:74:3d:19:ad:5b:aa:
36:c3:2d:29:f5:54:48:7f:ed:4b:03:69:fc:4b:89:
5e:37:ea:f9:05:5e:e2:f0:52:f9:7e:48:44:85:b4:
31:a1:5b:3b:83:93:c5:3c:6c:f6:5a:87:ad:68:35:
f2:4c:0a:8d:63:be:f3:34:d1:8a:6f:5c:7b:9d:85:
20:e9:d7:3f:61:48:a1:76:f7:38:4e:b7:e0:ca:f1:
84:af:46:bc:a0:a2:76:1d:6e:2b:2c:8c:e4:1e:ac:
46:e9:cd:fe:80:b9:f0:4b:e4:83:9c:87:fd:22:c0:
5e:30:00:e6:2a:51:35:19:33:df:33:1f:24:48:5e:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:66:EF:4D:16:98:98:B0:B3:A2:71:82:7A:E0:CB:5D:25:19:27
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4d:83:c5:6f:23:dd:d3:20:da:ef:a7:01:53:ff:67:7d:22:
91:c1:70:9b:1f:e0:95:47:a2:6c:e9:71:a3:28:3f:34:da:b0:
e8:2b:f9:95:ca:b6:af:23:c4:ec:3d:ae:82:b9:39:b9:eb:c6:
30:e1:4e:b1:f7:4d:7f:08:66:2f:2c:cc:d0:e4:fa:8b:9a:c4:
50:cb:ef:49:90:dd:a6:b7:54:46:7a:5d:aa:4c:a8:5d:76:35:
90:39:f9:bb:b8:0b:a2:e8:29:ad:78:3b:89:9f:96:31:5a:0a:
4f:18:b8:54:27:c9:ed:5d:2b:e9:0d:48:ac:e8:5a:26:23:08:
7c:f1:a5:a1:7a:e6:70:dc:db:e9:d3:a8:4b:37:7d:ae:f6:a2:
40:fb:c3:e3:c5:24:5d:c1:6c:90:cb:e6:b9:8c:18:b6:91:04:
42:4e:ba:56:e5:c1:f4:b9:3b:34:6d:16:c6:61:50:01:73:c9:
c2:6d:1a:7c:f3:df:f5:c7:79:03:b7:4e:0c:e3:69:5a:ad:0b:
cc:de:05:ed:6c:75:4a:ac:4f:f3:4f:91:ab:a2:7e:19:ec:7e:
1b:fa:5b:62:34:f7:59:bf:7d:3b:a2:c9:65:81:0d:0f:1d:ae:
7f:b0:35:fc:19:48:75:9f:fa:34:3d:51:0a:1e:b6:64:55:ff:
dd:d8:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:47:19 2025 by rpki-client