Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: OYV1j8HJ1IANuceSbdX7t4yGgw38KGmWDcsIEixlmHM=
Subject key identifier: 22:F7:31:E4:E5:19:AF:8D:48:70:32:F0:A7:77:BD:17:CF:7E:26:4D
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 01974B5661B115F002AF9A4CBF7FC6F9728D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 1160
Signing time: Sat 07 Jun 2025 17:00:41 +0000
Manifest this update: Sat 07 Jun 2025 17:00:41 +0000
Manifest next update: Sun 08 Jun 2025 17:00:41 +0000
Files and hashes: 1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: CLEj3j9ZIq2cRX51vUZ8Yp2iymDbCO5ncItge+Zvi+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:61:b1:15:f0:02:af:9a:4c:bf:7f:c6:f9:72:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Jun 7 17:00:41 2025 GMT
Not After : Jun 8 17:00:41 2025 GMT
Subject: CN=22f731e4e519af8d487032f0a777bd17cf7e264d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:ae:b7:1c:83:88:81:34:cb:74:cb:38:e7:
3e:d9:2b:9a:87:16:67:1b:2f:7f:c2:b7:e1:a5:db:
c0:54:85:75:8c:a3:d0:5e:80:86:6c:c4:28:2e:27:
eb:f2:9a:41:c5:30:55:6f:88:99:f5:e0:3a:3f:56:
86:e6:55:5c:49:10:7b:b8:8e:da:f5:ab:8a:17:7f:
f6:ec:5e:85:15:46:7b:d6:b8:df:0a:c7:15:28:d9:
ea:06:43:f6:6b:20:27:18:62:c2:7f:cd:cb:1a:38:
9e:d6:ad:7e:3c:bb:52:5a:90:2f:31:3f:d8:55:68:
35:fc:8e:80:fe:8a:f3:1f:11:5a:d5:66:2c:30:80:
85:d3:19:93:b0:d3:07:e0:f8:48:f0:fa:82:9c:9a:
5a:be:f5:79:8d:78:05:47:2d:d2:d5:2c:73:4f:0c:
e4:f9:ee:17:23:0a:f3:78:fa:19:b5:1f:f4:0d:b7:
90:08:86:3b:99:3d:a0:43:c3:e0:d0:9f:8b:ab:90:
89:63:0e:a8:d9:ef:cb:e7:3d:80:47:8c:ab:f3:cd:
bc:a9:c8:f3:8f:a8:8f:85:6b:8e:a3:86:2c:8f:8c:
00:4e:81:51:bf:b9:51:f8:48:e3:af:7a:43:e0:0e:
71:7c:27:38:5e:36:62:b3:27:13:10:04:ac:0c:a4:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F7:31:E4:E5:19:AF:8D:48:70:32:F0:A7:77:BD:17:CF:7E:26:4D
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9d:03:a2:5d:26:59:8c:5a:01:72:6b:b8:22:22:d9:fb:f1:
50:0d:75:94:12:e9:ec:33:12:4d:62:e4:06:08:d0:43:38:ed:
4a:53:bb:89:6d:af:cb:15:0b:9c:4e:7e:55:72:47:1a:d8:bc:
4d:22:95:82:73:f6:28:ae:5c:ca:e5:8b:92:0b:4c:bc:56:e1:
cd:1a:59:c5:d2:69:55:f7:41:23:a2:04:b3:9a:aa:8b:ff:b7:
2a:1c:e3:b9:97:2e:4c:4d:ab:22:7c:d2:ab:31:78:84:5e:75:
a6:37:9a:5d:6f:a7:8b:e3:94:2d:b5:b8:95:fc:40:ca:b4:28:
0e:28:84:c6:61:fa:b4:1f:1a:58:67:45:f0:72:1c:75:ca:40:
a6:d4:ba:aa:e3:30:39:c9:2d:f9:e1:83:58:c1:a8:ae:bf:85:
d1:c4:f9:4c:c6:2c:0c:c6:1d:90:e7:77:57:8b:db:b1:36:0a:
1e:28:8b:2e:88:f8:ea:30:27:87:85:7e:59:95:c1:2c:be:2c:
1a:0a:04:64:e7:93:56:f1:12:28:cb:74:1b:be:42:99:03:a3:
f0:c7:5b:4c:c3:b7:e5:4d:f0:20:80:84:89:72:bd:e6:f7:3c:
3a:c7:d5:90:64:4f:3e:c9:13:5c:1f:ca:75:9a:52:6d:46:25:
16:04:47:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:15 2025 by rpki-client