Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: MLXK6O4AZYQ7a48oBNVMuBHs+hm7vqezLmnQaMsnOdg=
Subject key identifier: AD:88:40:2A:30:53:6D:6B:57:AD:FB:F6:C4:5C:70:BD:4F:AF:B7:2F
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 01974EC5FD98161E9367442FA710A5568A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 09:01:27 +0000
Manifest this update: Sun 08 Jun 2025 09:01:27 +0000
Manifest next update: Mon 09 Jun 2025 09:01:27 +0000
Files and hashes: 1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: dtnpRKDjlIptDmAf1uqnPxUT8YIHlTg4bAQjJhBvH30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:fd:98:16:1e:93:67:44:2f:a7:10:a5:56:8a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Jun 8 09:01:27 2025 GMT
Not After : Jun 9 09:01:27 2025 GMT
Subject: CN=ad88402a30536d6b57adfbf6c45c70bd4fafb72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:a8:ec:07:55:28:50:5b:76:e3:8d:1a:49:
26:27:d3:45:9c:ce:65:f7:8f:e6:0d:fa:91:22:99:
d8:65:fb:7c:a7:c5:f7:ee:df:a9:f9:31:ea:a0:0c:
49:c8:e0:4d:ea:36:ca:58:46:ce:49:8a:f1:2c:88:
b6:8f:68:94:f0:35:a3:89:8d:7f:6e:ea:37:92:74:
9b:0b:5e:c6:8e:5a:47:ec:bf:6b:4a:9c:8f:b3:26:
37:cd:00:23:30:8d:7b:0e:1f:3a:cb:86:64:d3:bf:
2d:e5:9d:b5:75:cd:0b:70:2c:6b:8c:50:60:27:e6:
2c:0d:2a:aa:11:1f:73:19:8c:7d:a9:67:ed:84:6f:
82:a3:02:76:73:cc:2f:7a:a2:93:e6:90:2a:65:55:
44:3d:87:f1:d7:48:a0:aa:f5:4e:ad:f0:79:75:22:
45:63:d9:72:6f:ca:8a:c4:42:b1:99:eb:49:24:aa:
64:b7:e4:61:ca:65:e7:88:41:46:4c:a5:12:9b:f2:
65:f7:e2:06:35:47:e9:c8:06:f0:8c:be:e6:8c:b1:
ba:a9:4f:fd:1c:e0:39:fd:91:9f:b8:4e:34:ca:d3:
5f:ea:be:cb:3c:4a:19:e6:d9:76:65:b6:34:72:72:
11:91:f7:4f:d9:4e:9d:79:e8:22:9f:63:70:ca:97:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:40:2A:30:53:6D:6B:57:AD:FB:F6:C4:5C:70:BD:4F:AF:B7:2F
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cb:30:de:a4:9a:9f:b8:2e:88:4c:b7:91:72:b7:8d:93:65:
93:74:1e:75:10:03:a2:cb:ef:13:1a:33:b3:b7:99:d4:67:93:
51:2f:fd:06:b7:83:ea:f2:d4:17:77:41:14:9c:9c:72:71:50:
47:1a:39:23:a6:79:ab:28:d0:bd:03:13:d4:d0:74:20:fb:7c:
1b:da:d1:c4:86:de:e4:7a:0f:95:62:fd:9c:f9:e8:6a:e9:4b:
6a:4c:75:cc:38:e0:31:f4:e3:4e:19:c7:46:cc:a6:c3:1a:65:
0a:77:9a:24:0c:df:ab:30:75:4e:11:b7:24:4b:6f:fc:04:a4:
ee:60:8e:78:44:dd:10:1d:4a:37:0d:a6:62:b2:bd:cf:98:49:
1f:3e:3f:69:26:97:32:e0:c9:83:b1:3e:75:c7:e6:14:fe:fa:
a6:0e:3f:f6:2d:49:ad:d2:f1:83:83:79:a7:8e:8a:aa:58:01:
37:13:bb:d5:e8:41:bb:8a:d6:4f:62:13:24:52:69:73:95:37:
d1:3b:44:05:0a:37:84:77:45:c4:e3:11:26:97:5b:fa:ba:d7:
3a:51:5b:23:42:46:ac:f3:97:f8:dc:ce:d6:98:33:e5:32:48:
39:a7:0f:d2:60:ea:1d:cb:7c:58:be:b8:d3:53:80:04:21:dd:
5e:9d:e4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:25:44 2025 by rpki-client