Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File: hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier: KcdmVWTlMdc0DNaMhZEadhCh/1/5J6vp+vyN4EiA468=
Subject key identifier: FF:2B:7D:F2:94:CB:A9:5C:93:92:DF:22:E5:64:EA:A4:59:B6:0D:95
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer: /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial: 01976B4F64ED375BFD917FE4DEE64C9ECDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 22:00:54 +0000
Manifest this update: Fri 13 Jun 2025 22:00:54 +0000
Manifest next update: Sat 14 Jun 2025 22:00:54 +0000
Files and hashes: 1: SlIgtDyTd5cpyZ5qiIfHEefhUu8.roa (hash: cWooIQqAZCDw8Hk2WoTdEVBzSQhgQYC7c4wf4oYDYYU=)
2: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: CNy/DBN+ZaIIxNHkPoPymbiiWX2u9C7SZ39GrqitIao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:4f:64:ed:37:5b:fd:91:7f:e4:de:e6:4c:9e:cd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Validity
Not Before: Jun 13 22:00:54 2025 GMT
Not After : Jun 14 22:00:54 2025 GMT
Subject: CN=ff2b7df294cba95c9392df22e564eaa459b60d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:d2:a8:cd:19:6d:ff:c0:68:f7:72:cb:c8:
7c:3e:30:92:35:35:36:d8:64:9a:8b:55:82:2a:42:
a0:c3:40:25:d3:21:4c:97:a8:7c:44:6c:05:f9:27:
c2:ba:8b:16:b0:36:36:71:45:61:4e:0f:94:2c:e3:
2f:e4:42:44:a2:71:43:6b:8d:7d:be:25:26:81:cd:
15:a5:36:01:bb:59:2b:dc:aa:39:c3:65:3a:4d:17:
97:f6:2f:a0:69:3e:91:4b:de:86:8c:e9:59:a2:2d:
d8:1a:64:f5:78:fe:7f:48:76:c0:f8:c2:a9:50:40:
f4:58:54:53:c9:6b:9a:49:a6:27:c1:27:c6:30:3d:
9e:e6:86:29:91:ab:df:9c:bc:ef:6d:b2:b6:fd:a7:
d1:93:6b:20:85:8a:e1:f5:fd:4d:4d:33:d5:e9:92:
38:e3:de:66:c3:e7:72:62:6d:1f:22:bc:ad:d6:a0:
69:4f:bf:7e:bb:10:f2:57:4f:48:44:22:72:fd:a4:
41:47:ea:83:07:5f:f4:08:01:e0:20:b7:01:1c:c3:
4d:de:24:84:59:5c:ab:1c:67:f6:e5:61:f0:22:33:
52:7b:bf:b2:d2:50:12:be:dc:af:83:9e:f3:50:8b:
de:10:64:03:f5:9b:bd:13:d4:46:1c:36:22:e7:ba:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2B:7D:F2:94:CB:A9:5C:93:92:DF:22:E5:64:EA:A4:59:B6:0D:95
X509v3 Authority Key Identifier:
keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b2:fb:76:76:42:cd:95:f2:29:ee:bb:26:40:c6:27:24:4a:
7b:80:99:80:9f:e8:b4:ea:52:1b:b1:70:51:97:e9:33:6c:74:
6b:e4:c0:2e:dc:15:0b:e8:80:c6:c1:7b:bf:b7:5f:8c:27:be:
29:a7:7e:6b:33:60:6e:9d:7f:6a:9a:6a:6d:58:61:39:17:04:
6b:c2:90:a6:f3:e2:b7:27:79:55:e5:96:73:f2:aa:52:49:fd:
60:35:27:26:b6:0f:80:58:04:5d:9b:32:6a:b8:7b:5e:ce:0b:
a6:51:47:57:c3:27:7a:f0:ea:46:d4:4b:8a:1d:29:3d:ec:7a:
ff:2b:00:12:eb:c6:13:43:4f:ee:62:f7:aa:49:ae:e1:df:a9:
ea:14:ea:30:5b:1e:65:1e:09:f4:80:13:88:44:c7:86:c8:24:
41:26:b6:0d:b0:2f:09:42:e2:fa:8c:9f:a9:2c:fc:6a:23:a7:
ba:c4:d3:61:0a:53:1b:09:75:71:b6:05:5b:92:f9:ee:60:72:
af:fc:16:d4:7e:b8:e4:7a:45:9e:e7:6b:48:1f:99:fc:07:2c:
d6:cc:db:3c:df:d4:17:26:55:32:08:58:98:f2:48:cd:17:cd:
74:5f:51:4e:ad:22:e0:25:f7:2a:d3:92:d0:82:e0:8f:93:10:
8f:ff:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:01:03 2025 by rpki-client