Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: KGTgbQp1J9ZWx8YUKGoAmCNPqVruY7kclo9WhyG97K0=
Subject key identifier: 7B:D9:18:A7:A8:93:EC:88:41:16:BD:BE:A6:0D:BB:0F:57:A2:1E:0E
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 01974742FA09448AD1D5A3895ECC53DBF141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 1597
Signing time: Fri 06 Jun 2025 22:01:01 +0000
Manifest this update: Fri 06 Jun 2025 22:01:01 +0000
Manifest next update: Sat 07 Jun 2025 22:01:01 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: xQ+fZqZxofb0LCZpOv9Dnl2jS2K1NGZ0Nxsu9RiaF/4=)
2: PDE_xx1gzmPAVxOZXpeIJmNjp-w.roa (hash: rsisC5jLLAQc/j1oflIAdcSgTWRxBAcfuySQlAiOJsc=)
3: Zg0aTO_s-s5vOZoxmmqg_5sQSgQ.roa (hash: QOvTkDAZBFbf1/F4gCK1ncg1KiM7Id/ni6wFdDr4R+8=)
4: tUG2gp-hSdDfUJYQlaFq0NzbX94.roa (hash: IvkQwvvwCRW0GZATlVei8Jb/Mr/PuuQNS0wQyy4KpD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:fa:09:44:8a:d1:d5:a3:89:5e:cc:53:db:f1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Jun 6 22:01:01 2025 GMT
Not After : Jun 7 22:01:01 2025 GMT
Subject: CN=7bd918a7a893ec884116bdbea60dbb0f57a21e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:4e:e6:6a:ae:aa:de:55:65:d6:1a:37:42:
bc:ad:c4:55:d8:86:2e:33:31:18:2f:52:0c:ab:38:
0f:a2:91:95:27:a6:0f:47:b1:5e:62:81:2f:e3:15:
92:82:54:6f:5f:55:7c:c5:ce:96:31:67:24:d6:c2:
20:7c:0f:71:89:54:b2:79:10:a3:0f:15:4f:be:85:
df:b4:90:01:ed:d2:55:a0:d1:cb:72:61:fe:a5:7d:
74:19:9a:1b:df:e9:8f:98:a1:7d:5e:79:9d:f3:05:
50:ca:4a:ff:85:3e:10:dc:af:7b:60:d9:67:74:a0:
9d:76:34:22:ab:31:cb:8d:97:5b:7b:97:41:b9:f2:
20:c5:ca:41:21:32:32:e4:16:63:cc:62:3a:27:f3:
3f:20:0f:59:88:2e:02:19:41:9d:02:6d:15:be:48:
76:71:af:22:be:4b:55:32:08:67:7d:76:2d:8d:1e:
e2:15:8c:01:54:a5:b7:01:17:12:eb:4d:02:3a:99:
0b:49:31:40:dd:0c:2b:03:e1:98:b7:46:e2:0e:8d:
2c:18:72:7a:9c:ec:8d:9a:80:50:19:98:41:5d:c5:
48:7f:9b:d0:2b:46:67:ae:d2:17:11:45:50:39:1f:
10:12:8b:98:de:5b:b6:98:cd:3c:4e:94:e1:2f:79:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D9:18:A7:A8:93:EC:88:41:16:BD:BE:A6:0D:BB:0F:57:A2:1E:0E
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f5:cd:e5:2f:3b:c3:66:3d:35:72:88:ca:f3:66:de:46:92:
8e:0e:94:29:6f:6b:23:b4:7c:58:d6:c6:33:30:23:bc:81:97:
e0:60:6f:1d:26:43:46:4f:40:e6:6a:8a:f0:1f:a5:3f:3e:f4:
8a:76:6f:1f:20:7c:17:4a:73:f8:4e:9e:b1:e6:d1:6c:52:7b:
54:2a:33:51:04:0f:ab:dc:68:e5:c6:6e:60:c1:7c:30:02:ea:
8b:bc:4f:cb:ae:07:4a:5a:24:61:42:4f:a6:90:5b:0d:e2:d3:
24:de:9f:d0:a5:e0:8e:fb:fa:7d:9d:95:06:91:9f:74:e7:f6:
6b:af:05:31:30:d2:dc:59:19:d6:64:32:e5:7a:56:fb:80:fe:
41:fe:26:0d:ef:9f:db:96:76:59:4a:00:e7:58:1d:2d:b0:10:
ef:15:26:de:03:6c:16:2b:d3:4e:76:cb:b4:19:42:23:b5:c2:
db:57:5d:39:0b:80:48:9d:7f:bb:b4:be:53:f5:94:18:fd:98:
e0:24:e7:69:da:e8:d0:aa:16:f3:bb:46:74:7d:70:3d:b2:c7:
10:44:34:1a:0d:48:4a:46:c7:bb:44:dd:c0:e6:91:8e:10:b8:
ed:d4:09:72:f0:3e:92:f0:c4:4a:ea:89:1e:d2:42:4f:32:07:
42:c1:cd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:35 2025 by rpki-client