Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
File: huGrpgDN5ewxgxmxVZS2irlslWw.mft (raw, json)
Hash identifier: WJt4sphpW82Cz7wTH1nbXvNIPuOD5l1ylwOS39t5r3U=
Subject key identifier: B7:9D:3C:E8:F6:EC:97:5F:B6:A7:15:DD:C8:C8:0C:45:77:A0:45:60
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Certificate issuer: /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial: 019745F963662252C0DA81B9810942B8C9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
Manifest number: 0E7D
Signing time: Fri 06 Jun 2025 16:01:01 +0000
Manifest this update: Fri 06 Jun 2025 16:01:01 +0000
Manifest next update: Sat 07 Jun 2025 16:01:01 +0000
Files and hashes: 1: Q7vNAscnF-4OhkgVonOsxeJBDjA.roa (hash: 0ioDa0FuPDgR/Y4yLPplBITqL6YDwLS4b5dcomdJX+s=)
2: huGrpgDN5ewxgxmxVZS2irlslWw.crl (hash: 2mA6qQlhu6hov2eRq+JeGE4urNAIR4o61o4yL6yX4NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:63:66:22:52:c0:da:81:b9:81:09:42:b8:c9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
Validity
Not Before: Jun 6 16:01:01 2025 GMT
Not After : Jun 7 16:01:01 2025 GMT
Subject: CN=b79d3ce8f6ec975fb6a715ddc8c80c4577a04560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:fb:fb:d9:8d:5a:90:d6:e3:74:ec:1d:36:
06:ef:a4:fa:3f:6d:81:11:9c:92:26:fb:d8:a7:3e:
95:84:78:31:91:77:00:47:6f:80:5e:40:62:c6:ce:
9f:f3:5b:80:82:6b:01:b0:06:a5:a6:d4:67:fd:9e:
e0:73:ec:26:19:1b:90:fa:93:e8:ae:2c:e1:23:87:
cd:93:53:d6:0a:6e:c9:b6:9e:f7:19:15:65:b5:90:
c5:9a:ac:49:f3:e3:ac:c9:ef:14:17:33:ea:e7:e4:
a1:cb:c4:31:fb:bc:fc:cd:2b:c1:0b:54:60:9a:3c:
e6:1b:47:46:cb:94:8c:75:00:78:de:2d:d7:36:9e:
d7:c0:43:58:91:2b:40:ce:93:3e:d4:8c:1f:1d:fa:
d4:14:09:69:16:81:da:a4:cd:8c:71:63:4f:fa:5b:
54:90:66:99:1e:dc:b0:96:12:fc:fc:16:51:38:c1:
c4:1e:2a:d2:00:c6:d8:29:30:50:96:5c:8f:fc:94:
a8:fb:89:0a:21:e3:ba:ca:d4:29:b1:60:b8:26:02:
2d:f1:e8:81:07:df:d6:6a:82:08:43:78:fc:7c:19:
51:f9:94:28:60:82:37:f4:a8:85:9e:c0:bf:7a:97:
21:60:2f:45:8f:de:9d:3d:e1:64:87:76:67:a1:95:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:3C:E8:F6:EC:97:5F:B6:A7:15:DD:C8:C8:0C:45:77:A0:45:60
X509v3 Authority Key Identifier:
keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:30:ce:7e:d2:c2:e2:40:2d:d2:f7:bb:47:ab:50:46:af:07:
ce:de:af:c8:a6:6b:b6:68:b3:1a:60:1c:97:88:28:87:ca:e1:
89:31:dc:12:92:18:9d:c3:cc:ef:76:34:8f:fe:3a:e1:c2:97:
3b:29:53:fc:a5:07:5f:f6:02:f1:ea:c6:65:30:d0:4e:8b:08:
8a:b3:e6:cf:48:6f:29:8b:39:ea:16:d2:a2:06:f1:4c:22:4e:
3f:17:eb:cd:44:60:19:19:e2:cc:8f:5f:7d:3f:40:31:6f:92:
cf:0b:08:1f:f4:50:b8:72:43:68:86:39:57:fb:4c:4a:1b:a5:
e3:69:d7:c5:23:ac:d8:d5:77:4f:0d:51:b6:d8:1c:1e:8e:a8:
a2:5a:c6:fe:75:e7:e4:57:44:53:2d:b5:6f:79:0b:a4:5a:a2:
f6:a3:ce:87:bf:cd:b8:2b:f7:06:42:57:a3:19:75:d3:e6:3e:
63:6d:ec:4b:f3:b5:d6:89:6b:bd:ab:b3:88:07:ab:11:ae:b1:
2d:80:48:69:25:f1:89:91:bb:ee:cc:ea:7b:da:37:77:b2:dc:
a7:79:8c:de:29:fa:f1:ef:47:49:d7:88:14:31:24:2f:e2:77:
7b:ab:e4:10:25:0c:bf:88:48:ae:77:1e:0c:58:b7:0d:ff:f8:
c4:3b:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:51 2025 by rpki-client