Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: DprRpCj3KuAzSugWAQB1yuMKZN26L7yStx5Uzs7ZqBU=
Subject key identifier: C5:3A:2C:F5:1C:95:31:25:6C:9F:B7:64:29:EA:CA:E7:FA:10:90:59
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 01974A7B3A4D56BD0FB519EE9C35301A97BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 0F5B
Signing time: Sat 07 Jun 2025 13:01:19 +0000
Manifest this update: Sat 07 Jun 2025 13:01:19 +0000
Manifest next update: Sun 08 Jun 2025 13:01:19 +0000
Files and hashes: 1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: 7dWUuLqZTwCvlQtoFl5TxYMbTTfUeRC8o4iOLgy5qAk=)
3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:3a:4d:56:bd:0f:b5:19:ee:9c:35:30:1a:97:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Jun 7 13:01:19 2025 GMT
Not After : Jun 8 13:01:19 2025 GMT
Subject: CN=c53a2cf51c9531256c9fb76429eacae7fa109059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:f8:de:28:7f:32:83:a2:31:60:32:d5:55:
eb:1d:3e:4c:f4:5e:50:17:b0:8d:1b:0d:27:d9:bc:
b4:6a:a9:3e:e9:43:54:f3:6d:a3:4d:64:29:cf:dd:
69:aa:06:55:11:93:dd:ad:a8:25:ab:a1:46:0b:b6:
2d:27:ed:a3:ae:9d:e2:34:8e:b0:4b:af:c4:35:f4:
f8:a9:26:86:46:2c:89:e7:62:ad:b7:66:c4:71:64:
3a:7c:40:ed:d3:96:99:94:fe:98:b5:59:e0:76:ec:
94:64:fb:1b:f8:be:27:e0:43:8c:0d:f5:c9:c0:bb:
8b:81:b1:df:cb:e3:71:30:10:a1:11:95:78:9f:b4:
01:17:9b:bc:37:97:74:6d:0f:1d:03:fe:75:27:29:
00:f7:cf:3c:4e:01:34:e1:a5:86:ae:22:23:70:30:
8f:04:e5:9e:5b:68:4f:7f:c8:d0:4c:f8:7e:91:27:
b1:74:fc:3f:5c:ae:a1:16:3f:07:69:0a:65:92:9b:
b6:2d:15:17:fd:e3:4f:d4:d9:37:48:fa:a3:9d:a1:
f2:9e:65:c4:c8:fd:82:cb:63:51:4a:6e:03:b9:4f:
e7:a4:b0:d2:86:b2:71:8f:41:64:1e:ad:da:f0:30:
60:7e:da:a1:43:30:60:31:24:da:e8:97:5b:8c:39:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3A:2C:F5:1C:95:31:25:6C:9F:B7:64:29:EA:CA:E7:FA:10:90:59
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:60:5e:e9:8c:d7:76:31:95:b5:1b:fa:78:fa:c4:fd:77:34:
c8:f3:aa:84:3f:cc:a1:67:1b:7f:82:84:20:0d:26:91:c3:fc:
27:44:6f:89:88:aa:81:37:ba:b2:6d:41:45:1d:3a:95:b2:d3:
f3:28:49:dc:75:c1:c1:cd:be:76:57:b7:e7:84:9c:0d:05:eb:
e3:5e:8d:93:16:52:7d:8f:f0:bd:94:65:e9:7d:ad:d4:c5:42:
d0:14:fc:01:05:50:17:d6:fc:68:6d:66:f4:d9:4f:46:9e:88:
24:d4:a0:4b:6d:43:d2:4e:48:25:2f:29:1a:1e:1f:ec:9a:9b:
6f:d9:fd:63:bf:34:0f:d9:51:96:2b:74:2a:47:b4:e7:a4:55:
ca:af:b6:51:5f:a6:a2:82:ac:e1:00:df:ca:d1:92:11:e7:a5:
e5:9c:90:38:a1:72:ad:ce:04:a7:7c:4b:7d:8b:ef:bb:d6:8e:
4b:88:a3:d8:ee:ee:63:08:6e:a1:58:f4:64:59:af:db:c5:06:
b9:f7:64:4e:26:20:75:03:6e:ec:9b:a4:bc:eb:e6:9b:9d:95:
c9:99:8b:03:30:0a:6a:27:58:b0:8e:84:79:c3:b5:79:50:b2:
71:e2:fe:98:dc:f6:fe:af:ed:9d:cf:32:0b:42:ca:34:19:c5:
0b:5d:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:52 2025 by rpki-client