Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json)
Hash identifier: a3djJjtw+6ulnHo3WlU4yqGPhHSHyTZ1ERTSDk36VFY=
Subject key identifier: 66:15:FE:AD:DF:12:EA:66:27:B1:1D:48:40:0C:25:EE:73:AF:0E:AF
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 0197CEA94240863EAC284319D1DC936AE092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
Manifest number: 05ED
Signing time: Thu 03 Jul 2025 05:01:28 +0000
Manifest this update: Thu 03 Jul 2025 05:01:28 +0000
Manifest next update: Fri 04 Jul 2025 05:01:28 +0000
Files and hashes: 1: 5RI4SZ7klYwbXOltWz9mLe7dxD8.roa (hash: GWR45JMOb96igm8o2PgndioWHr8iBdYB9L2Wx8rR7YM=)
2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: V6/52Gk8w4T46FQReddfqMpVo1ApeuXHfABYa5TBfb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:42:40:86:3e:ac:28:43:19:d1:dc:93:6a:e0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Jul 3 05:01:28 2025 GMT
Not After : Jul 4 05:01:28 2025 GMT
Subject: CN=6615feaddf12ea6627b11d48400c25ee73af0eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:fd:cb:ba:24:f1:1c:8a:9e:59:84:6b:02:
e4:bb:9f:f1:b5:65:d7:b6:c4:fe:9d:1f:77:78:dc:
d8:31:f3:19:8c:e8:06:e5:4a:58:d3:ee:08:d3:c4:
07:8f:c2:ed:1a:3d:ed:50:99:67:49:17:a2:49:1c:
ad:05:06:76:ad:c2:e0:b0:55:38:e8:92:87:d2:83:
35:ac:9d:8f:43:93:6a:ec:84:af:f5:1b:02:68:74:
78:06:a9:c5:0f:3c:61:86:7d:71:b6:4f:dc:c7:66:
b3:e2:8f:20:7f:cf:19:21:01:86:db:6d:98:54:e9:
3f:6c:49:26:91:c8:d0:3c:ec:a8:4b:2c:33:8b:f9:
3e:4f:26:ee:50:82:a5:a0:ee:8c:90:3b:c4:50:ad:
4f:0b:0d:16:0f:43:a0:30:71:01:cc:69:e4:59:da:
cb:83:c3:c6:d9:7a:25:b2:1e:84:d7:c8:53:50:14:
1d:16:fd:44:ce:fc:93:75:d8:c1:8e:27:cf:db:c5:
3e:fe:a3:ed:51:49:dd:4c:38:4f:51:da:ed:da:87:
1f:81:5e:ae:cb:2a:8c:f6:bd:d2:50:02:c8:3b:3b:
6c:a1:67:fc:c1:c9:73:4d:cb:29:64:92:bd:29:e7:
bf:2e:fe:b0:79:52:8f:1a:13:dd:20:4a:fe:cf:05:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:FE:AD:DF:12:EA:66:27:B1:1D:48:40:0C:25:EE:73:AF:0E:AF
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:42:ac:29:bd:d8:e5:be:c8:66:89:1e:25:bd:50:a1:5b:77:
25:5b:30:a6:52:8c:0d:d3:c7:f5:66:8b:d7:95:a1:da:e4:cb:
d5:0b:de:5e:ff:8d:ad:d7:4b:32:9f:88:4d:0e:de:49:a3:71:
55:ce:23:3a:7c:14:c3:34:2d:07:a9:8f:78:d5:ed:5b:43:1a:
52:b1:9a:66:8c:f6:2e:22:cd:9c:06:8d:ea:ec:18:25:21:ce:
28:dc:bb:a1:31:73:8e:b2:37:e6:a5:c9:fb:4d:aa:e8:30:9e:
a8:32:4c:52:d0:8f:e7:6d:d3:40:5d:f7:2e:79:32:e5:e5:90:
91:df:73:36:26:0f:80:e2:60:28:84:2b:46:28:d4:9c:74:89:
5b:57:9c:2e:6d:4b:15:9b:b8:c9:2e:32:c5:d8:cb:30:ab:00:
fd:69:c2:2b:89:30:40:23:f8:bf:e0:60:33:08:3a:fb:12:cc:
41:99:02:96:de:ad:a9:c4:c7:43:1d:e3:78:c5:2f:49:d7:a8:
17:f3:fc:02:67:16:bb:7e:91:75:1a:2a:77:6e:fc:f0:a6:9e:
39:c5:27:50:99:03:bd:1f:68:b1:ed:82:ee:c2:88:ee:fd:d8:
68:8d:eb:f1:a7:5b:4f:6d:e8:95:d9:23:ea:c7:3f:c4:c0:52:
6f:f9:08:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:09:59 2025 by rpki-client