Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: KTxtpR5zGHrLaMS8Y/yhucJZG6DfEz/lOSON0NGP3q0=
Subject key identifier: D7:02:C4:A6:06:8B:4B:53:2E:E7:16:FD:3D:CA:5E:AA:92:E4:A0:A8
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019749D63B66F9C221E4B3A5406EEE3825A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:01:06 +0000
Manifest this update: Sat 07 Jun 2025 10:01:06 +0000
Manifest next update: Sun 08 Jun 2025 10:01:06 +0000
Files and hashes: 1: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (hash: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=)
2: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: VwvENd1V9CnST1e9SaCrPGmeiJyjHaBdwyB9Oqq1Wiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:3b:66:f9:c2:21:e4:b3:a5:40:6e:ee:38:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jun 7 10:01:06 2025 GMT
Not After : Jun 8 10:01:06 2025 GMT
Subject: CN=d702c4a6068b4b532ee716fd3dca5eaa92e4a0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:0a:c9:07:eb:5d:ea:ee:f9:59:cf:dc:d0:
d9:2d:62:a9:a3:14:32:45:e5:4b:6c:93:0d:6f:18:
83:ab:05:eb:79:23:a8:e3:c8:d0:1d:71:2a:25:b2:
74:20:05:2b:e3:b6:a1:49:12:25:80:29:57:46:19:
31:7d:d9:9d:40:1a:aa:dc:4f:a2:2f:43:83:bc:90:
f4:12:a6:8b:4c:a7:6a:6a:e0:fb:34:d4:88:c1:c2:
a7:75:8d:25:3a:91:9e:3b:a1:05:e7:7d:4d:6b:bf:
ed:78:26:90:f1:db:a1:a3:fc:bf:15:71:cf:ae:91:
ca:35:ed:7e:b3:aa:8c:b0:a5:7e:56:fb:67:db:1b:
77:17:5e:67:e0:d6:8b:72:83:1d:c4:64:14:ad:7a:
11:ef:fd:97:1e:06:2f:c7:69:1b:03:c2:40:19:24:
fc:1c:27:e4:25:9b:00:8a:84:02:d4:eb:b6:67:57:
7d:b0:0f:47:ef:ac:e2:6b:c1:af:70:ea:33:ba:58:
93:9a:ee:34:fe:64:a0:c2:a8:ac:5a:32:1d:af:eb:
c8:4f:d4:b3:e1:90:ce:87:15:20:e4:cb:ad:23:3d:
08:04:bd:06:e1:e4:00:38:93:6e:02:05:8d:60:36:
cd:4b:b5:b9:09:e0:d6:01:60:6b:e8:5c:03:c5:8b:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:02:C4:A6:06:8B:4B:53:2E:E7:16:FD:3D:CA:5E:AA:92:E4:A0:A8
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:11:39:92:d6:2b:da:05:16:d8:d4:a7:69:f9:56:27:f2:57:
ee:ff:fe:19:47:f0:6f:84:3d:00:e5:28:12:f3:1c:b8:23:a6:
e5:a0:9b:9d:10:9d:e5:f8:16:63:b4:c2:d6:b8:7d:24:f5:f9:
f9:aa:a6:53:ac:4e:f7:2e:53:a9:ed:ec:9c:08:eb:f5:25:15:
4e:26:1f:ae:5c:0e:9e:ca:23:df:3e:0b:6c:77:0c:42:1c:aa:
6b:c6:be:95:0c:3f:ca:f0:63:e1:eb:5a:9f:a9:84:4c:ac:fe:
5d:5c:9d:34:7e:d7:da:33:b1:c1:f6:14:92:9c:0e:00:d6:0f:
10:8a:15:e6:8d:ac:37:fd:ad:96:64:2e:2e:83:91:01:6d:cb:
34:2a:74:1e:7c:25:c5:dd:44:f7:18:e3:f2:d1:8f:f4:68:c0:
66:43:8c:3e:00:d5:ab:09:23:d2:22:6e:4b:7d:c2:9e:52:ce:
81:2e:a8:c7:39:f9:17:21:f8:ec:10:a0:6c:86:5d:17:cb:06:
95:0f:98:67:ac:28:b4:64:b5:b1:87:e1:e6:c8:8b:3f:fd:ce:
6d:cb:70:cf:35:e1:bb:5f:bd:3f:b4:3f:65:ca:6f:8a:2f:6d:
63:dc:73:94:54:b4:2a:8a:31:08:ff:0a:95:85:d2:8d:cb:c5:
8f:75:e1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:44 2025 by rpki-client