Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: LTiVEMVMZDOTLuDxfwETotYte1JV7QEEZI2RS22nQs4=
Subject key identifier: F9:8E:2F:08:F5:BF:CE:6B:14:82:F5:72:A6:AA:4B:9A:E7:F2:43:39
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 019748F9DE97F0B09CF0AB0431B812E56C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0B85
Signing time: Sat 07 Jun 2025 06:00:24 +0000
Manifest this update: Sat 07 Jun 2025 06:00:24 +0000
Manifest next update: Sun 08 Jun 2025 06:00:24 +0000
Files and hashes: 1: Q_PyNzOCLo2V_8ZRI_IgL5-pqQ0.roa (hash: xZL3dvgx52JKq0c82ndChebXnYRXvZQcyI/g63uh0f4=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: eRSCZ82GQwlikzZQlE9BKAJP6qoHmxy1UOPtM54/jyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:de:97:f0:b0:9c:f0:ab:04:31:b8:12:e5:6c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Jun 7 06:00:24 2025 GMT
Not After : Jun 8 06:00:24 2025 GMT
Subject: CN=f98e2f08f5bfce6b1482f572a6aa4b9ae7f24339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:f0:56:d4:fe:ac:14:72:68:00:33:c2:f9:
e2:93:7a:e2:c1:31:fc:78:a7:98:33:b1:a6:a2:54:
b3:36:da:10:35:a4:9c:e5:25:66:5e:0f:66:ba:13:
a8:79:a6:02:75:97:46:0d:cc:40:85:f1:94:f8:5c:
7a:b3:09:b4:16:39:45:47:e0:89:47:57:33:08:fa:
53:7b:ef:e7:86:71:ce:22:64:0f:81:68:d1:f4:94:
45:e0:d7:13:f5:06:89:8b:29:3a:56:ac:40:78:50:
2e:42:06:a3:6a:2d:da:6e:ec:5a:be:4b:11:0a:3f:
5d:47:33:ea:0c:fb:95:05:e8:a8:fc:4b:89:a3:a6:
58:ea:7d:76:c9:b2:af:e5:32:88:ee:04:be:b9:60:
d1:d1:79:c1:53:c8:c8:29:ee:5d:ab:68:60:f9:84:
cd:1e:05:03:ae:f6:1f:1a:00:3d:27:53:00:6d:ec:
56:62:f9:f3:70:33:a9:52:bd:5d:94:80:d1:f8:9f:
01:c3:97:d4:72:1d:59:d0:bc:1d:83:fc:9a:bc:e7:
a9:89:1d:97:e7:62:05:87:e7:90:c5:d4:ca:e1:0f:
52:15:ef:26:05:0b:91:a1:b1:e3:5e:2f:99:3e:19:
28:a6:59:cf:f2:a8:b3:66:1d:f2:b7:9c:5b:73:8a:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:2F:08:F5:BF:CE:6B:14:82:F5:72:A6:AA:4B:9A:E7:F2:43:39
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5d:3f:18:c5:a0:81:9c:60:82:eb:5d:fd:05:13:f9:e3:db:
07:1e:36:37:10:0c:05:2e:6d:24:22:4b:c2:bd:8f:96:56:fb:
32:8e:9e:ed:f7:c0:6c:2f:8e:63:e1:fe:41:d0:2e:c9:e4:c5:
98:0f:c6:fa:8c:be:77:34:af:c8:bb:8c:a2:d3:55:ad:57:4a:
78:6e:b8:21:40:c5:ef:18:de:aa:e2:1c:26:dd:e2:e9:a8:06:
65:61:21:10:7a:17:be:71:f5:2c:d5:da:bf:4e:91:d4:71:f0:
00:f9:55:53:8f:48:60:23:ca:6f:76:20:50:6a:36:3d:be:d3:
54:98:24:25:77:74:c4:38:62:32:67:47:f6:72:7b:6a:f2:db:
46:90:db:be:30:f7:97:20:7c:dc:88:0b:4a:9d:f5:57:ba:59:
57:d4:20:90:40:7f:e5:65:06:8b:48:bf:a6:16:8c:6b:03:2c:
36:0c:f8:52:6c:f5:38:7c:f1:b8:2f:4e:6b:04:1f:81:17:58:
b7:02:13:b1:36:f4:8a:d4:3f:96:42:ef:f3:0a:0d:ac:a0:d1:
f3:3c:6d:76:a9:71:b5:1f:88:ba:ec:e9:4b:f5:5e:6a:fa:31:
84:70:46:66:bc:f0:7c:20:d1:ea:f1:a8:bf:d7:4d:0b:88:2c:
ee:ac:2e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:22:55 2025 by rpki-client