Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: eRDyZHQEnXF+xVH3NvJ0wkaAe64r0IqJPol/X3SatFk=
Subject key identifier: FD:07:32:B1:ED:DE:E7:20:0C:EB:A1:02:51:FD:59:0D:81:71:17:D2
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 01974A43B67476FA54CAE22AD05D491021A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 06D0
Signing time: Sat 07 Jun 2025 12:00:40 +0000
Manifest this update: Sat 07 Jun 2025 12:00:40 +0000
Manifest next update: Sun 08 Jun 2025 12:00:40 +0000
Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: dlT+QtjTy+OfyomoyirvhUlUwr38dtSWKGFa6AxnpVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b6:74:76:fa:54:ca:e2:2a:d0:5d:49:10:21:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Jun 7 12:00:40 2025 GMT
Not After : Jun 8 12:00:40 2025 GMT
Subject: CN=fd0732b1eddee7200ceba10251fd590d817117d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:00:ce:2e:bc:4e:58:b1:be:3a:1e:72:7b:
01:16:af:9c:b9:19:b3:5c:87:ee:7f:9d:94:17:a8:
d1:a2:ad:32:2f:24:b0:c4:92:42:50:b7:b8:56:fd:
a5:2d:3b:b3:a2:d9:23:09:37:64:0d:2d:67:80:9e:
91:70:c9:4a:a5:c1:78:1c:1e:36:3e:f4:62:5e:52:
37:d1:a2:50:01:d2:ef:27:73:0a:71:21:ac:84:c2:
b7:7b:40:06:83:b1:6a:f2:27:29:0b:b0:f2:4e:56:
e1:3b:f3:01:1a:59:b6:b6:c8:8b:37:f9:de:85:0e:
b0:c7:4e:b0:14:a7:71:aa:f0:4b:6c:68:df:2e:5d:
57:5b:50:9e:db:b2:14:30:e6:0a:ac:23:6d:65:a5:
ab:14:7f:17:8c:5b:6e:dc:ae:4c:8f:03:b8:52:99:
da:fa:65:53:68:b0:ed:63:46:4f:52:17:17:9e:05:
a2:2f:cb:68:12:76:cf:32:b8:df:14:fd:6f:f1:d0:
e9:14:5d:b9:be:37:9a:ff:52:57:4d:2c:88:ca:ab:
60:3d:f3:65:93:d6:e9:68:71:3e:df:87:0c:f2:d6:
b8:0c:bd:d7:65:ee:8a:32:d4:a4:17:10:31:cd:33:
86:c7:5c:88:af:b2:10:21:c5:84:86:67:56:55:cd:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:07:32:B1:ED:DE:E7:20:0C:EB:A1:02:51:FD:59:0D:81:71:17:D2
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b1:91:ed:4c:85:21:57:93:b6:09:15:f7:8b:99:5b:57:2b:
48:24:6d:cf:61:fb:ab:1e:37:02:3c:d0:48:86:ed:19:2b:a7:
e9:e5:b7:0c:85:e5:f5:7a:50:4a:c6:ba:a2:91:76:60:28:9f:
a1:69:25:95:0e:6d:f8:f5:87:5a:2d:16:c8:23:3e:c8:30:24:
ee:a9:72:97:44:07:3e:8b:31:f8:b6:04:c5:48:df:45:0c:ab:
c7:6e:4c:f4:3f:be:03:09:41:87:33:87:3a:8d:78:52:13:5c:
3a:ac:d4:51:78:26:e5:e1:25:7d:f2:f9:d7:c3:97:12:2b:b2:
ad:eb:bb:46:3f:63:c1:02:1b:00:9e:4a:e6:c0:fb:eb:5d:24:
96:87:22:41:b9:98:5d:1d:46:5d:31:67:bf:25:f6:7d:a8:58:
76:b7:50:7c:dc:6b:82:1f:f4:32:6b:52:fe:6c:c7:d2:f2:9c:
97:ca:a3:c5:f9:e8:7e:63:c3:db:f1:41:9e:a5:f5:0b:5a:d1:
0a:75:50:58:09:ae:42:8b:7e:58:b7:85:fa:97:5c:30:f1:ca:
ce:f7:ca:fa:bf:56:b3:e9:67:43:f3:c2:01:ba:f5:6e:5d:f1:
30:0e:b0:79:f6:0d:a4:97:a7:36:be:4a:51:69:8c:68:d9:28:
b7:fe:45:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:14:04 2025 by rpki-client