Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: QLGBk5chqyyu0YBPqnltAwszZjPaIk6rMN5AN3OjfL8=
Subject key identifier: AB:A6:50:E6:CF:36:28:A5:0C:3F:43:AB:31:43:03:41:C6:8C:48:7A
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 01974DB27FB8631052A8F3D60D75FDBF9C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 0612
Signing time: Sun 08 Jun 2025 04:00:33 +0000
Manifest this update: Sun 08 Jun 2025 04:00:33 +0000
Manifest next update: Mon 09 Jun 2025 04:00:33 +0000
Files and hashes: 1: LeauqIgA77Guz7NTqsqggxkb3OM.roa (hash: kn3sF5o0HTuBHvbByMR9Dn62yBg3LuqPb4rgaycQgmQ=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: febtL2Dg1lcHxEnapszjaytEhNvEQrE60zypNSMvmZA=)
3: tb7b-pMyLuFzVUUaYd4D0tYvrVM.roa (hash: kplquuozq7s5NkeQhsxsJ048qcIZPUbW30XHKIIbIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:7f:b8:63:10:52:a8:f3:d6:0d:75:fd:bf:9c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Jun 8 04:00:33 2025 GMT
Not After : Jun 9 04:00:33 2025 GMT
Subject: CN=aba650e6cf3628a50c3f43ab31430341c68c487a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:31:07:a4:17:62:35:e6:45:f6:4a:8f:98:
7f:af:f4:cb:4d:35:74:a9:6b:a4:5d:75:54:72:5a:
95:9e:bc:60:3a:ae:59:a9:00:42:26:c3:c3:7b:39:
23:0d:ee:a0:99:38:f7:fa:52:50:30:a8:f2:f5:25:
bc:b0:8e:b0:bf:6d:39:8b:b8:21:8c:3d:78:aa:04:
8a:75:f0:14:ab:e5:ed:ad:ad:a9:f3:cd:81:d8:3a:
ff:55:31:bd:b0:53:ec:96:c1:c2:91:1a:86:7f:0b:
20:8d:25:a5:40:10:b3:9d:89:94:04:ce:9c:26:c9:
53:0c:42:b7:42:1f:c7:ce:c6:0e:c5:9a:8d:03:b6:
57:4d:80:b3:4b:b5:4a:36:23:17:b6:67:da:79:7e:
ba:8f:be:62:58:d3:8c:ae:7d:76:6a:81:5d:c5:07:
3f:5c:62:fd:44:8c:64:b8:87:a8:83:c6:df:64:31:
e2:74:3d:4f:47:22:43:dd:7a:79:cf:00:60:dc:ea:
34:c7:4e:cb:f0:14:6d:19:4c:79:96:2f:72:8b:4a:
0a:5e:63:b3:95:c9:70:dd:12:27:fa:1b:db:af:46:
09:1f:c9:f8:14:3e:f3:e0:ba:bb:93:8d:db:4d:43:
33:d5:67:2e:56:e8:6a:3d:0e:91:0b:66:7a:7c:42:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A6:50:E6:CF:36:28:A5:0C:3F:43:AB:31:43:03:41:C6:8C:48:7A
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:39:4d:ce:d9:2a:88:64:d0:4c:3d:fb:e1:18:d1:0c:9f:ff:
7f:ca:7f:fe:f4:34:6b:ac:cd:c4:d3:03:e5:a3:0f:2f:62:f7:
93:f7:f1:8b:0b:55:90:b1:ed:86:e9:5b:9b:73:65:7d:a5:48:
b4:52:31:7d:d3:82:8c:f3:d1:29:cd:e2:6d:9b:06:04:94:12:
f9:36:fe:24:72:ec:6b:a4:e0:e0:57:74:fa:4d:79:c6:85:fd:
e2:0c:56:d3:4c:28:c1:6e:2a:63:5b:df:3f:10:d4:4f:7e:4b:
57:85:07:3f:2e:f3:9e:bf:91:85:96:e3:2e:f7:22:b1:e7:34:
d4:6c:54:fb:4f:7d:ab:9d:dc:65:12:87:c0:cf:b5:b1:80:6f:
57:d4:f5:0e:ab:78:2f:04:6a:a9:d7:ba:fb:de:c1:65:59:d1:
d7:d5:41:7a:0d:36:97:24:ba:ba:ed:f3:5f:3c:a6:e4:0f:35:
e2:76:07:3a:0e:2b:2b:f0:5b:52:1b:08:d4:5f:b0:9a:55:52:
c0:34:70:3f:19:1c:5a:5c:64:1d:3b:eb:1b:83:75:54:77:c6:
cc:de:05:b0:9b:23:5d:ee:09:49:32:c4:23:01:8a:ca:7d:2c:
ab:0a:6f:4b:11:0b:1d:14:49:fe:17:4b:09:8d:a9:cb:3c:e2:
7a:93:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:32:20 2025 by rpki-client