Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier: oZaHp6Z2LYtp15sS2sxShnv+rJ+zNZQcEpwPRfhGTwg=
Subject key identifier: 8B:69:4E:98:41:C7:05:55:48:EA:41:4F:4D:67:86:D6:DD:82:DD:3E
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 01974A7B6DB85A5DDF54D41646F720091931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:01:32 +0000
Manifest this update: Sat 07 Jun 2025 13:01:32 +0000
Manifest next update: Sun 08 Jun 2025 13:01:32 +0000
Files and hashes: 1: 4Z6xjw98hxZ8bvYUhmvQisZFvOM.roa (hash: j5d+sT1h6lzMh+Fw7CHOI9NqQUP8la0OU484/Ch6a44=)
2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: jyUqRIIXE8vFTDPAAHR/kb/HL95C1WMwbK62wuKtFaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:6d:b8:5a:5d:df:54:d4:16:46:f7:20:09:19:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Jun 7 13:01:32 2025 GMT
Not After : Jun 8 13:01:32 2025 GMT
Subject: CN=8b694e9841c7055548ea414f4d6786d6dd82dd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e6:ec:41:27:04:d4:60:c1:22:c4:03:e6:e8:
d2:eb:81:83:61:87:79:ed:bc:cc:a2:e4:ce:a3:d7:
a8:79:5a:12:f1:63:67:95:8e:56:46:06:84:3a:bb:
ea:28:20:ba:b0:c7:a9:c9:6b:39:3b:75:29:bd:7a:
f1:ea:c6:a7:45:5a:8e:20:cf:5a:77:6f:ae:c0:a5:
a5:7c:81:5d:7f:c1:28:7a:bc:a5:5d:d3:3a:6b:f4:
b0:ea:1c:8a:5e:bf:9e:09:0a:ab:0e:2c:9f:94:21:
a8:20:ce:ae:7c:19:2b:ba:a6:68:92:e3:55:82:0b:
58:bd:f4:83:37:d4:44:27:c5:4a:8f:fc:bf:d6:ca:
b9:38:01:f1:21:7a:bc:ea:d0:e7:dc:4f:c5:c3:47:
35:19:f3:07:5f:b9:f7:a7:12:d4:12:55:81:25:b6:
99:5a:45:a2:6a:fd:b2:6f:2d:d5:29:10:88:fa:b3:
e4:2d:d0:14:39:07:e6:25:1a:3c:d3:8c:65:ed:e1:
9d:17:fe:2a:e3:ae:2a:84:00:4a:92:92:d1:ff:2c:
68:85:01:31:b0:4f:a6:50:de:cc:6c:dd:ec:f2:08:
b5:67:1c:72:2c:4b:67:ea:07:87:2e:35:60:88:c2:
60:5d:b0:db:8a:5a:16:92:fd:12:9d:be:6e:b2:ee:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:69:4E:98:41:C7:05:55:48:EA:41:4F:4D:67:86:D6:DD:82:DD:3E
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:40:81:2b:4b:eb:f7:bd:f9:0a:10:a1:8c:00:5d:23:ad:22:
c7:03:11:e9:55:bd:d2:90:db:88:3f:c7:84:c9:b7:a3:05:ec:
ef:88:ad:1d:67:26:c2:4c:7e:6a:2c:03:2b:c4:6e:a5:ef:d3:
df:f4:84:27:8c:a9:04:4d:55:9f:55:27:0c:d4:05:5e:6d:ca:
92:33:15:56:35:2e:1c:ac:e0:03:88:e2:c2:70:b6:c3:1e:45:
49:73:dd:42:5a:0d:52:8f:c2:f2:05:02:f0:e6:4f:2a:0d:47:
89:81:e1:35:87:47:12:1f:ae:25:f4:4d:61:4d:3e:f2:10:79:
61:d4:91:be:d9:5b:4c:2c:4c:8d:b7:b6:78:7e:41:2c:f0:dc:
b1:32:90:1d:5f:5e:e8:d1:25:37:bd:03:d8:01:69:e8:bc:5b:
87:75:c7:a8:13:93:29:b8:3b:ae:d8:de:4b:14:85:9f:dd:29:
90:b6:e8:cb:ac:2d:f8:e4:8f:ec:4f:5a:e6:1b:65:f0:a4:38:
11:aa:c2:9f:22:6c:ff:f7:67:2e:22:f5:2e:2a:36:6c:56:87:
e3:6f:ef:0b:ad:e5:38:64:8c:ba:26:f4:96:bc:60:cb:56:b1:
cf:1d:1e:13:e0:55:87:e4:a5:2e:34:ae:b2:b4:b0:17:e7:8f:
96:c9:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:27 2025 by rpki-client