Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: l/d3B1TQoVEuQmD7SdFZOniy0FAuELk+2z+LBpkJUsM=
Subject key identifier: B0:EE:8E:E0:91:E2:AF:3B:90:1A:7A:D9:35:A4:EC:06:41:40:BA:6B
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 019749682DB2647AF10538192A6A2D2CA955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 0444
Signing time: Sat 07 Jun 2025 08:00:53 +0000
Manifest this update: Sat 07 Jun 2025 08:00:53 +0000
Manifest next update: Sun 08 Jun 2025 08:00:53 +0000
Files and hashes: 1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: YYoUMgc6ogsjhbrcaeGKh+Zahqxz1ZM6mXgezYyFN58=)
2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=)
3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=)
4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:2d:b2:64:7a:f1:05:38:19:2a:6a:2d:2c:a9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Jun 7 08:00:53 2025 GMT
Not After : Jun 8 08:00:53 2025 GMT
Subject: CN=b0ee8ee091e2af3b901a7ad935a4ec064140ba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:51:27:e4:26:08:26:a7:9c:ac:b1:3e:8c:
9f:10:2c:6d:9e:61:f8:38:41:3a:9b:67:c3:51:1b:
72:48:a8:f3:50:2e:e6:0e:14:17:71:94:6f:6e:84:
7f:6c:b6:1e:2e:b5:85:eb:99:79:67:d0:9d:d0:09:
53:37:cc:6f:90:d9:27:01:bd:99:aa:8a:e7:d2:f8:
91:9f:a6:9e:15:f9:13:bc:af:3b:15:7e:ba:1e:d4:
cb:02:ac:45:39:f4:7f:9a:93:64:1c:6d:91:26:d3:
10:02:a5:57:db:d6:db:7c:1e:1a:4d:f2:5d:f1:05:
11:89:59:34:8e:4c:67:92:a6:d3:65:33:f8:57:ab:
95:ba:01:62:33:b3:5e:99:53:fd:85:ad:ee:a1:70:
56:bf:ac:11:51:53:6b:22:30:db:63:62:37:a6:4e:
cc:37:44:78:93:31:10:6f:25:2d:22:1e:d9:4e:54:
92:de:30:34:af:3d:96:af:6e:96:8e:b4:73:f4:1a:
c0:e0:f7:b0:43:e8:26:67:1d:5b:31:cb:ef:e6:4b:
4f:bf:e5:75:ad:d9:6a:c9:0a:cb:cc:ac:a5:5e:95:
45:67:35:3e:0c:b0:a2:b9:96:06:30:0b:92:96:12:
d1:70:21:5c:28:0b:7e:63:fb:b2:09:49:70:be:6a:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EE:8E:E0:91:E2:AF:3B:90:1A:7A:D9:35:A4:EC:06:41:40:BA:6B
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:42:c9:49:e0:06:e5:02:bd:d9:69:fb:b3:23:38:65:a4:2e:
9d:de:0e:24:29:78:de:e3:3a:f7:c1:d3:79:f7:13:f2:09:d6:
8d:d0:90:7a:34:3b:76:3c:82:3f:53:42:6a:b5:ec:7e:98:63:
61:2a:76:da:91:a6:ef:6b:b3:9b:29:52:23:bc:a6:c7:7d:b8:
ea:dd:d5:0d:84:4b:ce:ec:7d:59:ea:54:4e:0b:c2:6b:9e:11:
57:3e:8a:91:59:e4:d6:ed:7d:a0:ff:fd:c5:19:b8:59:55:97:
81:a1:77:e3:57:47:4c:4b:34:20:7b:9a:cc:51:07:f2:86:d6:
f6:89:13:fb:60:29:d2:b2:da:00:ff:7b:a5:e0:09:c3:f1:c8:
4c:56:9c:10:60:ad:fc:99:ed:0e:8e:fc:b8:08:6a:8c:b5:9d:
18:0a:7c:40:b4:0e:49:66:fb:83:c9:fe:dc:87:a2:52:74:bf:
17:a7:cc:1d:67:ee:fd:23:a4:03:10:49:1a:89:76:52:46:a9:
c3:6e:6a:f0:e0:5c:12:d6:dd:a4:cb:fa:65:d3:d2:e8:45:87:
ea:e0:f5:a4:d4:25:f3:e3:8e:18:35:a7:ab:8c:41:8e:9b:01:
18:3e:9c:26:a0:be:e6:c6:e3:57:47:a7:72:2c:fd:ef:c6:c7:
9d:a5:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:13 2025 by rpki-client