Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: yIdPyXVKDfuLk+yCo4hilp+hfOweBfbfCfrMDFyYoVc=
Subject key identifier: 0A:73:77:52:37:55:45:BB:6F:1E:D6:77:AA:3E:85:3B:27:5F:D3:68
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 01974779462F9DB776B5F1CC398A7D0142E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0974
Signing time: Fri 06 Jun 2025 23:00:19 +0000
Manifest this update: Fri 06 Jun 2025 23:00:19 +0000
Manifest next update: Sat 07 Jun 2025 23:00:19 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: OAmyeFPoiMpCrkL5Gm791O7WwMa9wiBKYLXT8yW34ds=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:46:2f:9d:b7:76:b5:f1:cc:39:8a:7d:01:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Jun 6 23:00:19 2025 GMT
Not After : Jun 7 23:00:19 2025 GMT
Subject: CN=0a737752375545bb6f1ed677aa3e853b275fd368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:0c:3e:21:bb:eb:6c:94:f4:49:a5:c5:d9:
da:7a:cc:a3:8f:5a:e8:92:03:23:c1:58:c6:4a:53:
b4:f2:e5:44:b1:a7:c9:9d:9f:b7:13:ef:65:b2:16:
d9:80:64:a1:f5:1e:11:8b:f1:4c:99:ac:48:39:5c:
1d:71:f9:b4:3f:68:c2:51:be:ed:ff:bb:f7:cf:66:
ba:6c:16:39:92:5d:0a:35:1b:0e:85:80:7b:f7:11:
fe:0c:d6:7a:e1:52:49:27:61:a9:6d:50:b3:20:89:
c7:94:0a:02:c0:ba:53:3d:9b:77:55:ea:0a:c3:00:
18:43:cc:0d:a8:e4:6d:10:78:ca:19:99:9a:41:e9:
6b:de:8c:e5:1b:1b:45:ba:4e:50:54:75:da:6d:6d:
da:bd:7e:a4:e0:2b:08:36:8f:f5:9a:20:78:60:95:
90:d5:fd:d2:56:9c:b0:64:6c:b7:c1:ca:b8:ff:90:
4c:d1:34:d6:6d:01:0a:9e:ba:6d:19:39:b3:99:c8:
cd:ac:a7:1e:17:52:f2:39:09:37:16:1e:f7:ad:70:
5a:59:af:d6:7d:7f:8c:1c:ad:59:d6:8a:91:f8:bb:
a0:28:2a:bb:c8:c1:de:d4:e6:7d:02:07:46:4b:2e:
06:9c:28:dd:f0:0d:78:28:8c:f2:b6:61:4e:ed:d0:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:73:77:52:37:55:45:BB:6F:1E:D6:77:AA:3E:85:3B:27:5F:D3:68
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a6:37:80:74:23:d8:9c:c9:e7:cf:2e:04:47:c1:19:b0:9a:
78:fc:47:7d:76:4e:e1:60:ea:ec:b2:4e:e3:62:8f:ff:dc:5f:
9a:62:f2:72:38:3a:84:16:73:78:6d:14:22:74:9a:ad:3d:62:
8c:49:8b:98:9c:44:52:9b:e0:3b:54:db:a7:17:0f:de:a1:63:
22:84:aa:8d:7f:45:93:a0:9b:1a:50:79:20:9c:5d:e8:13:76:
69:fa:34:7e:58:dc:8d:d6:c5:3d:a8:6a:e8:bb:0a:37:c0:83:
dc:25:df:ee:01:33:4c:ae:33:31:b7:8c:dc:b5:f2:68:50:7a:
d1:67:10:11:f6:ae:57:99:49:32:4b:64:f2:64:58:34:fd:10:
28:3d:7c:1d:d3:d5:db:b6:2f:3a:29:e2:6a:a9:78:87:1a:fa:
84:de:36:97:ec:04:2b:c8:0c:19:72:97:98:36:19:c1:1f:f7:
30:dd:2d:5a:22:5d:1b:cb:bd:36:25:5c:d6:8d:7e:b5:1f:fa:
54:fe:42:df:67:4d:22:41:5a:78:c1:0f:2e:71:d5:87:58:72:
59:ab:46:d2:a3:93:5e:2a:55:95:82:91:45:7a:4b:b1:a1:59:
a3:1c:9b:98:2e:24:f7:80:19:06:d3:7c:55:d8:67:7d:6c:5e:
5e:42:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:04:47 2025 by rpki-client