Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier: ppHWvni/pg/fiihjGu3PNbzuuMY7tL3zHq6soxDNpnk=
Subject key identifier: 90:B8:27:8E:19:3B:F0:9C:83:5D:F7:99:37:BF:55:A9:DC:30:BB:0A
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial: 01974AE829F6580E4351C0EB6BD2828E699B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number: 0B6E
Signing time: Sat 07 Jun 2025 15:00:18 +0000
Manifest this update: Sat 07 Jun 2025 15:00:18 +0000
Manifest next update: Sun 08 Jun 2025 15:00:18 +0000
Files and hashes: 1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: Q7Qq1D9vPrkpOVFr8SFWIAXQzsMHuwmX0HDucOpv/dk=)
2: mxOxKrBmnmPClr9Kc96iEdW6XUE.roa (hash: UbZRUNNa6gB9j1h+WjL/FTz+dVPKNCXmn8kcP5ajisc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:29:f6:58:0e:43:51:c0:eb:6b:d2:82:8e:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Validity
Not Before: Jun 7 15:00:18 2025 GMT
Not After : Jun 8 15:00:18 2025 GMT
Subject: CN=90b8278e193bf09c835df79937bf55a9dc30bb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:04:39:6d:c4:06:eb:d2:7c:6e:b6:45:68:
b7:5c:59:64:fb:85:97:9b:86:9b:dc:75:75:72:0e:
c7:a4:66:10:01:d1:f3:f3:b6:e1:a9:66:14:ca:5b:
d2:7a:88:7a:4d:28:b6:c8:83:60:67:07:ac:7e:4d:
2f:c6:31:13:cd:18:51:92:c1:53:76:63:92:c0:68:
51:b5:dd:fc:cb:e7:32:b4:06:24:29:cf:6b:fa:b3:
48:ac:83:ff:24:7e:09:9b:83:cd:b1:31:61:cf:7e:
aa:de:39:f4:b4:4a:7a:35:65:f9:d1:22:1c:64:b1:
cf:12:3a:b8:6a:3f:f2:7c:0c:97:6b:95:88:22:17:
e1:c2:8a:db:06:55:98:08:04:d0:66:4b:a8:a9:cb:
1a:31:55:a2:2a:79:8b:10:d9:2b:a0:e9:a0:2e:b4:
2a:37:86:26:9e:bb:83:9f:92:68:14:d9:03:11:0c:
af:22:e6:31:34:41:c3:24:2e:41:85:b0:3d:48:bc:
16:cc:8c:c5:f6:a6:e2:1c:80:3c:44:78:9f:2f:57:
c5:97:a1:98:d3:39:f0:ae:72:ab:3c:f2:45:f1:5e:
32:49:7a:66:25:f1:76:3e:fc:4c:87:1c:eb:f7:20:
2c:18:c5:58:a6:ea:82:47:dc:d6:55:bb:03:47:4b:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B8:27:8E:19:3B:F0:9C:83:5D:F7:99:37:BF:55:A9:DC:30:BB:0A
X509v3 Authority Key Identifier:
keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:de:59:d7:5f:1d:63:8a:e1:b6:b9:79:64:13:2f:9c:d0:2f:
b2:45:86:d5:0c:bd:cc:f6:c0:b0:2c:46:14:d9:58:53:89:70:
f4:12:de:df:a2:0b:f3:f1:03:1b:3a:24:f1:7b:14:30:e1:b3:
67:16:9c:99:65:9b:ae:ac:10:b6:8f:c4:dc:51:d5:7d:ef:f1:
e0:ce:bd:17:05:e0:ec:be:2e:92:fc:96:ca:7d:8f:9a:ef:99:
41:90:99:0f:3b:48:97:a2:c6:a1:de:3c:e7:bc:4d:71:01:c5:
62:ec:0c:bc:05:18:ba:43:33:3f:76:e9:ed:e0:1c:fa:ac:20:
91:17:d3:86:f1:91:e5:7b:03:91:3b:22:fb:75:ff:3f:3f:f1:
69:fa:b9:da:da:33:06:59:8d:f1:e3:2d:ca:70:91:95:0a:22:
6f:b7:d1:f6:1f:8d:ae:df:2f:db:96:dc:f0:84:7c:13:6e:24:
d0:69:0a:c0:fc:33:17:28:99:72:03:56:bb:87:8a:0e:5b:18:
bb:e6:2e:f4:fd:e2:05:8b:f9:2e:27:a1:18:6f:38:48:56:a4:
6a:8a:9f:13:b5:28:75:08:83:a1:5f:66:f3:52:58:c9:8f:6c:
b4:20:99:52:21:e4:35:44:aa:41:79:81:e6:c3:97:47:4f:96:
58:7c:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:26:10 2025 by rpki-client