Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: JaG5Gv8Zu7a2SKenGIvV64B187vivMf/dgWcyEg27LE=
Subject key identifier: 15:B6:0C:71:C0:CC:21:85:EB:9D:F9:B3:64:FD:6D:86:CF:30:6F:01
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 019746D494B10648C9B71489AA5FEF65EAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 04A3
Signing time: Fri 06 Jun 2025 20:00:26 +0000
Manifest this update: Fri 06 Jun 2025 20:00:26 +0000
Manifest next update: Sat 07 Jun 2025 20:00:26 +0000
Files and hashes: 1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: b5B8fYAeZ6T4HzBVu5P2cVQ09khmTn9VqgD9OhNUgfk=)
2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:94:b1:06:48:c9:b7:14:89:aa:5f:ef:65:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Jun 6 20:00:26 2025 GMT
Not After : Jun 7 20:00:26 2025 GMT
Subject: CN=15b60c71c0cc2185eb9df9b364fd6d86cf306f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:d0:d1:e2:17:73:6c:10:ca:25:9f:a4:aa:
ee:72:e3:49:e7:0d:cb:4c:f9:ed:db:8a:5e:1c:f0:
48:93:bf:c8:c2:d7:99:aa:ad:64:80:45:b2:f2:75:
52:d7:de:0a:7f:53:0a:e6:17:79:80:16:fa:a9:11:
f5:8e:d5:64:e4:14:af:fa:94:77:8f:8a:16:49:71:
8a:7e:25:71:77:1b:79:84:ea:b6:00:a9:7b:d1:fd:
9a:cb:cf:95:10:93:bd:c4:39:90:2a:85:84:a8:65:
47:c0:86:54:c9:80:a8:77:f7:a9:f2:04:b0:d3:24:
d5:cf:22:96:7d:e0:37:9d:26:9b:f4:75:07:69:c7:
fd:6b:89:1d:37:5d:18:19:d6:bd:89:c6:0c:2f:34:
3c:e7:5a:d8:f4:49:29:57:b8:c0:49:8e:66:ed:6c:
97:b1:75:24:2f:98:45:b1:0e:e0:53:94:40:d1:48:
3e:75:1d:cf:83:3a:fe:0c:5b:0d:fc:8e:7a:fb:f6:
bd:23:8c:23:2f:57:41:b8:16:18:3b:d2:51:0f:74:
9d:2f:d7:70:b9:09:e1:7d:f2:ef:2d:f6:a5:84:2b:
62:09:ec:d5:11:3b:6f:89:5a:74:4e:06:d7:c0:a8:
39:58:68:07:26:4f:8c:d8:1c:4f:bc:5e:bc:8a:65:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B6:0C:71:C0:CC:21:85:EB:9D:F9:B3:64:FD:6D:86:CF:30:6F:01
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:53:0a:31:ce:dd:38:a1:50:bd:73:0d:30:0d:92:56:c4:2a:
50:15:7f:5b:46:a1:f8:42:5b:30:74:37:aa:43:83:ac:4c:31:
c7:c2:cc:c3:7c:cf:7f:77:76:72:3c:c9:3c:4e:9d:b2:07:d1:
23:d5:07:af:1b:4f:ae:c0:a7:b9:ae:e3:45:75:3b:1e:11:0e:
a6:a7:ab:cc:c4:30:c1:64:72:83:98:f3:bd:12:4c:b3:f7:35:
89:f1:7b:a0:fd:38:73:f9:b2:29:be:12:1c:ee:52:58:97:0a:
6b:6f:92:2e:f2:56:4c:e7:1a:61:2a:c1:3f:bb:bf:62:1c:03:
fa:fb:b9:9d:22:88:62:91:ba:8d:b8:d4:d0:30:ff:23:e8:9b:
c7:db:53:06:54:ad:ba:c8:7b:cb:65:9d:cb:03:c8:54:4d:15:
78:4a:f2:a6:21:03:24:53:3b:b6:d6:e2:14:50:d4:11:99:48:
87:aa:39:f9:55:24:cd:13:14:d7:17:bf:63:8b:ee:d9:70:cd:
36:17:24:38:52:9e:5f:69:0b:02:2b:03:cd:07:9e:f5:82:df:
f7:4c:b6:1e:0f:0d:b6:11:ce:ea:52:11:b6:62:de:16:bf:f4:
25:76:4e:52:87:4c:a9:f5:c5:12:d7:dc:9a:81:66:85:81:0f:
7c:7c:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:13 2025 by rpki-client