Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: EJLUc4Ans0/RpnEvQ+KAJRswK5Xz+uF8O4Nw7khz0E4=
Subject key identifier: B4:C6:2F:F0:E5:7D:0B:78:2E:E2:E0:F0:A9:66:7C:18:05:1B:8D:21
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019747B0D9D69CD3B5ABE5270146F33CB286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 05CA
Signing time: Sat 07 Jun 2025 00:01:01 +0000
Manifest this update: Sat 07 Jun 2025 00:01:01 +0000
Manifest next update: Sun 08 Jun 2025 00:01:01 +0000
Files and hashes: 1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: Qrt37p5PwztGNWFU6qjwoXphDoaT48t+WfuSauJKtvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:d9:d6:9c:d3:b5:ab:e5:27:01:46:f3:3c:b2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jun 7 00:01:01 2025 GMT
Not After : Jun 8 00:01:01 2025 GMT
Subject: CN=b4c62ff0e57d0b782ee2e0f0a9667c18051b8d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6b:33:01:64:49:66:fe:6d:c5:ae:4c:91:4a:
90:b4:a0:4b:4d:8d:94:e8:6b:2d:23:68:13:3d:87:
0f:39:78:a7:10:b3:29:b0:1f:2e:9c:ea:e4:37:e5:
4e:5d:ea:15:02:e0:b2:f6:a8:00:ca:d9:dd:8e:02:
63:0e:4d:4f:f9:cc:1d:e9:c4:3f:a8:5d:ce:58:c6:
22:63:42:37:37:81:2c:11:ac:ee:e0:be:23:f4:6d:
fb:c3:ea:c7:43:8b:25:d8:c3:a2:67:6f:f2:74:ad:
74:ed:05:c9:00:b5:75:ce:4c:a9:91:e0:31:f7:9d:
a7:59:15:f0:b6:5b:9a:65:df:8a:d5:9c:21:da:e3:
67:73:71:5d:3e:44:45:21:67:29:9c:a4:41:09:27:
3d:19:ad:b1:df:ae:0d:aa:15:c6:71:28:cc:f8:de:
e9:0c:d3:51:52:23:b2:a6:81:21:e4:08:f6:27:51:
fc:80:07:31:17:76:d8:79:75:03:31:73:e7:c1:47:
f5:a4:91:ed:fa:19:eb:63:25:11:25:ff:4b:61:86:
21:45:34:2d:d9:33:43:6b:8f:54:28:a4:61:54:7e:
ae:dc:12:e8:bc:31:69:a2:42:fc:12:e2:f4:7f:22:
e7:42:73:ba:33:94:c3:7f:82:8b:2d:23:98:ad:fd:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:2F:F0:E5:7D:0B:78:2E:E2:E0:F0:A9:66:7C:18:05:1B:8D:21
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:30:b4:a4:32:40:73:e9:d4:5e:0d:44:16:09:bf:2f:3f:46:
0f:f7:48:24:64:07:3d:8d:0b:59:90:64:0d:33:be:b0:3a:01:
df:e4:a4:26:9a:42:2c:a7:84:4f:05:5a:53:2c:76:60:62:b8:
86:dd:47:1f:37:2a:45:fe:c8:33:ba:c4:c5:4a:a7:5d:2c:0c:
03:0b:a9:70:43:e2:61:63:3f:dc:7e:12:2d:20:a9:d0:ca:f2:
79:14:2d:8b:a2:db:9a:61:82:03:50:3f:e0:e8:f8:42:a4:09:
b1:c8:69:53:e7:62:3d:c8:1b:7b:44:df:b9:00:1d:b0:a5:0f:
e3:96:73:e9:2b:2f:30:76:aa:79:93:32:2c:9d:df:02:87:df:
e6:a0:e0:3f:73:3a:4f:b9:e1:cf:90:eb:d7:d9:22:2b:56:35:
2e:d6:71:9f:33:74:2c:95:32:ff:ac:2b:7d:65:b4:14:0b:30:
78:a3:f1:19:37:7e:95:d2:ac:9a:9b:a0:24:4f:78:30:77:74:
97:1d:21:e0:6e:68:3c:ed:7c:51:82:82:aa:d7:ab:6f:30:4a:
aa:38:18:f9:b0:0c:5e:a7:b0:74:33:48:d5:70:d2:aa:0a:32:
75:79:3a:bc:dd:c7:13:ec:f5:3e:ed:84:60:1c:7d:ee:3b:84:
fc:da:c6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:35:48 2025 by rpki-client