Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: X+SycxcPCr17q4w6LOSONScD0GyORZLADDuA1jHzXVU=
Subject key identifier: F9:1E:CD:E5:03:15:95:57:FE:BB:FA:E5:27:04:94:94:B8:C6:70:4B
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 019763CC6721866C91E7EA98E46B3CA129A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 07C8
Signing time: Thu 12 Jun 2025 11:00:29 +0000
Manifest this update: Thu 12 Jun 2025 11:00:29 +0000
Manifest next update: Fri 13 Jun 2025 11:00:29 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: bR++4cr1QXsFfmQo8gNLgeLUcGzDRQ1hRlR9uCk/IkM=)
2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:67:21:86:6c:91:e7:ea:98:e4:6b:3c:a1:29:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Jun 12 11:00:29 2025 GMT
Not After : Jun 13 11:00:29 2025 GMT
Subject: CN=f91ecde503159557febbfae527049494b8c6704b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:2d:b6:79:6f:88:f5:a8:20:da:88:04:0b:
cc:54:db:84:3e:33:3a:96:db:bb:38:b6:68:7a:9f:
75:9c:df:9c:12:2a:2b:8e:26:03:70:37:10:05:4c:
3b:f1:04:e3:9d:d7:7b:78:48:e9:4b:ff:3f:67:a3:
1d:74:64:0b:db:de:c6:ca:c8:e5:14:f9:72:70:7e:
6f:77:23:39:f5:40:8b:a5:b1:f2:4f:10:ba:f5:90:
0a:fd:9d:8d:94:86:d4:34:2f:08:27:91:b0:81:2f:
d1:52:86:d0:0a:d4:d9:79:cb:f1:3d:96:6d:6b:78:
2c:7f:fd:ce:a3:29:c6:15:71:7a:af:22:cb:7f:e4:
20:65:b5:43:bc:88:0c:9a:39:3d:76:50:b4:18:fe:
13:e1:30:8a:f3:07:26:6d:6a:52:5a:54:2a:07:7a:
57:9d:93:ab:c1:24:1e:61:25:57:86:36:25:b9:77:
91:fc:f5:c5:10:ed:98:24:b8:0f:50:c3:1d:4f:b0:
c1:ef:26:64:c3:c4:e5:13:65:27:3f:76:9d:d9:35:
4b:9a:6c:5b:9c:52:c4:a0:eb:8d:b0:df:10:e5:82:
86:e3:18:b1:b4:cf:a4:d4:4d:af:c5:74:23:67:db:
0e:77:b4:d6:8c:63:fe:53:31:d8:43:05:2b:02:70:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1E:CD:E5:03:15:95:57:FE:BB:FA:E5:27:04:94:94:B8:C6:70:4B
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fa:f2:ab:80:55:16:d7:08:ac:39:4d:87:74:d3:1d:03:4b:
30:3a:4b:2c:36:98:ee:99:c6:24:f1:21:c0:65:27:74:55:e5:
09:9a:19:7a:42:97:e0:95:a0:df:35:c7:28:9f:5b:7a:4a:70:
e6:98:8e:b2:f1:49:b3:53:f1:98:ec:d3:6b:2e:e6:94:32:8c:
62:f7:17:6f:25:f2:8c:21:53:6d:0f:d9:63:9d:c1:f0:e1:29:
da:fb:5d:7b:81:cc:79:54:94:d1:cf:ae:ed:a3:3f:91:bd:c8:
b7:8a:e6:f7:09:0d:83:dd:97:f7:fe:bf:d7:6c:3a:1d:82:97:
1c:ec:e7:14:fe:09:99:29:a2:3a:f5:72:9e:63:ba:d4:9d:9e:
72:39:3b:34:12:80:d2:be:62:e9:9a:b6:46:24:86:f2:2b:44:
fb:ff:28:b1:03:f3:ab:0b:77:6d:37:99:42:c3:ab:e7:3b:1d:
52:c0:1b:b9:10:74:f0:fe:31:07:c8:3b:71:4b:6d:a9:e3:22:
63:bf:b2:27:46:3b:4b:fa:b8:88:4b:0c:16:6e:36:98:d9:05:
8a:9b:8b:77:76:ea:bc:ec:3c:1b:7a:ae:fa:1e:69:61:ce:70:
a4:ee:30:c8:db:00:64:13:3c:bd:57:91:96:28:9b:a5:ee:b3:
fd:03:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:55:46 2025 by rpki-client