Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: z+Fs+9F97apzT748OBCqWeJ+tzc4zhHUp6x/7zlgsnI=
Subject key identifier: 8C:6F:25:77:A7:64:E3:B4:C7:38:B0:27:95:42:C2:A1:29:A3:04:81
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 01975C134C86B217B0EA140A5C1061192E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 07C4
Signing time: Tue 10 Jun 2025 23:00:57 +0000
Manifest this update: Tue 10 Jun 2025 23:00:57 +0000
Manifest next update: Wed 11 Jun 2025 23:00:57 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: +tpBBGY72QcdTNk6Dryxz0iUhEffVR4X6DYkPsIEa2E=)
2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:4c:86:b2:17:b0:ea:14:0a:5c:10:61:19:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Jun 10 23:00:57 2025 GMT
Not After : Jun 11 23:00:57 2025 GMT
Subject: CN=8c6f2577a764e3b4c738b0279542c2a129a30481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:65:a0:69:96:3f:71:f9:d4:49:d8:77:13:
c0:7f:78:e8:79:e1:84:69:2b:af:15:11:84:2d:83:
42:c9:3c:63:25:d2:65:88:9b:95:80:a7:c5:59:8f:
6e:a8:d6:35:ac:3f:a7:5a:83:42:e4:73:50:1c:d2:
dc:5e:82:4f:d6:26:2b:eb:9a:ee:8b:92:19:26:f2:
aa:07:0e:91:d1:b3:11:fd:7c:9a:42:26:cb:5c:5b:
0f:40:d2:cc:1c:7f:d6:d9:db:73:79:1e:2d:c3:c9:
c1:c1:10:85:8f:2d:67:d3:c9:dc:93:a2:41:70:ee:
b0:88:b6:51:04:ae:f1:82:99:5c:c9:9d:ac:16:b0:
06:5e:cf:93:db:e8:c2:cb:c0:e9:9d:ec:7f:be:35:
fc:59:a0:e1:c6:6f:35:8f:ad:6e:03:cd:4b:61:90:
8d:4a:20:e4:28:ed:fa:d0:d7:d6:8c:92:97:7c:dc:
6d:e3:35:bf:98:1c:11:89:97:f3:7d:9a:eb:da:70:
db:e9:7a:d8:5a:98:30:f4:ef:c5:c6:59:74:74:1d:
ea:3d:1b:16:6b:13:27:73:d9:d3:43:ef:06:99:de:
c5:c4:ee:02:83:c3:58:fa:3e:30:47:21:15:27:b3:
08:18:04:50:36:8a:0d:6b:52:8d:d8:ff:9c:fd:31:
16:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6F:25:77:A7:64:E3:B4:C7:38:B0:27:95:42:C2:A1:29:A3:04:81
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:98:69:87:6a:ce:e4:17:d4:21:d1:50:b4:e7:60:d3:ae:a7:
45:76:32:89:30:0e:85:2e:31:ce:c2:04:0d:f2:be:d0:2d:03:
06:4f:7f:7d:c3:91:12:dc:fd:1e:c1:37:11:46:5d:24:f4:72:
eb:ea:d2:b1:84:25:fc:c0:5b:33:57:28:a4:d2:5c:02:80:b1:
7a:fc:dd:d5:83:f3:5a:78:73:e9:c1:9c:70:f7:e5:f1:9e:cf:
9a:73:6a:af:e7:07:7f:7b:b9:9c:8f:13:4b:9b:83:6d:b3:fe:
5b:e1:32:dd:87:e5:0c:f0:6b:5c:92:2c:06:e0:70:1f:86:a4:
8c:71:2a:dc:55:fe:5d:fd:dc:fb:58:53:5a:b8:ea:57:51:92:
f8:27:c4:90:d5:74:35:a4:2e:f1:51:f7:64:33:a8:54:57:f8:
ef:dd:94:78:3e:fb:ac:77:9d:59:99:e4:91:d1:b2:68:5d:e1:
05:96:20:ad:34:ec:0b:c2:1a:da:82:fc:33:bc:80:f5:8f:e4:
13:24:c9:70:f5:39:99:95:81:1b:f3:f2:3e:fb:53:22:f1:88:
5b:d7:cd:5e:48:86:91:f0:ce:ee:a4:70:87:dc:7e:34:b1:0f:
c0:7c:9f:90:26:5f:54:79:62:9a:ec:3b:06:29:8a:8c:43:bf:
c5:8f:5c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:37:02 2025 by rpki-client