Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: SWWS36sM3dcEi3mQO/VYuYRRSwuOrumGjWn2H48EG4M=
Subject key identifier: 74:62:F4:AA:55:51:82:47:48:9F:57:E0:49:10:21:3E:13:F0:C9:2D
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 01974779D73604ACC8743D7424DEAA1EB8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 0257
Signing time: Fri 06 Jun 2025 23:00:56 +0000
Manifest this update: Fri 06 Jun 2025 23:00:56 +0000
Manifest next update: Sat 07 Jun 2025 23:00:56 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: jtE8GzwT4kk158SN6ikizk8NcDzUu73F5Dm4mFz2MhA=)
2: vlEdWKuRTS0cD9RNJ4tmPb-bgsQ.roa (hash: Y+o+UFhPbkj+17eC+0DjnhM2iiXi4bO98feJGgrh1ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:d7:36:04:ac:c8:74:3d:74:24:de:aa:1e:b8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Jun 6 23:00:56 2025 GMT
Not After : Jun 7 23:00:56 2025 GMT
Subject: CN=7462f4aa55518247489f57e04910213e13f0c92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:23:66:dc:f8:e6:05:f6:89:75:9d:00:78:
bc:e0:bf:3e:60:25:0d:55:0e:50:6d:f7:fa:35:00:
8f:8f:e8:5a:bf:cb:f2:55:53:56:31:b1:a3:92:cf:
b9:e4:92:10:f1:33:2d:87:4b:49:0b:e2:9c:73:10:
5f:35:25:2a:df:13:3a:aa:88:b0:cb:c6:f3:35:86:
69:67:37:68:97:2c:8f:ae:e9:dd:de:fd:fe:e7:b7:
c9:69:bf:70:4c:2e:f0:ae:d3:19:14:79:99:d3:b9:
4d:15:ae:55:9e:93:6d:a8:1a:aa:5e:21:c6:e7:36:
a7:58:9b:d3:4b:6d:e4:5e:83:94:f2:14:68:61:60:
64:45:96:d6:db:71:8a:65:2c:87:e2:31:76:1a:a3:
dd:29:3b:14:9c:a9:3c:27:b6:3b:51:ae:42:92:de:
76:d2:cb:57:05:0a:27:8a:10:b8:4f:db:7d:57:ef:
e9:18:1b:c5:98:39:69:76:22:93:42:11:03:0e:66:
c7:f9:52:5f:9e:62:67:48:f2:08:2e:01:39:f3:dc:
03:5a:c5:3b:f3:39:fb:2a:25:b4:7a:5a:3f:72:29:
ba:93:14:e6:a3:52:52:6d:32:41:e9:fa:ba:e2:d7:
fc:a4:59:06:5b:e4:70:96:29:f5:db:9f:28:dd:29:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:F4:AA:55:51:82:47:48:9F:57:E0:49:10:21:3E:13:F0:C9:2D
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a5:c8:fe:dd:7e:cd:4b:2b:14:6d:2b:a9:0c:2c:84:36:50:
a0:9d:91:e4:80:23:f8:ba:61:13:d5:06:27:71:0b:1b:34:48:
3a:74:7e:ee:2a:33:f7:4e:ed:2c:30:03:41:dc:50:98:81:4d:
4d:69:6f:e7:80:01:45:c9:b2:fe:4d:0d:db:52:b2:83:85:31:
c6:83:f0:79:25:e3:3a:5b:a1:74:3b:fd:14:75:c5:8c:a6:b0:
2e:b0:34:64:6e:3f:74:2a:a3:ef:b6:03:d9:dc:a8:59:8c:fd:
6b:c3:bd:74:4c:c8:1f:f0:96:96:8d:2e:1b:78:a4:5d:50:65:
5b:55:17:05:ca:dd:c0:d6:78:7a:92:6e:b3:a0:76:73:6a:b8:
0b:44:c8:10:5a:24:5c:bf:8a:ca:0d:b1:29:28:3b:ef:95:e0:
0d:2e:4a:20:44:63:b8:a0:1f:41:09:10:65:ab:4e:84:89:62:
6a:67:03:a5:21:db:6b:59:c7:35:7f:be:51:ac:6d:69:e2:11:
77:b2:b2:3f:e3:4b:9d:a1:2f:be:ac:fe:d3:ff:8f:da:6b:dc:
14:0d:cd:48:96:1b:cb:96:e9:a8:95:b3:2f:98:f7:86:36:c5:
be:e1:5e:cb:77:4c:1a:6c:d8:db:49:48:dd:23:d1:c7:26:1b:
51:8c:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:42 2025 by rpki-client