Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: teswmgM2l5x0BJDPyFqXYiB90wCeQokyq+RX0FXArWU=
Subject key identifier: 51:EC:0E:4E:C5:A3:C4:68:D2:D5:6F:AB:06:7A:80:D6:21:E5:A8:58
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 01974AE8D69169A1C602105255B2AD1C2B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 014A
Signing time: Sat 07 Jun 2025 15:01:02 +0000
Manifest this update: Sat 07 Jun 2025 15:01:02 +0000
Manifest next update: Sun 08 Jun 2025 15:01:02 +0000
Files and hashes: 1: E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (hash: TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=)
2: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: 4sUoqUGpfEJQuePDgdGrvU2rB57PODKS+YFs7sE6Ys0=)
3: jSWGRDdKL-HTUETX8py0S4BUPnw.roa (hash: duy/YDBoOJtBJ6yTq6z5J9MLnvFlUwnH0+KkHirH4Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:d6:91:69:a1:c6:02:10:52:55:b2:ad:1c:2b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Jun 7 15:01:02 2025 GMT
Not After : Jun 8 15:01:02 2025 GMT
Subject: CN=51ec0e4ec5a3c468d2d56fab067a80d621e5a858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:97:1c:55:cd:7b:1f:54:bd:c5:31:f3:82:
66:aa:6d:a0:e8:70:8c:80:93:05:2e:c9:a1:5a:90:
04:43:cf:17:15:c8:bb:17:82:9d:73:44:97:63:c5:
9f:62:8c:9a:e2:27:5b:f1:50:c3:95:59:32:53:bc:
99:95:11:e1:07:fd:61:35:91:7d:9c:ac:25:07:d2:
88:f6:8f:0a:ad:42:b0:5f:13:0a:e6:c2:c7:72:6b:
a6:f4:4d:81:53:e7:36:70:90:24:31:7e:32:0a:aa:
c1:4a:d0:a1:22:04:7d:2d:c7:5e:6a:92:17:7a:c4:
22:07:b1:53:dd:1b:21:05:2b:3e:87:74:84:83:23:
6d:77:ca:f9:bd:5b:16:75:80:c2:53:9b:4c:04:d7:
a5:e0:47:7e:bf:ba:5b:9c:7e:c0:4f:d6:24:37:2c:
66:d4:c6:d4:ad:a3:cf:d2:20:8f:05:dd:66:b0:e8:
96:6c:07:e2:ce:82:94:f9:73:a5:44:a9:0e:cd:45:
37:e9:a4:a6:59:a7:3c:f5:71:ef:0d:4f:f2:f0:66:
a6:57:66:f2:b0:8d:c9:77:c2:40:7c:64:29:0a:56:
aa:81:f2:3c:f8:ed:f2:c1:68:e1:48:1c:1f:15:c3:
dd:9f:a7:95:b6:20:bd:6b:21:e9:d5:25:fc:04:22:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:0E:4E:C5:A3:C4:68:D2:D5:6F:AB:06:7A:80:D6:21:E5:A8:58
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:79:16:e7:c5:83:55:d1:d9:fb:00:a9:90:f5:5c:9b:63:49:
05:9a:b5:e9:cc:6e:08:9d:98:b6:db:6b:c4:ed:ce:36:24:06:
d5:67:a4:f3:0b:69:c5:a9:12:0c:a6:0a:90:68:80:89:d5:f3:
e4:fa:f8:46:3c:13:87:62:ee:92:fd:8b:16:42:52:b5:76:bb:
56:de:a2:f1:81:36:2b:98:9c:c1:27:e3:a4:e3:c7:cd:21:13:
66:18:e4:95:e3:82:44:6f:e0:91:38:1b:83:b5:d0:89:88:ee:
da:2d:92:26:91:fb:1b:b6:ac:33:72:ee:5f:a0:8a:23:19:4a:
f3:c4:83:56:67:29:4a:cc:06:01:af:c0:48:70:d9:5c:8c:ca:
70:07:09:e5:32:2c:ed:1e:fc:90:3e:19:65:86:08:ef:1a:f1:
72:53:34:c6:5e:2c:69:c5:ea:61:26:56:b2:0d:31:e4:cd:a9:
84:1c:f7:c7:23:b8:c4:db:dc:9a:00:24:30:d6:e8:22:2a:64:
0c:f0:58:3b:51:bd:3e:70:87:e2:ff:df:f1:54:41:16:df:63:
8c:36:48:25:4c:5c:56:e2:8e:c0:02:49:db:26:fc:c4:2d:52:
d6:f2:22:2e:9f:eb:ec:58:0e:29:ca:7c:fc:72:45:57:b6:c5:
91:55:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:31 2025 by rpki-client