Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: vttpM+D5iLNTjjKejLsg82Go3GqBUbA35lqwysxy+gw=
Subject key identifier: 40:20:D4:A2:48:5A:34:84:33:30:7C:09:0A:02:A4:6A:7D:05:6D:79
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 01974A7ACC0F886B735C3FF64F8E2D5E6278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 13:00:50 +0000
Manifest this update: Sat 07 Jun 2025 13:00:50 +0000
Manifest next update: Sun 08 Jun 2025 13:00:50 +0000
Files and hashes: 1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=)
2: bbCSbkJ69E4ZyMcMf3FWG13o9vw.roa (hash: QLK4XGB/GAetu80z0dQMeItgOqPLMqF/gY1QoYjWP2U=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: cSefHZp4QQ8XSt8EQD3LdqaFf8BkYemn8mPENuwSxEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:cc:0f:88:6b:73:5c:3f:f6:4f:8e:2d:5e:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Jun 7 13:00:50 2025 GMT
Not After : Jun 8 13:00:50 2025 GMT
Subject: CN=4020d4a2485a348433307c090a02a46a7d056d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:4f:a8:c1:5c:d3:06:3e:c0:f6:3a:8b:34:
81:09:df:16:5f:36:ab:e5:d0:39:d8:84:6e:cd:23:
bf:8c:1a:d8:1f:08:ed:c7:0f:54:1d:2a:97:9f:d4:
7a:e3:66:f6:a3:e9:3f:1f:2d:7d:90:8b:99:9d:89:
e3:72:8d:60:3d:f5:c0:5a:8a:53:31:9d:4d:b0:16:
59:62:7d:f3:c9:c9:c9:09:e1:46:eb:41:fd:f9:c6:
ee:60:d8:53:f9:4d:b6:26:a2:62:94:03:45:5d:81:
65:c1:23:e7:36:da:1e:df:87:7a:01:04:72:e1:cb:
17:af:af:05:8f:17:94:d1:bf:14:f4:0a:b6:dc:51:
0f:cc:09:f8:30:db:17:2e:14:06:a0:51:82:b8:12:
14:7e:0c:ef:bd:27:01:cf:9c:67:12:64:6c:7c:07:
7b:28:1f:5c:42:34:fd:0f:0c:17:b9:33:d5:21:9c:
92:44:09:c4:c9:eb:c1:89:c2:40:5a:ab:99:1e:26:
ee:6b:12:08:ad:33:b4:b0:1e:74:da:70:f6:0b:6f:
f2:15:09:3d:e3:12:bd:1f:1c:e4:8f:0d:c5:2a:e2:
c0:91:4f:29:0a:a9:40:22:e8:97:08:db:11:8f:b0:
ac:99:64:80:11:ba:25:93:af:3f:eb:f4:d4:9a:ee:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:20:D4:A2:48:5A:34:84:33:30:7C:09:0A:02:A4:6A:7D:05:6D:79
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:3b:0c:77:a5:01:f8:e1:fa:f9:8d:ff:7e:4a:e7:ef:98:
ad:83:26:98:a2:0a:fa:16:de:41:e2:cb:7b:98:1a:17:df:43:
85:e0:09:d1:8c:9d:3a:5c:66:0f:58:2d:be:6d:c2:7f:52:6f:
75:13:aa:fe:74:6b:ca:99:26:62:b9:f7:f6:aa:df:3d:b4:80:
56:6d:b3:d3:90:b3:5d:77:d8:cf:c7:13:8d:3a:06:2d:1a:bf:
46:04:45:8c:92:68:1c:97:73:51:c8:a0:d8:6e:cd:50:26:be:
b5:30:32:20:c5:66:e4:81:d7:df:62:7e:81:7e:25:57:9f:be:
77:0f:7d:2d:03:9c:cb:bc:3b:c7:19:33:d8:2b:18:3c:78:05:
d8:5a:a4:ef:1e:d3:c1:d3:b1:1c:43:36:84:97:14:46:1c:82:
59:4c:45:6a:1d:db:de:8e:3f:7d:6d:fb:c0:5d:fb:95:33:ce:
01:f9:2e:62:89:78:89:75:0f:4a:1f:91:42:4d:e7:a9:0c:4a:
63:5b:b4:cc:8a:a4:b3:e9:61:f9:cb:ac:34:f5:47:22:96:b2:
b6:2a:5c:3a:6a:70:2d:f9:fc:c4:9e:e0:98:9a:ff:ed:e0:d5:
ad:8b:8c:64:a6:be:66:ce:62:cd:65:de:53:19:22:8c:13:2e:
57:86:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:32 2025 by rpki-client