Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: aujISedchbfo3lu+/InA+uFiA9NDgvYbA57O/L+jRBQ=
Subject key identifier: 30:40:81:C8:A0:E4:45:4A:A6:0A:B4:D5:EA:F1:5C:56:48:0A:71:10
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 01974D0E1955B407DCF4481E772E39FDE12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 01:00:58 +0000
Manifest this update: Sun 08 Jun 2025 01:00:58 +0000
Manifest next update: Mon 09 Jun 2025 01:00:58 +0000
Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=)
2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=)
3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: AuY6/izXQLhDerzKfI9NIZX/hpBirGvIiUvFOIFIeAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:19:55:b4:07:dc:f4:48:1e:77:2e:39:fd:e1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Jun 8 01:00:58 2025 GMT
Not After : Jun 9 01:00:58 2025 GMT
Subject: CN=304081c8a0e4454aa60ab4d5eaf15c56480a7110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:43:ab:c0:46:f9:33:fe:c9:9e:04:3b:e2:
3b:a1:6c:74:6b:2c:d6:17:64:0e:5e:29:82:3e:ed:
27:06:0d:2e:a0:45:ed:73:24:f8:ba:51:b8:2e:d4:
e5:3e:9c:7b:48:75:ac:36:61:bc:2a:c3:19:4c:5c:
c2:36:35:ee:54:ed:39:56:91:1e:c1:3b:88:1d:4d:
64:c6:31:15:29:98:a1:75:2d:71:22:17:7e:01:26:
80:3b:69:a1:01:f4:a1:7d:c5:63:0f:aa:0a:57:16:
f9:19:d8:cd:03:63:a3:dc:c7:69:47:25:95:4f:7f:
8c:4e:d0:d9:b8:5c:3d:d9:11:c3:f6:94:31:55:cd:
4e:de:de:d0:7c:3e:39:f5:5b:b9:5f:06:16:db:34:
1d:67:9a:57:50:85:cf:23:5d:52:d5:2c:8e:00:58:
77:0f:61:0b:f1:d1:bd:35:d9:ec:48:70:1f:fb:3b:
5a:2d:cc:ab:64:53:93:15:40:c7:d8:b7:40:50:0a:
a1:2f:c8:bc:48:1d:cb:aa:d2:36:67:9f:01:92:68:
fc:31:0c:5f:80:16:4f:ac:8e:44:1c:11:05:ba:d2:
34:1b:95:4b:f0:09:27:dc:e9:f9:e5:08:4c:96:b4:
a1:a9:64:4b:9e:78:20:34:87:f0:bf:69:cb:65:3b:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:40:81:C8:A0:E4:45:4A:A6:0A:B4:D5:EA:F1:5C:56:48:0A:71:10
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d1:43:42:66:ef:f7:40:db:9e:d8:86:20:a8:0e:a2:8a:3a:
de:2a:70:d4:f2:1a:47:b6:b8:4b:7b:51:a4:cc:82:d8:54:d4:
bd:19:7b:81:f3:57:f6:0c:97:07:05:c4:82:f5:46:ff:9f:88:
11:68:fb:e9:4e:f4:24:5e:a6:8f:fa:c3:06:e3:48:e9:38:ca:
02:0d:2e:60:e7:a1:c6:95:0f:4f:82:db:85:41:e4:05:4d:0d:
f4:09:3d:3a:82:bd:d2:ea:00:bd:97:ec:c7:6d:dc:36:a8:9e:
8f:60:09:e2:e3:07:f8:72:0e:d3:4f:55:5d:14:94:90:98:e3:
02:8a:9a:23:5d:9b:b8:7d:ac:08:de:56:14:ae:75:ba:11:73:
a9:90:fc:fa:d3:b6:50:4c:76:9b:a2:ce:96:45:14:92:3c:9b:
76:3f:1e:b6:ae:ee:2a:6e:d4:a2:8d:df:0d:87:aa:f5:24:75:
94:2c:17:02:b5:60:83:27:70:cd:02:84:3d:f0:13:bf:c2:88:
4e:41:ce:c2:ef:06:22:7a:ce:52:50:9d:40:7a:ed:71:5c:9e:
2d:7b:14:0a:67:e7:2b:35:b7:a1:e1:87:94:a1:7e:eb:26:46:
32:f9:03:58:9c:bc:c2:6a:00:12:8e:e8:94:ba:e0:61:d0:8e:
27:c6:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:49:18 2025 by rpki-client