Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier: Em8OcfJVPZczF+z2XPKXVRVtyK919WxrN6KLRuuyd/E=
Subject key identifier: AD:36:00:37:AD:8E:33:61:EF:19:59:06:F4:7C:D0:D5:38:FE:E7:C6
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 01974C32160C7F4A5ED6DC1882EC07E8948B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number: 158B
Signing time: Sat 07 Jun 2025 21:00:40 +0000
Manifest this update: Sat 07 Jun 2025 21:00:40 +0000
Manifest next update: Sun 08 Jun 2025 21:00:40 +0000
Files and hashes: 1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: fnei93Y0o+48yMn1R+EA95IAwOMRMAZAFLAIAy6wsFI=)
8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)
9: wYF_ylL7pnBo9OaIzACNhn9RjFU.roa (hash: RTPtjL/eZ7d6GsDAAsmLFavUlJqeMCconuqgqwEBbU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:16:0c:7f:4a:5e:d6:dc:18:82:ec:07:e8:94:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Jun 7 21:00:40 2025 GMT
Not After : Jun 8 21:00:40 2025 GMT
Subject: CN=ad360037ad8e3361ef195906f47cd0d538fee7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:f4:81:99:3d:64:23:05:2f:5d:f0:2a:c4:
34:8a:0e:ee:e2:d3:5e:26:08:1f:da:0e:37:58:b7:
fb:f1:90:1c:e3:91:ee:a4:c4:bc:45:6c:ba:25:73:
77:77:49:a6:a6:5a:42:f7:6a:33:db:ab:c3:a7:d5:
c3:c2:f4:07:dc:34:ce:9e:63:77:b6:af:21:e1:1f:
77:1a:d7:d5:eb:3d:6f:2f:5e:d3:2c:31:e7:a9:28:
d3:e6:c8:4a:80:69:4f:73:7b:d6:58:70:79:89:72:
f1:eb:80:2b:6a:d8:3f:ac:51:be:6a:94:84:cf:da:
7c:b5:2b:88:b5:f8:25:0e:7d:af:15:79:db:f7:33:
5e:7d:97:37:65:64:ef:0d:b7:4b:bd:91:e8:14:92:
cb:d9:7c:40:ed:68:4d:a2:d9:00:62:c6:e1:8d:0f:
55:69:9e:78:b9:8f:d4:e6:7e:e6:32:92:61:62:e4:
2b:18:60:2a:55:c8:b9:5b:8f:69:76:eb:da:22:d0:
ad:6e:92:7b:59:5c:cb:c7:33:e8:40:dc:e1:e5:00:
07:07:f4:bf:66:f6:9d:b2:6b:87:a4:50:2c:e6:61:
88:15:21:3a:f3:2e:eb:82:cc:7f:ae:25:40:6f:14:
1d:5f:06:0a:36:8d:eb:86:9a:75:cd:0c:56:fc:6a:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:00:37:AD:8E:33:61:EF:19:59:06:F4:7C:D0:D5:38:FE:E7:C6
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c9:6f:f3:7f:d3:f0:c1:91:37:c6:58:89:f9:5f:84:05:e2:
96:61:79:e0:5f:08:b2:35:09:16:52:32:75:39:86:cd:6f:15:
a8:24:09:28:20:7d:23:bb:6a:b1:cf:49:0f:aa:4c:3a:d8:18:
c0:7d:5b:1c:cd:39:eb:47:f6:2a:65:15:85:33:0a:4e:20:d7:
3f:4d:e9:3e:b8:a7:54:f6:63:0a:55:a0:da:96:47:7d:30:a6:
42:7b:58:bc:eb:6b:c7:de:10:30:a1:dd:e9:3f:06:68:4b:27:
6f:03:6a:23:66:aa:a2:15:02:a5:aa:e1:c7:07:e8:f9:17:26:
af:38:c7:08:b9:42:2a:13:f2:c7:09:06:54:d5:ff:7c:a4:73:
87:56:9a:2d:8d:c1:8b:88:a4:a8:5a:26:5f:39:8f:d6:3a:1e:
2f:e3:f3:aa:19:e1:87:8d:d7:92:f0:4d:d8:d4:ee:52:7f:88:
42:ec:40:34:f4:65:e7:b6:13:25:29:d1:56:2e:1b:c3:28:c9:
89:ac:d0:16:60:ab:89:a3:f4:78:a7:5b:51:30:f6:34:bb:09:
6e:0e:aa:c1:81:c5:99:36:7b:70:6d:93:1d:bb:8a:5c:a5:9f:
56:6d:5e:ed:22:48:9a:1b:a0:49:39:fa:32:03:45:20:84:b0:
56:23:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:32 2025 by rpki-client