Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: 5vVDzYVi2gwvMX+XW2s2ZfV0pmatX1MOMRsOfO9qa24=
Subject key identifier: 3D:D5:DB:3C:DB:3A:A3:98:69:B3:E5:2D:29:7E:9C:E9:81:14:5F:37
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019747798E45B9EDC94BB2E79EA153F55712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0548
Signing time: Fri 06 Jun 2025 23:00:37 +0000
Manifest this update: Fri 06 Jun 2025 23:00:37 +0000
Manifest next update: Sat 07 Jun 2025 23:00:37 +0000
Files and hashes: 1: DKCys4KRYdnrGXDLl1nVf9nVmRA.roa (hash: IaLK2xfRNIne0nZPaZ2/jfh45tolOprh7fcjo3irVI8=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: 2zPlVPARwX9oquLoifCLxksczyyB4etws82ZxjHR+Qk=)
3: NfUK1WerAdsfJiTM68i5Lnvkb2w.roa (hash: ZGezIXFkpMHBb+7ell8DWUCsKtD9DU2fEiI/6174M+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:8e:45:b9:ed:c9:4b:b2:e7:9e:a1:53:f5:57:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Jun 6 23:00:37 2025 GMT
Not After : Jun 7 23:00:37 2025 GMT
Subject: CN=3dd5db3cdb3aa39869b3e52d297e9ce981145f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:89:f3:56:3c:a6:34:06:d9:1a:76:ff:c0:
01:6f:66:b8:8b:4d:58:1e:4a:7a:fe:5e:b2:0a:f1:
44:64:67:17:1d:6f:bc:c3:e8:7c:07:20:0d:41:85:
2f:e1:04:d7:6b:b7:0a:8f:1d:77:04:21:79:33:17:
d9:2b:7b:80:de:71:b7:a2:e5:9f:e0:b3:ec:b4:c0:
e1:c2:0d:61:20:03:e3:f2:4c:7d:24:6b:e0:59:6b:
2b:c2:80:10:0b:1c:22:e0:00:20:f5:56:21:41:b9:
28:8a:24:47:ca:ff:cc:62:56:37:a6:68:eb:3a:e3:
01:5e:dd:4d:30:6c:73:00:23:a6:d5:12:10:c7:de:
3e:c9:f8:91:6b:54:fa:5a:d5:6a:60:00:7c:b1:ee:
aa:a1:43:ff:ef:6d:82:c5:18:3d:d2:53:f7:40:3c:
de:01:55:1e:b7:a0:43:62:f4:e8:09:37:c3:8c:a6:
14:44:da:8d:96:f5:c8:4a:cf:f4:c2:54:c9:af:91:
26:96:41:ea:be:56:45:01:50:c3:12:cf:52:fb:b1:
d7:b6:17:24:8c:f9:07:ca:fc:bb:14:dc:e9:33:e8:
26:91:53:75:25:c8:d8:eb:3b:48:59:6e:71:d1:08:
82:47:3b:de:13:47:ba:10:d5:93:fa:7d:2a:2d:a7:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D5:DB:3C:DB:3A:A3:98:69:B3:E5:2D:29:7E:9C:E9:81:14:5F:37
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a6:a6:24:e2:21:09:4f:78:0f:de:7b:0b:81:8e:84:e6:ca:
8f:5c:e7:40:68:04:da:42:76:ef:0e:07:3a:1a:7a:33:64:1d:
29:4a:8c:2c:19:f0:1a:bf:6a:77:94:76:13:8f:61:9d:db:3e:
ce:b3:42:53:60:98:4a:ef:78:79:aa:4c:23:89:8c:85:84:d7:
6a:22:b0:04:4a:58:00:59:3e:bc:16:72:1d:f4:0b:fb:e8:44:
a4:a3:f5:b8:d6:0b:18:a9:72:2e:ab:80:a1:88:33:b4:ed:bf:
a1:22:55:d1:c3:bf:c2:cd:0e:e0:96:1c:53:7f:80:c6:70:aa:
9a:f5:cf:b8:ea:79:85:83:f3:15:63:88:6a:7d:19:ba:a4:3d:
39:db:f5:2a:da:bd:32:57:0d:87:85:8d:6f:80:b2:ba:46:ab:
8f:12:fb:a5:73:50:7d:26:70:63:3f:f4:0f:88:0f:ef:2b:d1:
9b:66:95:e5:6a:01:92:5b:48:ad:ac:20:28:ab:9b:26:51:65:
49:19:fa:ca:79:66:cd:31:7c:1d:f6:fd:d9:0d:3c:6a:e4:52:
da:87:d3:ba:f9:b8:92:02:d9:3a:b1:5d:3a:ce:b3:13:65:68:
e2:a5:e9:6a:e1:88:b6:22:e6:40:2f:b8:f7:fb:a9:90:dc:9a:
5f:e3:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:22:09 2025 by rpki-client