Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: YebpEeUQngx0y/2+CD46cONx51QcNNzKqjdxnxrencs=
Subject key identifier: 95:3D:89:9A:8C:6B:86:07:A5:7B:3B:0A:8C:25:3A:FF:96:10:09:07
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 01974CD715C2DD7F5227ECBD8093FAEA3ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0894
Signing time: Sun 08 Jun 2025 00:00:53 +0000
Manifest this update: Sun 08 Jun 2025 00:00:53 +0000
Manifest next update: Mon 09 Jun 2025 00:00:53 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: N+ZStXlGOy8UpuB+pQnBNSNxKk1a6wlUS3w0L+k/w4M=)
2: _KxvEwb-05zypoulu-kOqoL22-A.roa (hash: iIrzlSKXJeml3wWcOMj0MUUk02aq1R81c8+dmUXm/h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:15:c2:dd:7f:52:27:ec:bd:80:93:fa:ea:3a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Jun 8 00:00:53 2025 GMT
Not After : Jun 9 00:00:53 2025 GMT
Subject: CN=953d899a8c6b8607a57b3b0a8c253aff96100907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:c9:82:42:57:fd:31:a2:5b:a9:24:81:ff:
8f:bf:64:1e:85:f0:35:c2:33:f2:fc:c1:e6:fb:1d:
89:b6:77:d9:fd:e2:ed:f1:9b:9e:3c:da:92:68:db:
8c:a5:89:e4:6e:11:1e:62:13:be:52:0f:94:e6:18:
a1:15:92:9d:3c:2b:25:fe:23:7a:b4:78:aa:36:fe:
eb:a6:5d:32:84:d2:83:e6:da:a8:d8:e6:e2:74:70:
8a:28:62:db:b6:89:f8:a1:7e:0d:72:0a:7d:7d:97:
fa:bb:53:7b:91:8c:e6:d3:14:1a:85:ff:a8:1e:50:
f7:27:67:0c:d2:bf:1b:c7:91:54:ad:99:77:d4:52:
cd:69:14:5b:47:f9:20:47:de:37:2d:d3:72:7b:82:
cd:61:dd:1c:c5:35:c7:92:78:54:88:5e:09:27:6b:
52:f9:e4:c0:8c:06:2c:90:22:2c:e1:94:64:30:2a:
04:ae:b7:4c:e0:e2:13:ad:85:4c:d3:09:79:6f:4d:
aa:8c:9c:f6:93:5e:7b:77:49:05:44:cb:6e:89:89:
9d:70:61:a0:02:45:9c:b5:7e:e3:36:45:c5:06:c4:
96:fd:58:e0:f2:03:f0:c8:2c:0e:df:ad:c2:47:cd:
35:5d:0f:c9:6a:4a:e1:93:d0:db:fc:56:b6:e4:d2:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3D:89:9A:8C:6B:86:07:A5:7B:3B:0A:8C:25:3A:FF:96:10:09:07
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:51:50:39:54:4e:80:a8:32:ad:9a:95:08:eb:0f:8b:79:46:
41:72:c8:fa:0d:51:7c:17:81:c6:83:12:7d:3b:c5:25:02:f4:
4a:c5:5e:75:5e:98:dc:c8:8b:69:69:a5:fa:d1:29:76:a2:4f:
f1:35:ee:1e:31:19:63:81:36:77:f3:10:0e:dc:0c:81:07:26:
66:43:9d:15:38:1f:61:23:dc:e1:d9:fd:5a:af:30:1c:17:3c:
8f:61:5c:0e:8c:9c:f3:48:31:4e:26:a5:aa:34:43:11:4e:2c:
f9:84:c7:b7:fa:ed:75:a4:74:94:be:fa:26:fa:4b:4c:9d:8e:
be:43:5b:2b:13:89:12:96:22:8e:05:88:39:cb:0e:40:c3:00:
98:ea:9e:9b:d2:e6:a2:48:f9:09:07:25:16:3f:29:67:9b:87:
5b:26:fe:b7:5b:21:2d:74:ff:de:f0:88:6c:fb:cd:1e:35:6f:
36:be:f0:42:55:92:46:37:13:8e:75:b4:89:4e:fe:e6:a0:26:
28:0b:d1:49:e2:bf:ae:45:4c:86:5f:22:64:40:7a:ec:e7:bb:
36:a3:52:45:43:b0:43:9a:8d:e9:d7:02:ad:ac:af:a2:73:7d:
72:63:af:ed:e3:19:2e:9b:1b:23:5c:2f:40:f8:19:b6:2e:34:
6f:78:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:18:59 2025 by rpki-client