Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: Bz0ikUrZjY0cSliEBPl9ADLs8URZhnSdJHPG7YgO/2M=
Subject key identifier: FE:7D:C1:60:B4:2B:1C:96:1E:6E:68:33:1C:3D:5F:C1:49:35:3E:1B
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 0197496872D8C124D8A5657094983F0DD5A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 0CA2
Signing time: Sat 07 Jun 2025 08:01:11 +0000
Manifest this update: Sat 07 Jun 2025 08:01:11 +0000
Manifest next update: Sun 08 Jun 2025 08:01:11 +0000
Files and hashes: 1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: r3iIUvPPPu0NZfi0YAgTtX0X7SLB9epSn+8ZpThhuNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:72:d8:c1:24:d8:a5:65:70:94:98:3f:0d:d5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Jun 7 08:01:11 2025 GMT
Not After : Jun 8 08:01:11 2025 GMT
Subject: CN=fe7dc160b42b1c961e6e68331c3d5fc149353e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:58:26:c7:86:87:db:1f:ab:40:7e:03:39:
75:11:22:0f:de:b4:98:10:e3:ed:87:18:be:46:63:
cf:86:81:87:d1:aa:a9:21:59:3f:49:34:60:bc:7f:
6b:df:7f:98:5d:7d:de:f2:f8:28:21:26:26:ae:8a:
e9:a5:ff:cb:47:2e:74:4a:4c:1d:b1:b7:c3:37:5a:
97:1c:1f:4f:a3:25:60:72:13:64:c0:c1:14:ee:93:
12:a2:a6:a9:6e:18:5e:f9:b9:af:6e:dc:1a:21:b1:
3e:46:b9:2a:a4:71:0d:f9:7b:57:8d:80:94:32:d7:
f7:c5:52:12:cf:83:b3:7a:41:0c:97:e2:87:56:ab:
38:d4:d1:88:99:d6:bc:f0:d0:c4:a4:41:23:ad:0f:
34:60:df:cb:d0:77:7f:0a:f8:0a:0f:c7:cd:93:20:
34:fb:f9:f3:ef:8e:d5:86:34:db:09:5b:f7:fb:ba:
88:eb:18:8f:4f:71:43:e4:90:2b:6d:7f:2b:f8:c1:
cd:6f:59:8c:1b:ec:66:4a:f4:28:7c:b6:87:c1:6c:
e9:d5:d5:a5:76:9b:8d:b0:43:3a:c7:da:33:12:1e:
05:4c:c6:07:cb:10:9b:d3:bc:c2:eb:93:a5:6f:db:
b4:92:6c:4c:a7:49:1f:81:b1:11:2a:21:0d:7c:43:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7D:C1:60:B4:2B:1C:96:1E:6E:68:33:1C:3D:5F:C1:49:35:3E:1B
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2f:2e:51:bf:dc:ef:75:e3:9b:a9:b2:07:be:34:65:7e:d8:
e2:24:50:fd:22:dc:9d:cf:c6:73:97:07:c2:65:cd:3b:cf:39:
16:1e:ff:26:fd:de:2a:78:47:65:eb:b2:cb:97:f3:df:a0:3a:
85:d7:28:a0:dc:22:0d:44:02:49:15:e7:2a:a7:16:da:15:6a:
1b:fc:81:a5:00:ee:8a:a7:ba:b3:d4:a2:cd:84:5b:b4:f7:c6:
7f:5c:f0:b4:b5:25:9c:c4:7c:d7:a8:9e:cf:35:31:32:9b:69:
7b:a3:fb:17:02:cd:2b:e4:ad:9d:01:32:90:97:4a:d3:96:bf:
c5:cd:52:5e:21:42:4e:7b:bb:e7:44:19:00:b0:59:82:85:83:
ed:bb:a0:03:03:1a:9b:06:67:61:87:9f:76:4e:ad:7e:77:26:
97:22:10:01:28:4e:46:a6:8b:1f:be:ed:8c:02:7c:c5:50:ab:
d2:3b:13:fa:7c:0c:21:db:88:c0:12:10:af:1f:13:38:90:ec:
c8:c6:d3:a7:f6:d2:fb:78:39:50:27:fa:39:1f:10:bd:9d:79:
68:c8:27:56:3c:38:0a:b2:c3:e3:da:ac:ed:da:9b:63:3c:62:
e8:8c:ab:49:f8:d2:a1:cd:94:77:96:5b:84:12:33:8b:3f:60:
44:f5:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:56 2025 by rpki-client