Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: SoXFFdR1kOyn82e5iZX/Kyk1fJ4lmpbsx2rcbMk3klo=
Subject key identifier: 92:C0:BE:00:5D:7C:FD:42:2F:A9:A8:2D:72:74:5A:89:20:80:3D:B9
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 01974967CC72EF08F3E56552E716592B32AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 08:00:28 +0000
Manifest this update: Sat 07 Jun 2025 08:00:28 +0000
Manifest next update: Sun 08 Jun 2025 08:00:28 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: mlwiQgXy2TyY+otaTBF5VizulI5ILN0Mv+wDLo5On6E=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:cc:72:ef:08:f3:e5:65:52:e7:16:59:2b:32:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jun 7 08:00:28 2025 GMT
Not After : Jun 8 08:00:28 2025 GMT
Subject: CN=92c0be005d7cfd422fa9a82d72745a8920803db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:3b:cf:6e:49:39:7e:ae:33:49:fd:cb:44:
18:64:1d:46:c7:20:d8:19:fe:6e:09:a2:55:0b:94:
63:f9:be:3e:51:c2:ac:40:b1:33:bb:ec:03:60:09:
37:b7:9a:46:1e:4c:76:5e:10:75:64:33:09:ed:eb:
e7:01:21:3e:e1:1c:7c:b4:f8:da:36:a9:e1:df:6d:
9d:76:ec:7c:64:35:3a:34:a1:47:3f:1a:28:ef:f7:
34:6c:80:49:ec:cb:02:cd:99:9d:1f:6d:91:03:b8:
52:4a:8a:62:09:61:90:05:86:80:69:03:7a:46:ba:
96:34:22:74:68:ce:1a:e7:2a:c1:88:4d:23:b6:6e:
9a:58:25:d0:cc:16:2b:f2:29:ec:5f:e1:a9:2d:d4:
d4:46:56:61:3c:58:0b:49:22:61:26:27:f7:2f:54:
ed:de:65:91:6b:2e:b6:2f:dc:0c:c8:4d:01:0d:aa:
ab:92:96:6c:31:76:c9:17:5d:ac:66:ab:7c:c3:44:
80:cb:9d:c0:e0:66:45:ca:01:ab:6d:5d:96:62:4e:
c7:92:3b:2e:76:ce:df:70:45:6a:65:98:30:d4:8b:
3a:f5:a8:66:35:eb:62:c1:cf:44:54:af:ec:92:16:
96:ab:9d:bf:ac:f1:d1:23:15:d7:15:fb:04:cc:d5:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C0:BE:00:5D:7C:FD:42:2F:A9:A8:2D:72:74:5A:89:20:80:3D:B9
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:26:1d:19:a8:47:d7:74:e7:41:a6:f3:af:89:5c:80:eb:2b:
f2:61:e1:f1:22:c2:cb:30:0e:67:94:14:3e:4e:a2:2a:17:30:
ed:93:2e:ac:2c:d4:d9:cc:ac:e8:5c:e6:22:3c:39:45:ba:ac:
6b:78:f2:f1:f9:e1:b0:d8:80:e3:82:d7:92:2b:ef:8f:46:84:
7d:b1:fb:e2:c5:df:f5:77:46:95:bd:33:2c:ea:83:50:f2:02:
a2:f4:ce:6b:13:70:9b:f9:ef:8a:3b:7b:85:60:fb:ed:62:ae:
82:84:28:d6:0e:74:5a:90:b0:2d:f0:12:c4:67:61:16:28:81:
82:9b:94:ab:69:33:51:a6:98:a8:bd:1f:a6:d9:11:8c:38:af:
e0:26:1e:81:4f:c8:59:be:50:c7:19:f5:9b:23:f5:d9:4a:25:
c9:01:82:c7:0b:5a:3e:40:b1:c9:52:fd:aa:02:29:e7:49:f3:
52:4f:7e:ce:2a:8a:f5:4b:b8:12:c7:d7:e3:54:0c:9f:11:8e:
63:f7:e0:df:ee:83:18:a5:41:ba:da:e7:07:0b:f1:80:98:f6:
1c:5d:23:4a:7f:c3:82:b7:db:66:ef:02:ab:2a:f4:11:7c:91:
e3:45:da:34:7e:4d:35:96:31:9e:8b:db:cb:45:4e:89:53:7d:
75:90:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:59 2025 by rpki-client