Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: PH+7ijYIYx8KcOHq7czn4N/qiSN1W67kTAfVW+4skvk=
Subject key identifier: 83:AF:48:D2:07:79:E9:5B:33:B1:3D:04:44:4D:6C:D3:51:C3:8F:8F
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 019749D595BDB5E98D4B78D85B3A19119EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 01F6
Signing time: Sat 07 Jun 2025 10:00:23 +0000
Manifest this update: Sat 07 Jun 2025 10:00:23 +0000
Manifest next update: Sun 08 Jun 2025 10:00:23 +0000
Files and hashes: 1: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: biHUnd6f/XKYRpCcCuN3QdF2Mp4ROr0Ld9p7ahzqfBE=)
2: lO_Mg3DZHEdW5_hWel-RB7XxrdI.roa (hash: mSvOkFvyMe8N8eCEVEp8qdqZ/KkLJkgUd3GK7ljSNTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:95:bd:b5:e9:8d:4b:78:d8:5b:3a:19:11:9e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Jun 7 10:00:23 2025 GMT
Not After : Jun 8 10:00:23 2025 GMT
Subject: CN=83af48d20779e95b33b13d04444d6cd351c38f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e6:f0:dc:e0:0a:5f:ad:e2:be:7b:82:20:d3:
bf:e2:cf:b4:bd:d1:fa:31:ea:0e:4c:f9:46:47:74:
26:d3:71:28:81:8a:7a:3b:5b:3f:0b:fe:61:71:51:
69:ef:96:81:af:e3:f4:e5:93:97:48:29:63:d7:ff:
a9:eb:72:98:b9:90:86:8c:97:f7:13:cb:09:a6:88:
8b:38:c6:92:39:f8:62:1d:98:eb:60:7b:4f:2a:06:
7b:79:ea:90:89:0a:e6:f8:38:ca:cf:a0:93:97:f6:
6a:62:31:62:f6:f8:00:0c:4d:ca:89:a6:e9:c6:94:
cf:c8:13:d2:db:25:8b:f2:04:6c:ac:f4:13:4b:29:
e0:e7:1d:e0:80:f7:f4:84:cd:67:43:6f:d4:7a:39:
cc:c6:ab:65:ea:a9:0f:6a:ff:84:33:83:c9:b3:6c:
60:4c:41:84:fd:e7:95:9a:99:35:b6:9a:4e:b2:9a:
65:14:d1:5d:95:96:3d:16:50:18:f9:86:10:f8:ed:
ec:8c:00:a9:82:4a:df:70:67:66:7e:97:5a:55:db:
96:65:c9:69:69:cb:ec:68:be:bd:8c:bd:aa:b2:10:
81:83:7a:37:62:77:fd:78:5f:23:29:f1:fa:22:93:
f1:37:f7:90:a2:99:b1:10:41:d2:8f:38:e2:6e:ca:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AF:48:D2:07:79:E9:5B:33:B1:3D:04:44:4D:6C:D3:51:C3:8F:8F
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:01:22:cc:f0:4d:39:73:7d:7f:08:94:82:00:04:6e:11:1f:
57:de:51:ed:1f:88:78:5c:c3:5c:6e:b7:78:ee:87:f1:72:f6:
0c:cf:1e:8d:81:e4:8c:9c:1e:3b:4d:89:22:0b:51:40:93:a3:
c4:e7:f7:1b:be:b4:e4:15:eb:1b:38:98:32:0e:d8:39:ac:0b:
76:6e:72:49:94:b2:4c:b2:3d:27:83:86:ba:81:72:2c:4a:d6:
eb:44:3d:93:33:23:02:6d:48:e8:e8:10:4f:a2:e9:65:75:10:
ba:4f:49:5c:7e:fa:62:17:7e:ae:a5:6a:69:d8:4f:27:80:06:
2c:64:6d:2a:be:8a:20:fc:ee:e3:c8:59:24:11:c5:a5:21:89:
28:c0:ee:bc:9b:bc:56:b8:1a:d9:40:e0:67:00:6f:41:8c:bb:
07:1f:fb:e4:9e:75:5d:15:b9:c3:c7:a6:ea:0b:c9:e8:84:81:
75:b3:4a:36:f8:54:b3:ff:62:d9:51:06:8a:11:03:37:01:67:
e3:48:f2:7e:ea:45:2c:22:0d:4d:c2:79:f0:62:a0:56:77:8d:
a1:5a:92:90:28:63:73:36:a8:9e:28:c7:9d:a8:71:c6:ea:3f:
28:af:de:c0:9a:5e:9d:b1:19:5f:5a:10:60:60:f9:a8:9f:3c:
6f:2a:e8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:13 2025 by rpki-client