Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: JCiUIKdQdk3cUOgAVmXfeyjhfT6Mype6G2/JbzUB0ww=
Subject key identifier: AA:1B:EB:F0:FA:B5:81:6B:83:81:19:FD:53:31:EE:28:67:B1:16:B3
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 019749D60BB37AC8F2D4D6ADC5E1AF7D2AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 0FB1
Signing time: Sat 07 Jun 2025 10:00:53 +0000
Manifest this update: Sat 07 Jun 2025 10:00:53 +0000
Manifest next update: Sun 08 Jun 2025 10:00:53 +0000
Files and hashes: 1: Nnh8TxyMB33fgGngdO7IhueAOsU.roa (hash: R28y5tSNBK4A6wEp0RdvkAdrsGgoMExqmSzBUnD9C9E=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: YSlngBFBSSZ1hkmPLreHPMbAHicr2yd52LomuTcF0C4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:0b:b3:7a:c8:f2:d4:d6:ad:c5:e1:af:7d:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Jun 7 10:00:53 2025 GMT
Not After : Jun 8 10:00:53 2025 GMT
Subject: CN=aa1bebf0fab5816b838119fd5331ee2867b116b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:db:e3:9f:0b:c1:63:e1:2a:62:5c:ba:11:
32:16:9c:5c:d0:68:0f:d9:76:f7:23:2b:f5:bb:16:
a3:fa:15:3a:4d:53:5a:2e:76:b8:84:e3:92:b8:7c:
05:67:a2:63:aa:b9:76:54:77:69:05:a9:fa:49:bc:
49:9e:31:a3:ed:68:ed:b4:8c:2d:4f:d6:ff:73:b8:
3d:06:f6:87:d0:d3:91:83:a0:1e:9e:e3:26:54:7d:
ee:a1:60:bf:37:6b:a6:c6:c3:cd:61:20:46:1f:80:
5c:25:d5:67:c2:b9:46:87:25:04:c8:53:50:4b:4d:
e7:97:a7:14:53:65:a4:fe:ba:2a:cc:c5:48:2a:e5:
28:b8:8d:d9:e8:07:04:4b:a8:b4:cd:c3:86:e6:2e:
f2:4e:08:b8:94:33:a1:97:4a:a9:0a:83:a3:e6:a4:
a2:65:74:9f:44:7f:c1:1d:62:1c:a7:cf:f4:97:b2:
28:ca:b7:84:08:71:be:84:2a:ae:81:80:f4:9b:90:
0a:fb:11:3a:0b:ab:0f:22:fb:9f:75:09:ef:d6:6f:
9f:bd:55:a9:88:b1:87:84:64:11:7c:dc:32:9c:07:
0a:c7:03:01:2f:6d:81:6e:f8:5a:98:9e:37:43:d4:
05:89:d0:dc:b2:33:5e:5d:1c:a2:0d:73:81:5f:3f:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:EB:F0:FA:B5:81:6B:83:81:19:FD:53:31:EE:28:67:B1:16:B3
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f9:48:f8:99:a3:9c:e9:90:72:b1:6d:80:cc:da:40:c2:38:
c8:8d:9e:d6:e2:df:92:f9:ca:22:ef:48:5f:19:9d:64:e5:1b:
f4:23:b9:5d:3d:7b:b0:61:01:6e:2f:ba:0d:49:72:cf:44:29:
04:0b:54:78:e3:8e:d9:8a:30:d7:02:d1:67:5c:7a:f2:d5:d1:
35:51:bc:43:c0:26:11:00:a2:50:00:8e:18:3a:45:8a:cd:9e:
bb:c7:10:15:50:45:bf:db:06:30:b0:2a:a8:ee:35:35:5e:c9:
ad:04:77:02:a6:5c:59:28:d8:e9:56:48:bc:39:f6:80:e3:6a:
ad:cf:85:4a:61:3b:e7:41:f9:5d:cc:11:52:9e:51:36:59:93:
82:45:35:e8:fe:92:cc:a7:ed:eb:80:df:4b:98:e0:6d:d9:5f:
5b:36:da:58:74:ce:7e:10:cc:77:c6:98:1c:af:89:27:ab:42:
65:a3:8e:f9:17:14:fa:ab:a3:e3:09:6b:26:e0:44:8f:a1:8c:
a6:56:c3:08:49:70:31:97:6c:ac:cc:78:c6:dc:bc:3b:4b:ea:
fb:05:ce:dd:1f:0c:44:8b:bb:d0:12:6d:9d:25:1f:e2:ac:16:
a8:ff:71:47:d2:4b:1d:6e:44:3e:f0:26:3c:05:fb:7c:e1:9f:
63:cd:31:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:42 2025 by rpki-client