Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
File: hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft (raw, json)
Hash identifier: XReNUploIWaHRcYvzXQuc9f/3fj5kK9tFLitc2AlEPQ=
Subject key identifier: 10:28:A0:54:9F:BF:3B:85:22:E7:F3:7D:D0:6B:A1:F6:B5:D1:5A:89
Authority key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
Certificate issuer: /CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Certificate serial: 01976C2A9A61AE55B38F141C2ABC2CF10FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
Manifest number: 1029
Signing time: Sat 14 Jun 2025 02:00:20 +0000
Manifest this update: Sat 14 Jun 2025 02:00:20 +0000
Manifest next update: Sun 15 Jun 2025 02:00:20 +0000
Files and hashes: 1: XLQfftOCYwZhCKWBFvPgcWtM3ng.roa (hash: e5IwRRubP2iih1RAenDvyf84x82YlIWC8mC3l2YoKV8=)
2: hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl (hash: I2510vWKvAOYq93UYEPGBzWdABQXm0iUu7GYXLcMmLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:9a:61:ae:55:b3:8f:14:1c:2a:bc:2c:f1:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Validity
Not Before: Jun 14 02:00:20 2025 GMT
Not After : Jun 15 02:00:20 2025 GMT
Subject: CN=1028a0549fbf3b8522e7f37dd06ba1f6b5d15a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:aa:00:5f:15:61:a6:1b:08:a0:e3:30:2f:
f5:72:d1:05:da:87:64:d0:ff:ab:66:4c:d1:f9:97:
44:92:ad:e7:76:7c:a9:5a:18:45:7c:9d:cd:93:5e:
e9:50:b0:70:22:eb:ec:0c:e9:76:e7:16:3d:2b:26:
f4:8d:fc:b6:45:5c:42:e6:0e:91:38:b0:8a:da:84:
19:bc:2d:70:a2:a5:10:c6:ed:40:ed:7c:fc:fc:b3:
20:79:15:cf:f1:52:ac:8a:ce:20:0a:c3:e8:4f:74:
fb:45:bf:c7:7e:f7:51:d4:8c:58:73:1c:e1:3c:da:
4b:2c:33:62:bd:e9:18:f5:0d:7b:62:47:a5:71:58:
0c:22:6f:9e:6e:64:e0:54:51:16:80:29:3b:ef:10:
c6:2d:42:16:cc:8c:e8:70:f7:1a:fe:38:fc:61:24:
9e:37:90:74:c8:db:f1:76:67:30:fd:ac:f6:2b:52:
44:3d:ab:e0:69:e4:cd:29:2d:7d:99:f8:82:8a:01:
73:39:22:18:65:cb:48:95:95:2b:ac:6e:63:3a:b2:
55:85:cc:08:ad:a2:50:8c:7b:33:4c:58:f7:07:d4:
5b:c7:45:33:5d:64:c5:a9:0d:0c:34:5e:96:d6:74:
11:e7:2d:90:17:75:bb:8f:e9:d8:70:b6:57:65:92:
42:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:28:A0:54:9F:BF:3B:85:22:E7:F3:7D:D0:6B:A1:F6:B5:D1:5A:89
X509v3 Authority Key Identifier:
keyid:84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a9:c1:97:d4:d9:eb:de:3c:c0:41:39:34:eb:81:75:25:ad:
a6:a0:eb:87:3a:17:bd:c5:ab:28:b5:71:f1:05:a1:93:cf:60:
c4:f4:61:43:60:ff:f9:4b:52:e9:33:a0:89:eb:ee:2b:c6:08:
1f:27:38:b8:48:2a:82:9d:f3:a5:6f:6d:b7:d5:86:d9:d4:de:
6b:17:dd:21:0d:e5:b1:4f:6c:ce:ac:d9:5c:7f:9d:a0:16:21:
cc:0c:c6:e0:83:36:4d:81:a7:fd:c6:00:4f:65:20:30:ed:7e:
70:56:5c:a2:b3:ea:ed:83:ba:21:d8:02:1f:a1:d3:d4:8a:5b:
e9:0e:e6:5c:c3:ae:16:d7:c5:ef:af:d4:99:80:a3:12:8b:c9:
8c:bf:e0:62:bb:77:45:e4:08:5a:23:5d:a9:bf:33:e0:13:4f:
ae:17:e6:41:be:19:40:78:7d:20:da:68:0a:17:12:1d:ef:5f:
fa:32:00:73:70:7f:90:73:96:8d:ce:99:a4:17:3f:71:ea:0c:
da:b0:29:ab:dd:86:d9:f1:61:9e:ee:df:19:4a:a3:88:f9:3a:
16:a0:b0:1e:be:2c:c9:0f:db:11:1a:ef:86:36:4f:47:ab:54:
8f:e2:9b:40:1d:98:2e:3f:c2:7b:05:63:96:d8:91:a5:f9:17:
b3:30:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:40:17 2025 by rpki-client