Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: g9kcKQBnZLxcax48VaM1jIY6gHeHn9F9408TgO8hGOQ=
Subject key identifier: 05:D6:BA:B0:3A:CE:83:F3:9E:B7:AA:35:37:C7:C2:E9:34:AF:B7:9A
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 01974F6A8F629E80A23B8D8AB6AED8284106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 12:01:12 +0000
Manifest this update: Sun 08 Jun 2025 12:01:12 +0000
Manifest next update: Mon 09 Jun 2025 12:01:12 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: 8papIGXkUZNheojOkM8TM+rtz3Dx3jMH6ERS2E5sDN0=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:8f:62:9e:80:a2:3b:8d:8a:b6:ae:d8:28:41:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Jun 8 12:01:12 2025 GMT
Not After : Jun 9 12:01:12 2025 GMT
Subject: CN=05d6bab03ace83f39eb7aa3537c7c2e934afb79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:85:06:76:3a:bc:94:be:54:cb:49:d0:fe:
84:bd:bc:ce:f2:da:ca:59:a1:12:da:44:36:16:01:
44:92:c8:57:c1:e0:a1:38:a6:c2:fd:03:92:70:7b:
5c:65:34:6c:11:93:dc:fb:43:18:82:9a:8a:f1:42:
35:0a:fd:a1:76:7d:05:92:a3:a2:a4:e8:0e:f8:f6:
9f:e6:cf:16:1f:b0:45:8b:39:af:c3:00:0b:72:5e:
af:99:52:60:ff:5a:1c:8a:11:4a:d4:31:9e:40:c7:
65:d6:e6:19:f6:20:2a:f1:43:75:43:0c:c5:51:59:
7d:f1:4a:dd:6d:7d:f2:9e:a3:6b:e5:c4:4d:d4:a1:
39:f7:1a:ea:b3:a4:9c:9d:6b:e2:b7:f6:b2:32:5f:
f6:2d:c9:ec:3c:c8:e3:2e:3c:08:60:f8:3c:76:66:
3b:fc:ff:d2:d2:63:ac:d8:56:19:1c:2e:a0:2a:70:
22:70:7f:c8:28:8d:33:5e:42:28:89:87:1a:e4:3a:
1b:4a:1e:4e:bd:81:a5:13:8a:cf:b4:53:14:b6:6e:
2e:bb:4c:4c:26:9b:9c:47:a1:0e:3d:d6:a9:2c:03:
ac:c5:08:4d:92:9f:0c:e2:bd:12:cd:3d:f8:7c:14:
c1:bb:fa:d1:9a:b0:9f:25:53:5f:b0:7a:3f:85:7e:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:BA:B0:3A:CE:83:F3:9E:B7:AA:35:37:C7:C2:E9:34:AF:B7:9A
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fc:78:a5:47:43:72:00:96:6f:78:7b:ed:de:e3:12:84:78:
21:46:d8:62:83:17:65:fa:7f:b2:fc:81:74:27:53:2e:59:64:
30:05:f6:66:15:cd:dc:45:32:ec:7e:c2:19:c7:c5:a3:92:2a:
de:ad:d7:9f:5b:c2:19:6f:c0:c8:77:9a:e1:2c:30:0b:45:8f:
a6:70:4c:16:63:38:24:be:36:69:b0:6b:8c:a0:24:1d:11:41:
9f:73:c8:fc:01:d9:2e:24:91:b9:fe:87:69:ba:a2:2a:38:75:
3e:22:b0:e6:97:90:50:cf:cc:4f:9f:7a:be:0d:fa:93:f7:db:
72:76:21:53:7a:20:f3:e2:29:08:9b:81:4b:97:73:83:08:71:
7b:dc:d6:6e:aa:6d:d4:50:f4:53:7d:a6:69:44:1f:32:f6:3c:
9d:cc:73:3d:52:e2:bc:82:47:16:eb:1e:2a:ca:94:11:c4:4d:
6d:45:0c:a0:88:7e:79:60:d2:e6:6a:95:44:48:1b:b8:c3:a9:
a7:5e:ee:44:9d:38:80:64:1a:f9:7d:ab:76:ee:23:7c:8f:02:
10:a7:55:d4:26:3b:b0:1a:5d:e1:62:2d:63:4e:7d:40:e5:5b:
e3:38:0b:b8:a3:97:ff:b7:a7:86:51:78:62:48:7d:94:aa:1e:
eb:35:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:20:28 2025 by rpki-client