Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
File: HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json)
Hash identifier: Ova7dg+v6UZK0wSacR7MRrAsBjPTn2emIrqsIR/hKnc=
Subject key identifier: 1A:CF:CD:42:33:88:A5:F8:2C:75:DA:BC:09:0B:DB:B9:F7:CB:E9:E0
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial: 01974A7B435C7B41F2C82EF5B9CA1CF4DC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
Manifest number: 05F7
Signing time: Sat 07 Jun 2025 13:01:21 +0000
Manifest this update: Sat 07 Jun 2025 13:01:21 +0000
Manifest next update: Sun 08 Jun 2025 13:01:21 +0000
Files and hashes: 1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: EEZhMbDnFpnXEMzF/xBRF4C3JkPwbQdcgXxHmpGoOxM=)
2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:43:5c:7b:41:f2:c8:2e:f5:b9:ca:1c:f4:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Validity
Not Before: Jun 7 13:01:21 2025 GMT
Not After : Jun 8 13:01:21 2025 GMT
Subject: CN=1acfcd423388a5f82c75dabc090bdbb9f7cbe9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:d0:1f:23:85:f2:b5:22:38:28:e6:70:b4:
3f:5c:01:27:e3:47:bc:ed:db:fa:45:33:4b:af:14:
88:a1:a5:24:cb:aa:86:17:55:e6:29:83:13:ba:0d:
fc:af:6b:74:9d:db:76:89:0a:50:fc:6f:dd:7d:3b:
24:ea:52:35:32:ec:00:44:25:fe:3d:e9:a3:76:e9:
a2:53:8f:da:f0:37:fa:35:84:2c:0f:53:b0:11:9f:
71:7a:ba:fc:ed:8d:d7:ab:96:9d:74:d5:45:93:db:
d6:2e:0c:6d:83:0e:16:32:49:ba:c6:a4:93:ea:ed:
a0:8b:2a:cc:7b:3c:39:eb:f5:a5:fa:2c:3a:07:35:
22:8a:ee:13:9d:0a:17:c0:b6:0e:22:1e:14:12:e6:
7b:50:d3:0b:67:b5:cd:8c:e0:39:09:d1:6f:fc:f1:
d2:37:0f:00:31:fd:5b:47:48:16:48:d8:13:d1:dd:
9e:85:07:f7:e7:1e:b7:98:58:85:29:65:49:12:07:
d0:be:84:2d:31:60:21:7d:ea:34:73:87:9d:36:9a:
c0:92:4f:60:e0:f9:a2:0e:6f:6b:ec:cc:f6:27:54:
31:df:b0:62:78:1a:2c:3d:2d:8e:72:47:08:49:4d:
d7:44:85:c6:ac:63:28:4a:e9:8c:6e:5e:09:d9:fb:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:CD:42:33:88:A5:F8:2C:75:DA:BC:09:0B:DB:B9:F7:CB:E9:E0
X509v3 Authority Key Identifier:
keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e7:38:dc:9d:50:cd:f3:17:b6:32:5c:5b:a8:16:73:f1:c4:
9e:26:41:f8:1d:38:da:f8:75:85:a4:ef:15:bd:67:62:2d:83:
1d:20:6d:36:e2:a4:a7:de:0c:ab:ba:ce:26:e3:3f:5f:48:ab:
63:eb:d6:f1:2e:61:00:6f:75:75:50:7e:0b:b6:06:e1:52:c3:
06:38:a0:76:df:ae:ef:bf:56:42:1f:a0:4c:c9:35:88:21:a2:
cc:31:96:e5:ba:f4:e5:59:a5:44:36:64:8a:20:9c:ed:c0:2e:
54:e4:70:d5:05:c5:45:9c:00:c2:32:13:88:19:08:94:dd:16:
06:dd:48:18:c2:bb:0a:63:d9:90:a9:18:8d:c5:68:8c:c7:98:
87:eb:66:18:39:cc:39:c5:51:0c:d6:c0:39:33:58:c0:25:d8:
9a:02:6e:9c:51:07:25:ae:f8:09:74:3b:db:e6:3a:69:4f:01:
6d:84:cb:41:26:9f:06:2d:c8:17:36:52:57:44:a0:91:7a:0b:
b5:ec:93:e0:01:2d:5b:1e:81:b3:e7:18:e3:e0:fc:d7:b6:a9:
74:e7:09:ef:d1:6d:9a:ae:ca:28:f3:24:6c:c3:f7:50:77:fa:
3f:ac:b8:ff:d5:78:05:e2:83:d8:92:dd:91:48:3c:6d:82:08:
33:85:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:48:50 2025 by rpki-client