Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json)
Hash identifier: 6ipudDbeOg8kTFGy/GhtIMDuLJIPWEsIp/OpJl3wc4Q=
Subject key identifier: 6C:A5:A5:2B:81:47:21:D4:EC:70:4E:FC:6E:27:B0:9A:CF:17:D5:24
Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Certificate serial: 019748C32A868461DE8E8A87B7C3D6381BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
Manifest number: 1157
Signing time: Sat 07 Jun 2025 05:00:39 +0000
Manifest this update: Sat 07 Jun 2025 05:00:39 +0000
Manifest next update: Sun 08 Jun 2025 05:00:39 +0000
Files and hashes: 1: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: hx8MPjJ22oL4zrp7nHC+3gkW691fuA9n2L8ubmznLuQ=)
2: pNHLiZosFPLwAP2_39dVXVedoA8.roa (hash: 21Dk8gbrcOnUWwtpjgoXFZDgkCZkwg2MK05wmg5NEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:2a:86:84:61:de:8e:8a:87:b7:c3:d6:38:1b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Validity
Not Before: Jun 7 05:00:39 2025 GMT
Not After : Jun 8 05:00:39 2025 GMT
Subject: CN=6ca5a52b814721d4ec704efc6e27b09acf17d524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:6e:d8:c9:b2:ba:1b:9d:11:61:fa:43:07:
53:d4:c2:5f:97:38:4c:a5:88:1d:25:d7:92:16:4b:
44:c5:b7:f0:12:68:f9:a6:a9:5f:9c:8c:da:4b:33:
69:b3:fc:d7:c5:5c:2e:f9:02:0f:cf:d8:c2:68:0d:
b3:65:73:7b:fe:7c:c9:76:8b:2f:c3:bc:b0:83:de:
b3:6e:68:9e:e3:d0:99:f1:ac:72:60:da:28:9e:8a:
17:79:9b:6a:e7:7f:09:d0:1c:b8:7c:63:e7:3b:28:
c1:27:46:82:e8:bd:b5:38:d0:6b:55:0a:cf:47:a4:
07:09:ea:a9:97:13:68:c5:30:e3:e3:e4:62:e3:e9:
c7:40:01:d6:7c:d5:f5:f2:39:d9:9b:07:a1:96:d2:
64:e2:67:55:19:26:6a:8b:d8:8b:c0:f8:3e:b2:25:
d9:ba:1c:bd:13:ff:91:0e:e2:54:1b:f1:05:8c:ed:
53:8e:b5:1d:a2:42:90:53:3e:a1:73:14:bf:e8:ad:
70:d7:da:50:5a:53:33:48:bb:27:bd:b6:f5:61:73:
c0:47:a7:98:7f:a8:ab:19:e5:03:67:a5:62:9c:dd:
d7:1e:08:a2:9a:45:a1:2c:5d:4e:6e:7f:8f:f7:d6:
0f:b7:7a:12:53:fc:eb:d0:cd:f2:a4:76:3b:2b:e6:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A5:A5:2B:81:47:21:D4:EC:70:4E:FC:6E:27:B0:9A:CF:17:D5:24
X509v3 Authority Key Identifier:
keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5b:48:fb:44:09:67:5e:39:ef:74:8b:9a:be:4f:a0:64:da:
c2:e4:e9:ff:1d:52:c1:9a:74:34:25:95:e3:6f:63:e4:6d:f4:
5c:33:51:cf:47:28:59:ca:83:47:46:04:d6:e9:2e:39:e1:c2:
db:3f:ba:bb:0c:65:2b:45:3d:a8:4a:84:7e:35:32:ac:a9:b9:
db:b8:8e:b5:95:5b:b6:6d:98:7d:37:b7:6c:cb:93:3d:59:45:
b3:22:4b:e8:8c:0d:48:60:36:42:02:49:be:9c:21:44:32:cd:
ec:34:d7:2e:e7:37:ec:c1:e9:95:1a:f1:a5:0e:aa:f0:e2:32:
16:ac:48:8d:91:e4:f6:59:10:6f:ea:f3:ba:03:59:1d:30:a0:
42:c4:c8:36:41:8f:89:8a:14:89:8e:21:ba:9a:c5:bb:d6:78:
36:b1:df:0c:29:89:01:3b:9f:d4:86:44:42:47:d7:91:22:4e:
f8:f4:77:2a:83:63:69:35:55:d0:ef:45:29:e9:39:58:67:fb:
70:c4:c5:07:db:0a:30:be:13:69:b2:40:5f:e5:35:3a:8e:2c:
d9:38:47:2a:74:d8:b9:35:6d:0e:44:a9:3b:3b:a1:da:cd:e9:
20:23:31:aa:0d:13:15:a4:37:bb:50:3b:30:fb:e5:c1:97:3b:
8d:da:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:39:14 2025 by rpki-client