Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: vJfdsu/efba3UvpK/4lk8GtHlMcbt08ZCylX3BrWs9g=
Subject key identifier: 7D:5E:76:F2:51:7E:E0:81:F8:FD:6D:4A:3A:BE:29:1A:09:3C:5C:E5
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 01974CA020079F7DAFAB191E54F739AC5A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0520
Signing time: Sat 07 Jun 2025 23:00:51 +0000
Manifest this update: Sat 07 Jun 2025 23:00:51 +0000
Manifest next update: Sun 08 Jun 2025 23:00:51 +0000
Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: ikOPewQ79Zmdxkpx4cCb1T1HP1SnEFts6cs21RKE6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:20:07:9f:7d:af:ab:19:1e:54:f7:39:ac:5a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Jun 7 23:00:51 2025 GMT
Not After : Jun 8 23:00:51 2025 GMT
Subject: CN=7d5e76f2517ee081f8fd6d4a3abe291a093c5ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:91:92:23:dd:ac:9f:82:ab:53:85:96:ba:
a0:71:35:30:d3:2c:30:f2:30:f0:e7:75:ef:a1:40:
ac:64:46:4d:57:49:44:7f:db:6d:cd:9a:16:4e:db:
cf:42:e8:c9:31:f5:ff:a3:37:94:4f:1a:f7:6b:07:
7e:13:8a:13:d7:d4:98:12:a2:48:d8:ac:10:03:9c:
d1:0c:86:5e:d8:7c:1b:b0:fb:2b:62:bd:13:fe:9d:
81:18:0a:f6:45:df:ff:59:3e:57:ff:76:0a:b8:44:
cf:33:85:9d:e2:92:b4:9c:ff:9c:ca:f4:20:d2:79:
03:e2:89:26:c9:90:b6:72:74:5c:05:7e:f7:9e:20:
60:99:cb:33:6f:bc:aa:f0:9e:be:18:29:f6:83:1e:
99:04:cc:7b:3e:22:13:ed:e7:e5:9d:ea:49:01:7f:
24:7f:4b:6c:44:55:a9:d9:7d:df:95:cf:61:19:43:
f9:30:1c:bd:b6:93:db:e5:e4:a3:3e:7b:57:b5:53:
95:31:83:c8:f4:12:83:15:0a:c2:ea:39:e2:57:3f:
bd:4d:53:c1:d9:92:41:dc:6b:93:e1:fd:05:04:b2:
0d:2d:47:80:9a:17:2b:18:e1:6d:38:9c:cf:0b:65:
83:0d:fc:61:cd:82:40:37:92:8d:83:11:f1:36:a9:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5E:76:F2:51:7E:E0:81:F8:FD:6D:4A:3A:BE:29:1A:09:3C:5C:E5
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bc:8f:be:44:d6:97:a7:e1:e3:6e:9f:85:b6:f5:3a:5e:88:
26:6d:ee:89:4e:e5:fc:a4:7a:0b:93:a0:62:82:27:fe:a8:09:
ed:2c:2b:0f:b9:be:d2:0b:8f:65:2c:67:b0:c8:cf:08:0b:ff:
92:df:4f:19:34:ec:fa:10:d8:e9:97:f0:86:d6:5f:e1:bf:80:
c9:2c:10:d9:2c:a9:c4:4e:47:d7:2a:31:58:08:3b:24:e6:5f:
19:77:1b:1b:ab:85:a0:46:79:82:ca:f7:eb:ca:14:23:5c:04:
1e:38:3a:19:46:4b:73:38:2b:26:06:3d:9b:5a:83:a2:b8:76:
35:8d:f9:5b:39:04:66:fb:ee:97:1d:2c:02:83:1e:86:cb:9d:
96:06:2d:c6:0a:ca:93:ad:fa:77:ce:e0:54:81:b8:90:48:88:
3d:ed:d5:f6:2c:99:cb:88:61:af:29:6d:6d:7c:69:49:ad:36:
78:6e:b5:e4:1e:bd:88:97:cf:91:b8:8d:c5:e4:00:07:3d:7c:
35:a6:fc:c7:12:01:68:30:73:a5:97:12:75:63:e3:24:94:0d:
b5:a7:71:69:e1:c1:ba:1c:be:17:7f:6a:b3:ba:e6:66:df:0f:
23:00:80:8f:95:53:24:f1:41:ed:54:ac:3e:44:72:36:d4:90:
dc:7c:5b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:37:20 2025 by rpki-client