Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: 6EDr3y7g+X7EpET576w5nA+lxiJ+1vMaTenDvQ2Hzmk=
Subject key identifier: 18:BC:9F:13:83:51:5D:DC:F2:1B:75:58:72:12:85:0E:ED:D2:C4:DE
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 01974666F56B8C5E569C36BEF91CC91D734B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 03F4
Signing time: Fri 06 Jun 2025 18:00:42 +0000
Manifest this update: Fri 06 Jun 2025 18:00:42 +0000
Manifest next update: Sat 07 Jun 2025 18:00:42 +0000
Files and hashes: 1: gI8FHF_izRDz4HHZpobs4Zj05J0.roa (hash: GbcMauDvpSu6wVwWHbPZUYa52/CtjqOFFexRC6qtGdE=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: wvxGQqvL2DsD82NJaHmgmyaFYoYL0L1/aE3oZWWgsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:f5:6b:8c:5e:56:9c:36:be:f9:1c:c9:1d:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Jun 6 18:00:42 2025 GMT
Not After : Jun 7 18:00:42 2025 GMT
Subject: CN=18bc9f1383515ddcf21b75587212850eedd2c4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:58:d1:82:bb:89:63:28:99:26:4b:30:18:
a6:29:4b:5b:5d:c6:f2:92:65:92:89:3e:d6:93:b1:
ff:9e:d0:dc:f7:8c:fd:14:90:65:10:ff:d4:0a:03:
5b:1e:31:0d:88:14:ae:14:ef:57:3c:3a:9b:35:fb:
67:ce:24:52:a8:70:7c:46:5d:58:bf:e8:fb:dd:d0:
58:75:9c:3f:d5:d0:12:8a:bb:78:f9:3f:af:c6:40:
dc:92:85:83:5b:a6:92:7d:f1:28:fe:90:31:55:7f:
7b:79:40:43:e9:89:6f:7c:9a:7f:99:e7:a1:e2:72:
5b:97:3f:3f:91:71:39:d9:fb:61:a7:da:8a:76:f3:
c3:fa:5f:23:71:3c:f5:b8:70:b2:32:ec:58:c1:a3:
95:37:66:fd:97:bc:19:bf:35:80:f5:49:3c:04:15:
94:45:ae:18:b6:3c:06:a7:6c:e6:7a:c5:79:2b:9e:
cb:15:24:ae:66:10:dd:65:37:db:31:cf:5e:ed:0e:
2c:c1:3d:c9:0d:a9:d5:ff:1e:34:db:2d:95:57:30:
82:03:e8:b1:2d:c3:9b:89:0e:b7:1e:ba:19:50:af:
23:b2:bb:ec:13:ef:59:ca:85:f8:66:65:79:4d:c0:
3f:bb:ad:d3:ba:74:44:89:13:04:1c:8a:ab:ff:cf:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BC:9F:13:83:51:5D:DC:F2:1B:75:58:72:12:85:0E:ED:D2:C4:DE
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ad:a3:b4:2d:ab:9e:ca:69:a7:3a:5b:e2:59:8e:74:d5:11:
23:d3:d2:60:62:d3:e0:2d:75:93:13:8f:18:89:03:b1:47:cf:
32:da:29:07:8f:96:6d:f1:5d:c8:ce:4a:9b:df:c1:b8:9d:f1:
dc:3e:07:2d:53:e1:cc:14:0e:18:a9:c5:04:e5:41:0b:bf:41:
0a:fe:22:f6:4f:3e:72:2c:62:94:a1:56:98:71:43:42:81:5a:
20:06:5d:57:c1:93:5a:5e:7b:7a:5e:d6:7e:9d:32:18:55:1f:
65:85:7f:79:b8:d9:ac:28:5e:cb:76:57:aa:5c:e8:fa:f5:a5:
10:27:25:d2:4e:4c:67:eb:c9:1f:9f:dd:a9:2d:28:ab:3b:8b:
9e:e0:7c:1d:63:95:ba:c3:dc:39:5d:a3:ad:f9:d2:09:13:f6:
6f:15:42:db:1a:72:ac:39:2e:d9:90:f9:47:46:08:94:29:b6:
bc:d0:28:c3:e3:5a:4a:50:a5:aa:f6:d3:83:d0:45:38:16:f7:
0a:46:52:52:29:7f:28:c5:4a:7c:3e:b7:92:47:25:78:ac:36:
43:f0:c6:06:c4:ce:75:41:91:59:c1:c0:be:cf:76:26:44:5b:
d8:cd:0d:e9:69:32:29:04:f2:00:6b:96:70:22:2d:9e:97:d9:
e8:cd:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:18 2025 by rpki-client