Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: nFxPbGb1VoA8gnRwVv4+T0r50m/ey4L+RIAB6ZJEc1A=
Subject key identifier: 71:F7:E7:87:11:8C:27:93:E5:03:CD:1C:EF:4B:3D:9B:60:9E:BD:A8
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 019746302577E8C2D673605BE2EB4A1C39D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 150C
Signing time: Fri 06 Jun 2025 17:00:49 +0000
Manifest this update: Fri 06 Jun 2025 17:00:49 +0000
Manifest next update: Sat 07 Jun 2025 17:00:49 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: 8vfO8k+3+TGktMakpeVmh6KIBq5voQ96tmt6I+62vvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:25:77:e8:c2:d6:73:60:5b:e2:eb:4a:1c:39:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Jun 6 17:00:49 2025 GMT
Not After : Jun 7 17:00:49 2025 GMT
Subject: CN=71f7e787118c2793e503cd1cef4b3d9b609ebda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:11:18:f4:37:26:52:7f:7b:2f:eb:1f:19:
40:c8:7f:5b:ce:1c:c9:66:e3:a6:f8:a6:f3:1b:da:
ef:36:9a:07:78:b9:95:2f:46:cf:91:bd:9e:95:6f:
95:c3:e0:46:0c:b1:89:4f:45:d9:c4:52:39:da:3d:
c3:49:cf:17:54:33:b2:ce:b0:98:05:23:1d:7c:0d:
bd:97:e1:8d:32:f6:9d:4f:cb:b8:f8:19:bd:87:e4:
8d:73:1c:99:74:bc:46:8b:0c:68:69:2e:16:4f:dd:
af:49:ee:4f:97:f4:74:e4:8c:bf:1e:21:95:a4:22:
96:88:82:e2:ad:14:bc:57:86:b8:36:48:04:61:52:
d8:b4:50:84:6d:f6:ef:09:d5:c6:96:4b:d3:21:39:
02:32:da:75:41:98:57:09:d7:ac:7c:ad:b2:57:36:
63:4f:9f:eb:6b:29:d0:dc:7a:2d:23:6c:4e:c0:33:
7a:ed:33:f9:f4:b1:08:8e:12:1a:f1:a3:03:3c:e4:
4f:43:61:05:17:73:06:b4:34:67:79:05:c2:01:34:
65:a9:a9:e9:69:5a:ca:b5:5a:ae:45:ca:9a:ab:a5:
af:1b:a0:4a:21:91:69:61:9d:55:d2:fc:67:17:7d:
19:ee:13:23:67:5e:cd:45:5c:3a:be:dd:40:64:37:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:E7:87:11:8C:27:93:E5:03:CD:1C:EF:4B:3D:9B:60:9E:BD:A8
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6e:f1:f7:14:36:23:59:7a:1a:e8:ce:0a:cc:39:6e:5c:14:
52:30:91:bf:16:bd:96:ed:30:b3:b3:ed:e5:94:3a:16:65:7f:
71:8e:95:e1:28:b0:99:5e:23:d9:d4:0c:0c:d8:9d:02:5a:a8:
19:c2:68:6b:a6:26:45:eb:d6:47:3f:22:49:6e:22:26:fc:6b:
95:65:ae:15:45:96:87:0c:e1:51:b4:53:8a:8b:d1:d7:a0:7c:
c3:bf:49:05:c1:1c:d5:51:ff:fb:c6:69:cc:91:b3:18:2a:83:
b3:99:d2:fc:35:08:9e:80:04:28:a1:67:9a:cd:10:7b:9e:6a:
b5:e5:a0:28:0c:ba:28:92:78:45:90:56:2a:44:12:dc:a3:b5:
f3:22:8d:63:1a:f7:48:a2:a4:8a:43:11:27:07:73:15:54:b7:
c0:f5:c9:d2:4b:59:47:df:f0:c7:22:de:4c:32:ef:d3:1c:56:
d5:59:ee:65:c9:36:55:7f:80:fc:96:cc:0b:5a:23:62:3f:63:
8a:cd:d2:2c:09:9f:b7:f9:c1:63:1a:f8:dc:9e:e7:94:02:b9:
41:2d:2f:fe:c1:2c:60:a4:42:03:62:66:0d:31:ab:05:0a:fa:
11:cf:31:22:4b:e1:d2:02:03:ae:6c:31:3b:5f:c0:2b:55:d6:
e4:83:12:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:23 2025 by rpki-client