Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: qoIIk74Exk4s0Y9n4zE4qiGeacsNPurAoIx/MvJTIP4=
Subject key identifier: 68:84:38:6C:DC:1A:74:01:98:B8:4D:77:3C:DB:84:91:F9:4C:60:76
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 01974B8DBC2CCE6D62B396950DA6EF3C1ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1211
Signing time: Sat 07 Jun 2025 18:01:09 +0000
Manifest this update: Sat 07 Jun 2025 18:01:09 +0000
Manifest next update: Sun 08 Jun 2025 18:01:09 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: pKkEtYgv89cNkSgjv3ni4nSkY8G3WpeXPPnRhDEku3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:bc:2c:ce:6d:62:b3:96:95:0d:a6:ef:3c:1a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Jun 7 18:01:09 2025 GMT
Not After : Jun 8 18:01:09 2025 GMT
Subject: CN=6884386cdc1a740198b84d773cdb8491f94c6076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:fa:ec:a9:01:45:a1:b1:2b:7c:10:c8:3d:
c4:06:80:30:31:a9:c8:d6:5f:09:8c:11:2a:1f:45:
1d:99:de:3a:93:f8:3c:5e:42:eb:8c:c0:59:34:12:
bb:2d:bd:32:79:d9:6e:ba:92:86:2d:3e:17:69:8a:
94:a9:68:e2:ac:be:3c:04:64:d5:3c:4e:80:7b:e3:
2f:13:5f:16:ec:e9:27:c6:4d:3e:27:f5:55:99:21:
2f:c6:61:e7:c7:99:af:00:dd:2d:c6:38:e7:16:0f:
56:45:cc:53:e6:9f:c5:59:50:b2:0f:dc:c8:c7:d6:
c5:16:1a:eb:83:3f:20:7d:72:53:27:fd:cb:da:26:
ac:c6:62:9b:c6:54:6d:8a:05:57:96:77:53:40:ea:
67:a1:29:73:22:73:65:98:a1:c9:8a:c6:9e:17:9c:
41:e8:e4:e1:2c:27:ca:28:c1:b9:c3:4a:81:ce:56:
e4:4d:99:32:b4:76:e0:60:06:a8:a8:14:d5:8d:e1:
8e:8b:ae:a8:e6:1e:d4:01:bd:64:1a:97:1d:cc:65:
fb:a9:ad:be:8f:0c:5d:91:af:c9:37:fb:3b:2a:3e:
dd:1d:6a:05:62:58:aa:8f:ee:cd:bc:62:f6:e1:95:
41:18:22:2e:d3:b9:a3:64:de:69:4a:f0:ad:9d:c9:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:84:38:6C:DC:1A:74:01:98:B8:4D:77:3C:DB:84:91:F9:4C:60:76
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:a3:18:87:cf:23:5b:2a:53:4d:e6:e7:d9:d0:33:8a:96:db:
cb:a3:d5:6c:62:69:da:cf:01:75:cf:53:5e:f3:e6:de:5a:e9:
2a:52:75:de:25:08:5f:26:5a:b5:81:5c:95:8d:62:f0:19:c9:
2f:40:9b:23:3f:4a:70:0f:d9:4e:08:5c:05:9f:18:4b:0e:95:
0f:f6:3a:2d:fa:c6:9d:1c:2b:bb:57:d2:df:de:b4:e5:ec:83:
ac:ed:3b:4f:4b:16:04:16:37:08:41:a1:65:a6:4f:10:9c:f4:
be:6b:76:76:8a:b7:af:90:4f:a0:94:8f:b0:05:66:e6:76:40:
ea:13:db:78:39:44:29:a8:e0:ef:cf:2d:83:e9:40:aa:c3:2b:
f7:a1:54:d3:07:ad:36:0c:a7:c5:c0:e9:38:1a:13:77:13:8e:
d0:f4:1d:7f:81:1f:cc:3f:8a:3a:34:9c:74:67:4d:1d:e2:82:
6c:04:01:91:6c:fa:12:10:97:48:1d:de:82:a4:be:a4:f5:d0:
31:9a:0f:c9:5f:bd:34:16:d2:b3:b3:c8:0f:aa:8a:bf:aa:80:
b5:e0:50:1e:e7:50:34:de:a1:e3:07:42:fe:6b:cb:1c:a7:37:
6e:7f:f9:99:65:5a:7a:a8:a1:1e:5d:61:18:c7:21:3e:81:9b:
98:e0:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:25:18 2025 by rpki-client