Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: WE9E4KgmhgfaTpE+CgmCJyami0pETTNDKlg2zMyL3mc=
Subject key identifier: AB:6C:B8:88:D9:E9:8E:17:98:4E:FA:01:5F:5F:C3:75:D3:1D:EB:95
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 0197B7457CD3DCAFDD66F8ABB4BFCF0ADA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 0FB5
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: eNjcgFLewNTQFa6DTOkOQj6tI/H5uiybrvcBMbR7/So=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7c:d3:dc:af:dd:66:f8:ab:b4:bf:cf:0a:da:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=ab6cb888d9e98e17984efa015f5fc375d31deb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:20:e3:87:12:a5:aa:36:59:5a:b0:48:01:
f1:32:87:dc:3d:4a:f0:1e:a4:ea:83:e2:60:0f:cc:
f3:a7:28:2c:a6:04:06:43:35:04:de:04:a8:91:87:
a0:0d:28:61:30:dd:29:4e:50:f2:e7:1a:19:b0:58:
50:4a:2a:06:f8:9a:bb:8d:d8:cd:16:10:94:b3:a8:
d3:20:1d:2e:70:bd:dd:f3:83:ed:d0:a0:4e:18:c3:
d2:22:9e:5a:88:d9:62:e0:91:5e:39:81:28:c0:50:
23:33:e7:52:17:14:b2:3d:55:f5:09:56:99:d7:af:
e2:f6:cf:73:99:3f:2c:b6:f0:01:6d:ca:ee:b4:a5:
94:8b:eb:1a:8f:8e:04:5f:45:35:80:09:48:26:77:
4a:18:fc:98:d9:0e:d4:ae:e4:3e:f8:48:b4:7b:8f:
7d:a4:86:b4:3c:83:db:6c:b9:5f:dd:7e:df:dc:1b:
c1:0d:20:b1:d6:71:7c:86:e5:44:e6:99:2a:c7:de:
e6:aa:27:c1:51:bf:1c:7e:1e:0d:f2:13:7e:81:1e:
26:7b:94:7d:4a:b3:d2:42:8b:1a:3a:76:25:69:62:
5a:90:ba:89:23:1a:6c:35:cf:1f:72:68:4a:22:5e:
2f:0b:78:e9:38:60:47:24:70:54:b1:f0:61:ff:44:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6C:B8:88:D9:E9:8E:17:98:4E:FA:01:5F:5F:C3:75:D3:1D:EB:95
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:1e:9e:4c:d0:4b:b0:ff:4a:9b:eb:fd:a0:5e:ef:8f:dd:
3f:d7:70:cf:d6:a4:65:af:ac:c4:74:d2:c7:79:e8:20:fe:5c:
a3:7a:4b:b7:22:85:fb:00:fe:b3:ef:ab:c7:f3:ee:ba:31:fe:
af:66:34:88:c5:77:b1:77:fa:7f:7e:8f:f4:2e:84:fe:06:53:
a3:92:2d:a0:fd:f6:d0:f2:fe:4c:92:24:be:b1:ba:09:a0:bd:
79:34:80:e1:9b:c3:56:d8:a4:8a:3e:b5:c4:b3:9d:1e:d5:03:
e0:f1:2e:41:a3:db:61:b5:d7:01:cd:07:05:09:43:0e:40:5d:
8b:fc:62:41:3d:fb:13:60:d3:8b:df:90:8e:14:d8:60:7d:22:
dc:bd:8a:46:97:e2:26:f9:ea:e2:9c:58:ad:fa:44:bd:9e:5b:
d2:fb:fc:58:f6:1a:49:ce:10:92:f2:d3:a8:ab:b0:5a:77:c1:
f4:8b:18:fd:b8:a4:6a:5c:1c:af:8e:37:13:b4:a9:76:ec:40:
62:53:16:32:67:c0:8b:9c:8b:bc:96:b5:46:d1:96:4c:f1:ff:
e3:08:72:0f:df:60:92:51:48:04:3c:77:09:47:68:eb:d0:bd:
8d:67:5f:02:3b:51:57:7a:3a:09:82:39:89:e7:b8:4c:58:6f:
73:1d:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:46 2025 by rpki-client