Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: +JMOix0eYRngWiApExb/QQsDxY+K9Supl5+CcAGkYy8=
Subject key identifier: 91:9A:A0:3D:96:51:09:F2:BF:29:29:7E:92:01:76:B7:65:7A:67:53
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 0197B6A08AD079DA8271EA7BC4F83CC8788D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 0DB4
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: urIXoVSdh2Kw5lp7leI4UGt1ZQKnuH0Tr4/6XvwmkYs=)
2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8a:d0:79:da:82:71:ea:7b:c4:f8:3c:c8:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=919aa03d965109f2bf29297e920176b7657a6753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:b2:da:c8:27:69:f3:5c:56:4e:ef:03:82:
10:64:0a:97:0e:28:7e:bb:c4:94:d0:4e:8c:0a:72:
7f:d5:11:31:db:2e:be:a2:5a:12:2f:00:9a:27:22:
72:0b:c0:af:5d:d4:17:03:ca:d7:4a:cb:f3:10:c0:
f6:9c:80:40:9f:37:fd:49:cf:0c:d7:f4:32:2c:bb:
59:05:12:08:13:0b:11:30:d9:b5:08:82:1b:9e:16:
6f:b2:2e:5f:c5:ba:28:16:c8:11:50:79:0d:70:57:
e4:ab:3c:b3:09:c5:a8:e9:ec:c9:b2:6b:99:0f:6e:
e1:e9:95:3c:4d:62:23:af:4d:f7:09:60:8b:b1:fb:
7f:6f:93:19:03:ac:48:4e:87:1f:51:96:bd:75:c1:
55:73:3f:fe:9a:e5:3f:c2:73:64:73:0f:ba:e4:84:
c7:93:ea:01:27:f7:2f:df:48:3b:0b:d8:f2:83:20:
f2:28:ea:82:95:e7:e1:30:ae:35:83:01:b2:0d:c7:
75:68:85:b9:28:cd:12:b5:35:49:a4:a0:a8:d6:59:
bf:bf:20:85:a0:80:f8:b3:d2:c9:16:bc:c7:5f:8f:
86:22:a2:78:d3:51:bf:5b:a1:21:9e:e1:dd:35:63:
7b:85:22:d5:d9:b5:96:0c:e5:a0:0f:36:85:e8:ea:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9A:A0:3D:96:51:09:F2:BF:29:29:7E:92:01:76:B7:65:7A:67:53
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9f:89:6e:5d:ed:66:8d:41:b4:d8:21:3f:be:9e:ba:0b:35:
33:74:6e:c2:32:d5:f9:66:d6:a5:9b:fb:71:db:cc:9f:59:2e:
00:3e:52:ee:cf:cd:9f:60:25:ea:9d:13:94:54:ba:27:ab:2d:
b5:e5:c2:f1:24:49:b7:96:63:3d:24:ef:31:18:ed:4d:01:61:
7e:ec:a6:f4:79:a2:b3:b0:eb:a6:b6:79:2e:ab:b4:7e:21:fc:
f8:db:dd:c1:71:67:ac:9a:f7:a9:8e:e9:da:ec:0f:4b:12:ad:
3e:d8:07:cb:2f:d6:1e:c9:9e:a8:73:53:f4:b8:1f:94:40:5e:
9d:47:c9:a6:98:9e:bb:14:d5:e2:85:ed:84:f3:7f:32:d4:de:
6f:50:d0:d4:38:97:a3:d5:54:8a:1d:73:cd:1f:59:a1:b1:45:
a2:8e:87:3f:c6:bc:8a:19:3f:92:2d:50:34:7d:4f:29:9d:7f:
7e:f4:7b:30:63:8a:a4:41:86:03:e6:06:e1:ff:72:a5:1b:8c:
6b:99:e8:8b:91:8e:dc:27:63:ed:d9:ca:85:32:7f:70:1c:cd:
43:b5:c7:ff:b1:f0:03:68:78:44:f9:d3:59:6d:46:54:0a:59:
75:a1:c3:26:26:c8:e5:98:d9:e1:8f:46:7f:ef:bf:ef:ba:aa:
40:ca:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:17 2025 by rpki-client