Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier: 4FBOfKmbsxQoUhBDoQHwJvBvIIgG4JBjBcGWtPmCLRE=
Subject key identifier: 02:79:19:14:71:8C:07:32:41:98:00:1D:DD:ED:33:DC:39:10:A5:F5
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 0197B9A1425F809FA6432882660A736DE8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number: 074C
Signing time: Sun 29 Jun 2025 03:00:42 +0000
Manifest this update: Sun 29 Jun 2025 03:00:42 +0000
Manifest next update: Mon 30 Jun 2025 03:00:42 +0000
Files and hashes: 1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=)
2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: klUdRnL02yS26/eXyC+zXzSAxX+JUn90xh44n0zUapc=)
3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=)
4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=)
5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=)
6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=)
7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=)
8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:42:5f:80:9f:a6:43:28:82:66:0a:73:6d:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jun 29 03:00:42 2025 GMT
Not After : Jun 30 03:00:42 2025 GMT
Subject: CN=02791914718c07324198001ddded33dc3910a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:51:d1:4b:5b:1e:e8:f2:fc:5b:17:61:93:
de:46:34:fe:cb:82:bf:50:6e:df:fa:19:06:bb:88:
62:93:93:6b:46:91:37:a8:c9:ac:cc:7d:a2:d9:22:
d8:bf:b2:6b:01:1a:f9:0c:69:08:8c:27:66:fc:a9:
db:a2:cc:a3:30:fa:54:b6:e7:c4:f4:69:bd:b7:30:
ff:96:06:6b:a0:96:ce:a1:b8:85:1a:1b:c2:06:a9:
bc:c3:b8:75:5d:55:a1:df:58:22:e2:ca:b1:49:dd:
da:10:ba:aa:df:8f:ba:a2:db:af:dd:e1:60:14:11:
56:77:2c:27:01:10:87:4c:0e:f5:5e:56:1b:31:9c:
9e:34:34:56:6f:57:a1:11:b2:44:e7:dc:af:92:c9:
17:e4:f7:47:84:ae:2d:85:68:4b:df:fa:48:c9:02:
d6:4e:8a:54:01:fd:21:0a:f7:fc:58:be:a3:2b:a8:
bd:14:f9:1f:e7:5b:50:66:2b:f7:26:5e:7b:93:18:
ae:38:57:86:91:4e:07:69:23:c9:c9:12:a8:1b:d2:
cc:83:ee:80:24:01:1e:bf:08:a6:35:4e:9e:f2:d0:
42:b8:63:58:ab:4f:7b:ed:33:a9:47:21:aa:3a:c6:
6b:21:0b:98:9a:53:0b:04:40:db:fc:ee:fb:b3:70:
1d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:79:19:14:71:8C:07:32:41:98:00:1D:DD:ED:33:DC:39:10:A5:F5
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3a:1c:c3:37:31:f8:cc:d1:3e:fd:8f:43:35:91:22:4b:f2:
87:eb:ea:7d:32:cf:4e:4e:55:7f:13:4a:a6:71:a3:af:6e:c4:
d4:46:89:8b:18:56:74:80:b2:e1:28:4a:4b:55:dd:b7:10:11:
34:e2:a4:e5:5c:16:37:a3:32:05:33:66:9f:23:13:41:f4:6f:
02:d8:36:a5:b0:79:07:01:48:e8:28:96:d8:49:86:7a:51:6c:
f6:75:83:07:d4:f1:ff:10:4d:25:f1:da:10:99:a7:1a:45:05:
95:ae:02:ac:da:60:3f:95:54:24:0f:3d:c1:c3:db:97:6b:4c:
a4:0f:ab:2c:6c:25:1e:33:1e:86:f8:5f:32:b5:ac:6d:41:16:
a9:e8:d3:9a:8f:36:3f:8a:1a:43:d1:c0:9a:c9:ac:8b:f5:2b:
52:cf:d1:e2:1d:99:b2:7b:03:32:2d:2e:c2:26:62:80:1a:7a:
52:dc:0f:f8:be:7e:4f:ef:e8:d7:4d:1b:ba:55:a2:5d:02:e1:
9e:a0:c0:2e:6e:eb:e9:42:44:29:e5:59:dc:52:6a:1e:b1:b5:
29:63:27:95:2c:34:8f:80:85:e4:67:e4:67:d7:2d:86:44:d8:
c4:90:b4:a9:67:a0:e1:df:49:fa:3f:66:ff:cc:b6:ed:16:29:
17:ca:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:30 2025 by rpki-client