Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: mrBkTFcZ8tpk75NvN5scAmRfkz1IrSK322IatC8P0K0=
Subject key identifier: 14:7A:BB:4E:B6:7D:AD:82:72:C1:63:49:57:77:87:32:70:10:5E:88
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 0197B6A15A09D9BF40BD96B80CCEA41836DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: 3MF6BuznJ4OfS1C5J5sFom719Ag.roa (hash: SgA1M+YF5PTZbvqD1BRuBpZXk3sFWrE/PgQsVhuZ/S4=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: KXbTcXhf5vm1vKjhAwepwUsI+nXtcJYUXUtuyI673+Q=)
3: pFxtApTW54EbBHD0oDAnh4jDG3E.roa (hash: gJNAVWKEII1RjZzGIybSB1Nkau8KmzUZnx0gYczpW88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5a:09:d9:bf:40:bd:96:b8:0c:ce:a4:18:36:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=147abb4eb67dad8272c163495777873270105e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:56:21:5a:18:c6:c6:79:af:62:2f:f7:66:
ca:08:5d:3c:2e:3b:55:f6:d9:07:98:52:50:72:1f:
42:e1:f0:19:2d:7b:3f:0d:5d:01:8c:d6:bb:df:e0:
03:43:a1:55:8a:8d:9e:73:30:3b:49:15:97:66:48:
cd:d0:d4:63:5a:79:6d:4a:12:af:7a:7b:d8:da:6c:
93:bb:45:a4:42:4b:22:b5:60:76:fd:80:4c:23:b3:
34:90:ad:ea:73:da:f7:a7:64:21:fe:a5:fb:eb:b6:
c8:d2:b5:5f:8c:e8:83:17:41:0e:9a:21:fb:0f:d1:
67:85:27:57:ee:d5:64:a4:87:22:aa:a5:9d:9b:bb:
58:cc:8f:4f:ae:56:64:e3:62:75:c5:7a:2c:8d:35:
da:dc:25:24:eb:05:ec:e1:33:bd:81:33:19:eb:2c:
66:3a:a6:f0:d5:09:40:a6:7c:68:02:b7:97:e3:f3:
65:54:c1:9c:be:ec:df:a1:30:d6:69:63:b3:37:7d:
07:23:a0:e3:18:ec:fe:ea:82:e7:a3:17:57:2e:b6:
af:b9:9c:6e:10:e9:46:84:ad:96:47:36:e9:c9:2c:
8a:94:99:42:a4:19:8f:9d:a8:bc:bf:c5:1f:7b:a0:
39:26:e3:35:3e:ef:da:c4:3b:19:cc:3c:8a:5b:fa:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7A:BB:4E:B6:7D:AD:82:72:C1:63:49:57:77:87:32:70:10:5E:88
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e2:09:8d:f5:19:7b:e6:0c:d3:21:ad:23:5a:9c:c6:b9:aa:
dd:38:cc:3d:b4:6f:ae:a6:25:3c:d7:d1:44:e9:2b:83:63:c3:
bc:04:75:69:5a:29:31:5a:fa:95:29:ad:f4:dd:2d:e0:65:2c:
49:53:72:e0:de:6a:18:33:f4:b9:8f:23:fc:57:95:39:30:fc:
61:27:66:15:9e:db:6f:5e:48:d4:8c:f5:34:b7:aa:0b:7f:97:
ee:02:aa:8a:1b:eb:1f:b5:cf:81:fc:3d:70:2b:bc:d8:40:d9:
77:dc:41:3a:db:51:d5:5a:75:fb:30:0e:f8:58:39:81:20:fb:
45:cb:b2:a0:38:6a:9f:e5:69:9d:f0:2f:19:55:ed:1b:5f:31:
29:7d:b5:a7:4d:72:17:ee:2b:94:bf:05:09:ad:5a:dc:e0:a9:
45:c2:70:3c:77:f4:5c:28:65:af:3b:5d:0b:5e:c6:2f:5c:94:
15:17:56:de:42:92:db:c9:e1:39:d5:39:f1:01:67:4a:93:7b:
4a:2d:4a:7a:89:54:0e:b9:23:c3:6b:93:97:11:45:65:68:be:
13:4c:0d:f9:b0:e9:51:57:54:9e:1f:9d:d1:1f:69:90:c0:d2:
81:1e:1b:49:7a:20:65:fa:af:8a:dd:50:77:56:51:fa:c8:42:
99:1f:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:59 2025 by rpki-client