Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier: fFMcN12kpOAlr+Ygl9riO4gwd9QieNU9YluvU3eXujA=
Subject key identifier: 5A:75:F3:AA:A3:85:60:26:99:81:FC:B9:09:9C:3A:5E:AC:6F:E2:6D
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 0197B96B0BF5705980CF6D5747F56EDD1C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number: 0914
Signing time: Sun 29 Jun 2025 02:01:29 +0000
Manifest this update: Sun 29 Jun 2025 02:01:29 +0000
Manifest next update: Mon 30 Jun 2025 02:01:29 +0000
Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: 26EITsjRBL95U/Cqj6N2Qq+GbazqsaSkih3NebjNs8Y=)
2: nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa (hash: FtjNcs/Ikv5rVNiwdDeOxS0oJdHrtBYVifsyHe4+WbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:0b:f5:70:59:80:cf:6d:57:47:f5:6e:dd:1c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Jun 29 02:01:29 2025 GMT
Not After : Jun 30 02:01:29 2025 GMT
Subject: CN=5a75f3aaa38560269981fcb9099c3a5eac6fe26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:b0:79:c0:29:c2:5d:cf:23:f7:69:ed:4a:
35:41:aa:c4:e7:e0:30:3a:3d:23:ce:9c:39:27:eb:
f8:fd:da:50:30:05:5f:9e:22:e5:c4:63:c6:48:20:
cd:72:37:2e:fe:aa:68:6e:d3:e2:83:fe:83:f1:3c:
69:71:65:15:56:6a:59:7d:8c:27:42:9a:79:9b:da:
47:1a:e5:50:8a:bb:95:c0:a2:d6:87:b8:5f:72:c5:
fd:53:6f:da:df:91:94:7a:ae:71:2d:47:bc:05:cc:
da:59:f5:55:92:33:28:3a:29:2d:93:00:25:ba:af:
cc:a2:86:4c:6e:6d:fa:35:b7:98:be:41:23:81:f4:
7e:b8:b2:7b:23:bc:bd:2b:53:7f:5e:a0:11:2e:f2:
e1:5d:9e:29:7f:e3:06:fc:18:38:ec:c3:ac:aa:31:
69:20:bd:7d:6e:aa:44:c9:a6:11:14:36:7b:f8:ac:
1a:64:e7:66:73:be:ab:4f:a1:5b:c1:30:43:90:eb:
15:40:35:82:f0:cc:cd:f1:f7:c6:c3:c8:b4:8f:81:
c8:c5:16:a0:c9:16:a2:41:2c:8d:27:e4:41:c3:d4:
79:97:87:1f:30:16:c4:ca:58:b8:42:c9:64:c4:64:
79:95:53:c5:7d:a0:ae:f8:4d:85:95:31:87:00:42:
a0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:75:F3:AA:A3:85:60:26:99:81:FC:B9:09:9C:3A:5E:AC:6F:E2:6D
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:22:ed:52:73:69:ef:1a:8e:af:89:13:d2:cf:44:4c:c1:84:
9c:e7:0b:b2:3b:58:e3:ac:7b:23:37:68:f4:da:ff:74:ae:e2:
04:24:90:c6:57:94:bd:c4:94:b5:0c:3f:30:6a:cb:61:bb:d7:
b8:92:04:c3:c6:91:a5:24:ed:33:f9:36:d3:89:2c:a1:4b:e9:
bd:27:be:28:cc:83:d3:3e:8c:69:9e:12:f9:3b:2f:a4:e6:1d:
0c:1e:05:50:f1:d5:40:22:8a:30:44:73:36:d5:81:c5:03:02:
ef:a8:74:c0:61:f0:6d:34:01:6b:41:40:11:5b:1f:34:df:00:
e1:3d:f7:29:23:09:18:91:21:07:15:e7:75:d8:26:25:4f:cf:
18:cd:dd:f8:e0:31:35:f5:d8:d6:8f:53:75:7e:61:97:ad:43:
fb:75:9a:73:e1:bf:10:30:81:52:bc:50:f4:f5:bb:86:ca:1b:
ed:54:86:24:c1:10:c6:35:79:a3:1a:8d:09:18:d2:3d:ee:25:
2e:08:c0:f9:fa:3f:d9:49:cc:b9:27:79:4e:5f:cf:ee:50:0e:
aa:06:b7:a1:fb:ca:61:e1:da:0b:c6:3b:30:5a:3a:e6:55:03:
09:c0:23:57:99:83:fd:80:6f:97:69:54:f9:c5:d1:37:bd:f2:
00:a4:ac:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:01:21 2025 by rpki-client