Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier: BHoUvqjAhk+x5ZnxpWG+I5ubjGWvL/ksPNEtadHinsw=
Subject key identifier: 12:65:B6:A9:D1:11:46:8D:A8:95:78:AD:F4:B4:B3:1D:CA:9F:B6:07
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 0197B7EA677513826E221D14BE292AE93A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number: 0EC3
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: a7s4IVc6pbucBFcHXkR0racHnFI.roa (hash: 8KV2P9IHJpLQQ3jZXVSSowUOoz10VVeNpPastctIMEs=)
2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: KgnQsJUp+Gs4sVJmE7OGt1u0BeSvXZwMqW79QzMh1NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:67:75:13:82:6e:22:1d:14:be:29:2a:e9:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=1265b6a9d111468da89578adf4b4b31dca9fb607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:38:f3:be:6b:48:6a:10:af:d3:22:f6:40:
4a:20:b8:29:1d:a5:4f:98:f5:3a:bd:3b:0a:f5:93:
be:e4:38:6e:1e:35:a0:65:ea:47:2e:69:4d:7f:94:
e1:75:d5:c0:b9:8f:13:da:b2:b6:37:70:49:09:18:
08:93:81:c0:08:fc:d2:d6:8f:82:b4:d8:0d:38:d3:
05:05:64:56:c1:2c:c7:f4:45:0f:a8:64:a0:b4:18:
8a:a4:b1:bd:0d:6b:98:38:a3:99:d8:90:57:61:ed:
fd:b9:51:73:ac:83:43:50:30:56:bd:e7:08:44:fc:
52:de:88:e5:e4:03:8e:fb:89:ef:d5:37:d8:ab:2f:
51:b9:5e:68:21:91:47:d5:9b:ca:ec:8d:6e:0f:76:
a9:71:61:3a:8b:d1:89:08:8f:44:e1:ba:f1:f3:34:
79:f3:1c:83:8b:3e:b8:44:46:e0:3d:dc:d0:c0:38:
3c:0b:94:40:50:e0:41:ea:05:e7:41:3f:35:e3:bd:
69:7e:ee:fb:78:fa:8f:de:3c:30:3f:7e:49:d6:f0:
a8:7f:d5:b6:35:9c:ca:bc:0d:00:76:a2:d5:89:f8:
74:1e:72:88:52:6e:39:8d:44:ec:f1:d9:3e:06:5e:
54:6d:41:8f:0b:0a:38:71:2e:b7:78:b1:e8:2f:1f:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:65:B6:A9:D1:11:46:8D:A8:95:78:AD:F4:B4:B3:1D:CA:9F:B6:07
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:53:3c:22:e6:38:42:67:d3:51:9b:a7:f7:65:60:f1:15:f1:
9d:63:e4:ed:03:41:cd:88:2c:a4:e4:7b:64:29:27:ab:f0:a6:
eb:24:b2:52:d8:54:18:cf:8f:7d:ef:db:93:80:c1:dd:f0:ab:
b3:ed:fd:78:f8:89:59:80:64:11:de:24:64:fa:5f:0e:a1:91:
66:5d:04:73:f8:6f:8f:6c:c5:c3:8c:77:28:aa:9a:57:e0:53:
bc:aa:ab:b1:65:df:43:de:2f:9f:3e:47:17:e0:ca:cc:d5:6b:
db:33:fa:82:ab:f5:e8:25:d3:7a:ab:c3:2f:31:a9:07:f9:1f:
2a:5a:39:1d:26:93:56:0b:3e:47:da:bb:07:15:07:75:98:e4:
27:16:24:b4:44:2d:5e:20:71:f2:bd:b9:fd:86:a9:ca:f6:56:
af:1a:f6:11:72:3f:bb:d5:5e:0c:8b:7b:72:db:21:b0:ed:91:
ad:fd:5b:2c:68:c0:12:eb:e6:d9:ef:b8:94:82:42:0f:1e:9e:
53:f8:6e:75:05:f3:87:df:e8:37:78:42:9a:92:58:cd:67:76:
10:f0:80:09:60:0c:98:3f:25:b9:ef:c8:53:30:fe:be:4f:53:
cd:de:10:1f:7d:dd:29:4b:12:fb:6d:7d:24:01:02:cc:1f:4b:
98:31:d1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:55 2025 by rpki-client