Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: eykshUdbmjrI8YA54aO66ve8QlLyMTqUQXWLdyASosY=
Subject key identifier: D8:46:EF:44:00:BA:11:83:ED:CD:E5:97:1C:97:95:17:0E:05:30:17
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 0197B7457C2A32C7C9DFFDDFA444542567B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 043C
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: 0UKc3c6_AlpjqrUNJh3DwStXrec.roa (hash: OhWloYhHA/1vQyymMhBSWvWrUFfn2iV/XlUJ3vQrur4=)
2: 4gvK6UAte4i_DJjE1TPbFT1Ok98.roa (hash: GoLsyVhZqQfvGCGN6U4GMh9d59SyLh07nIkIOiePbx8=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: IHVwikaZSK5N56bfY3E0P8Qlt6UX9FiVDlAZmzCHLx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7c:2a:32:c7:c9:df:fd:df:a4:44:54:25:67:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=d846ef4400ba1183edcde5971c9795170e053017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:fa:3a:50:5c:12:62:89:86:a3:af:cb:a8:
a8:f0:5f:98:c2:e1:38:8a:a7:ab:63:06:c5:96:96:
7a:da:bc:ed:c0:d0:f6:a1:84:04:26:3d:db:15:e1:
ed:3d:e5:a3:df:20:6e:88:fa:0f:dc:f5:8c:b2:e3:
21:8f:ac:4d:a1:22:07:71:79:66:c4:2b:39:b1:8b:
10:ba:51:a6:d8:8a:eb:38:35:88:08:f3:cf:73:e2:
18:13:17:e5:59:47:52:58:fb:f6:04:35:d3:3b:19:
8a:04:1e:d1:7d:93:ea:29:d9:12:5c:51:02:a0:de:
90:0b:1f:a2:88:74:f3:bc:70:5b:28:4b:be:c6:3f:
aa:66:7d:23:fe:ad:97:f1:02:48:5a:57:b7:e4:aa:
f3:b7:19:0b:63:62:c8:01:6b:6f:43:aa:a1:ff:34:
99:47:2f:f6:32:a3:34:a1:7c:35:7d:a4:eb:bc:60:
3a:6d:fb:60:94:c7:14:b3:d1:cb:ea:1d:f0:65:f9:
d8:f9:3f:06:f1:4f:3a:49:4e:95:2b:92:05:d9:a7:
96:90:a8:25:a5:21:08:62:29:99:a5:bb:b7:3b:61:
9f:89:47:02:12:ba:26:28:a9:94:26:99:c8:14:b2:
50:bf:17:ce:c0:be:fa:9f:fe:21:00:f2:09:51:4a:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:46:EF:44:00:BA:11:83:ED:CD:E5:97:1C:97:95:17:0E:05:30:17
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3f:d0:7c:c0:7d:e8:35:2b:7a:33:38:98:8e:c7:d9:88:4e:
b8:75:bd:9c:b1:f7:27:6c:1d:4d:1b:6e:a1:1a:d9:80:e7:40:
07:c2:f7:5e:27:c6:ce:b8:ec:63:86:8c:18:96:12:bf:54:3a:
f7:5e:da:46:3c:37:6c:4a:f1:81:ba:fb:de:ab:3e:a1:2e:10:
73:94:e8:03:52:63:b0:7d:40:b2:38:45:22:01:39:a7:7d:a1:
71:57:aa:eb:fa:39:02:50:b3:d4:a9:fb:85:59:ce:b3:f2:99:
03:0a:9f:f5:c0:1b:24:47:6c:b9:8e:cf:3d:15:b2:5c:ed:f6:
a8:3f:0b:fe:74:74:74:9b:12:39:bf:84:48:0b:36:b1:9e:00:
78:be:fb:52:7a:8e:ef:2a:05:0b:69:94:0e:2f:9b:ef:c4:dc:
3d:b7:24:d4:95:d2:7c:ea:7d:47:3e:e3:6e:0c:16:a9:ad:64:
00:0d:b2:d1:59:a7:16:aa:8d:1b:59:9b:18:a9:60:91:25:3a:
ab:60:78:6f:44:73:20:b8:12:d7:bc:6b:9c:b9:5f:fa:b0:e8:
7b:57:f6:d6:f1:7a:19:7c:e7:e2:f3:b5:67:31:88:86:5e:30:
bd:ea:9b:30:15:7d:8c:9a:c0:eb:c2:ee:d2:f7:9c:0d:65:98:
31:ae:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:59 2025 by rpki-client