Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: mZdxBVYQ8f/2HTaU64Y8SCCHsgQNa8GVdHAYqc4dkEQ=
Subject key identifier: 58:02:13:35:B4:73:11:2C:01:A1:B6:19:B7:75:3E:4E:12:73:D1:6A
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 0197B7452936EE0DB684EBF5F4712F9C6B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 1162
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: cdsTuUk/wXj6TkPrxCxyluEWdgDBpxE2Twr4YuQuCJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:29:36:ee:0d:b6:84:eb:f5:f4:71:2f:9c:6b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=58021335b473112c01a1b619b7753e4e1273d16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:ee:49:9b:ea:7c:67:1b:b7:f8:e6:e4:7b:
79:a8:6a:29:b6:d5:4b:9a:fb:bb:b5:d6:90:a3:04:
fb:c8:9d:14:55:3b:fa:d3:7d:1b:27:9e:00:7c:03:
bc:fd:99:27:59:d8:da:97:00:02:d3:2b:1d:10:26:
b2:07:b9:91:2b:40:1b:fa:d6:7c:b1:a7:51:8c:7f:
ac:36:6f:b0:e5:7d:1e:47:2c:9d:f3:11:c9:97:23:
25:3d:df:37:27:3d:8a:da:b2:2a:9c:84:28:89:d1:
d6:6a:1c:aa:a7:65:eb:8a:c1:45:e2:71:4f:f5:1d:
a3:a0:61:b4:1a:ab:d8:36:38:ae:2b:de:5e:7f:24:
ee:d1:48:36:90:97:8e:1c:6e:72:72:c4:34:56:ff:
be:6d:98:fc:d6:da:97:e3:5f:d4:4c:aa:fc:16:f7:
59:5d:e1:57:02:87:fa:b3:08:16:a9:34:97:e7:53:
aa:00:34:49:70:98:ed:e8:44:76:19:69:2a:5d:86:
a6:7a:c1:70:48:32:2c:ee:ca:fe:84:a1:1f:50:e5:
42:f7:3c:88:4b:22:71:98:b3:c1:ca:9d:b3:c1:95:
ec:65:e9:90:aa:5c:88:da:d1:a4:50:52:26:7c:4d:
21:f4:ae:de:a6:08:dd:92:80:c4:5f:7c:a6:82:59:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:02:13:35:B4:73:11:2C:01:A1:B6:19:B7:75:3E:4E:12:73:D1:6A
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:89:59:18:83:3f:22:cb:47:9b:98:7e:b1:e8:31:cc:d8:
db:0e:ef:f7:69:ba:e2:2d:5b:ce:8a:cc:b8:af:a7:8b:80:36:
25:5c:f0:a4:d2:be:0f:6b:0f:f3:59:2c:e7:00:55:af:16:06:
f8:c6:69:9e:8d:0d:10:09:d5:72:68:72:22:22:18:e0:c2:d8:
75:0a:d3:5e:86:1d:b0:c4:2d:58:06:61:f0:49:ff:95:49:35:
29:27:c7:2d:de:8a:ed:54:29:76:f8:62:6e:44:18:f5:11:90:
cc:66:49:db:a1:4c:a6:e7:a1:54:0c:3d:bf:cd:07:d1:e1:f1:
58:7e:da:fd:a4:f8:1d:4f:a6:91:53:75:38:c2:12:8b:a7:87:
f1:17:be:41:33:1e:b5:37:03:8b:d5:69:85:05:db:72:e4:89:
55:9d:dc:bf:e6:84:02:10:1d:c0:b9:a2:be:d3:8f:94:b1:86:
95:08:f2:26:48:b5:6e:83:7e:03:32:cf:42:c1:fe:70:da:37:
8f:c0:c1:27:18:0e:b9:50:54:da:36:28:f4:d0:db:9b:61:a0:
6a:13:cf:0c:f1:b7:b9:47:02:c4:94:1d:76:37:3a:2b:1e:3a:
72:ae:33:fd:93:3c:da:ef:1e:95:d9:38:39:0e:d4:23:7e:af:
b7:00:b6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:15 2025 by rpki-client