Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: z6IzsD3dT8jAM+rdk0UoOLEw1GVvS1jnquCvNhMz+0A=
Subject key identifier: EF:76:A7:F1:64:CA:54:3F:44:8A:F8:E0:18:7F:A1:AA:0C:26:FB:DB
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 0197CA5E60D081EF156048FEF7207EDE6557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 15C4
Signing time: Wed 02 Jul 2025 09:01:12 +0000
Manifest this update: Wed 02 Jul 2025 09:01:12 +0000
Manifest next update: Thu 03 Jul 2025 09:01:12 +0000
Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: NRgWaFTMgEy08EILwK2Sdq9ghFF3+/n7XgZwHF8NbvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:60:d0:81:ef:15:60:48:fe:f7:20:7e:de:65:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jul 2 09:01:12 2025 GMT
Not After : Jul 3 09:01:12 2025 GMT
Subject: CN=ef76a7f164ca543f448af8e0187fa1aa0c26fbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:75:53:0c:5a:b3:84:8f:6d:86:38:21:0a:
eb:4a:b0:10:78:b6:27:49:c7:42:47:58:d4:97:20:
12:b2:b3:a6:9e:34:b3:3d:f5:02:f4:c1:f8:5f:c0:
60:c7:47:c7:2a:53:d5:ca:9f:60:2e:a6:47:ef:1e:
9a:5a:19:4c:ca:4e:2b:61:70:06:9c:43:9c:23:0b:
37:a3:77:4c:90:b4:04:51:11:02:6f:24:09:52:82:
33:57:d3:8a:2d:61:31:89:cc:7b:49:8e:ca:6a:ba:
8d:5d:87:29:5e:78:00:49:31:0b:ea:2b:5b:d9:de:
a0:fb:5b:c0:82:a8:6f:2f:90:da:ac:d3:ea:b7:69:
03:80:8c:b2:ee:7c:c4:89:33:e5:9c:37:53:f0:a1:
4e:c3:17:b5:9f:9a:53:2f:20:75:18:66:d8:43:72:
45:39:d3:86:57:4c:3f:a9:7c:d8:b8:88:e0:6a:00:
b5:43:e9:98:dd:76:02:a6:48:4f:bc:95:2f:b5:80:
41:6b:3d:27:e8:6f:40:e0:fe:f5:69:0d:fc:11:27:
b7:27:30:86:24:c3:a9:f9:a6:dc:03:fa:e5:51:9a:
da:38:34:c0:bc:47:85:3d:69:50:5c:5a:ba:8a:c7:
90:b2:8e:47:66:6b:02:94:6a:8b:d1:2a:e1:39:3d:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:76:A7:F1:64:CA:54:3F:44:8A:F8:E0:18:7F:A1:AA:0C:26:FB:DB
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6f:7c:2b:6d:08:e9:42:0f:58:f9:4e:49:5a:12:89:77:3a:
ab:a1:a8:6d:f8:8c:85:1e:ae:c4:34:22:db:79:17:97:6e:5e:
9e:64:ff:d4:25:4f:f0:78:03:31:ef:d7:7a:6f:8a:fc:a7:0e:
ba:a3:b7:ad:4c:56:7b:7a:61:f7:5e:1d:9b:cb:c2:fe:65:67:
cc:30:2c:68:e5:9f:04:6f:73:3e:90:ad:d1:55:89:ee:8d:94:
85:2f:99:7a:cc:f0:14:77:35:91:f5:70:1c:4c:fb:07:49:48:
de:f3:e1:ed:5d:e6:f8:38:91:37:8b:93:35:d5:62:d9:07:30:
a6:e1:20:43:0e:e9:dc:da:1e:aa:3a:73:2a:0d:8f:7f:52:3c:
7c:c3:33:18:24:ef:0c:a5:b0:07:b9:27:ca:67:4a:b3:32:0e:
1d:ea:5e:6c:f3:99:08:9e:8f:da:8e:27:05:d0:f4:99:31:cf:
7e:70:de:5b:3d:5d:b8:32:94:f2:e1:73:b1:b2:97:47:e4:c7:
7c:3d:57:ae:b5:83:2c:28:44:47:a6:e1:64:66:9a:83:24:dc:
e1:b9:3d:af:fa:63:ad:86:f9:20:c8:f6:20:4c:0d:49:f0:5f:
45:a3:af:58:59:92:c8:80:4a:cc:e9:02:64:61:7f:38:7f:90:
51:8a:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:34:20 2025 by rpki-client