Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: 0ScRZ/6JFAh6XTcCQJufVBaJOYs2BKwMsuFwJDwdZHc=
Subject key identifier: EE:B4:21:89:44:E9:97:FD:1D:18:56:6C:98:C1:34:2C:B1:DB:EB:A5
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 0197B8FD77CC9EF48403D68AD67A0220279F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 0647
Signing time: Sun 29 Jun 2025 00:01:48 +0000
Manifest this update: Sun 29 Jun 2025 00:01:48 +0000
Manifest next update: Mon 30 Jun 2025 00:01:48 +0000
Files and hashes: 1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=)
2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: YlqG6Ip2hP61x76uz6q6b/G5hKGMua5gmvLrXIObh1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:77:cc:9e:f4:84:03:d6:8a:d6:7a:02:20:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Jun 29 00:01:48 2025 GMT
Not After : Jun 30 00:01:48 2025 GMT
Subject: CN=eeb4218944e997fd1d18566c98c1342cb1dbeba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:fc:8c:ff:53:53:5f:ca:61:35:49:68:d7:
75:8f:a5:13:86:7d:29:bd:26:8a:ba:46:b8:31:9a:
91:4a:a0:e2:53:92:a8:f0:40:da:89:3f:67:f0:f8:
50:41:6b:ac:35:82:85:fa:1b:b4:fb:d1:ae:29:66:
04:78:b7:b2:05:0b:00:0b:81:12:15:87:84:a3:5c:
d3:97:ce:18:a7:e8:bb:e6:00:b3:d9:5c:81:dd:cd:
55:3d:18:d2:2d:76:92:c7:d3:b7:b9:10:b8:08:d9:
78:19:35:51:14:63:a5:d0:68:e4:cd:34:11:e4:cf:
3a:0a:07:41:7e:77:c2:c7:2d:86:37:87:d4:9e:3a:
01:1d:1c:21:fc:8e:dc:69:ee:18:c2:b9:4b:35:a8:
17:ee:d3:63:33:21:25:0d:b3:06:4e:c9:ae:14:57:
a4:16:2b:65:59:78:e8:8b:f5:cc:51:43:ab:7e:25:
ba:d1:14:ca:87:68:db:95:30:af:5a:d5:f6:aa:79:
85:61:6e:1f:72:c3:28:25:0d:9d:8e:4c:6c:7e:4a:
7c:88:f7:5b:6d:2b:9c:f5:61:e6:0c:35:0e:83:f0:
85:65:b8:07:cc:fe:b2:d5:bc:d7:fa:95:3c:39:05:
bc:fb:12:8f:30:22:c5:4e:fe:2a:73:08:e9:5f:79:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B4:21:89:44:E9:97:FD:1D:18:56:6C:98:C1:34:2C:B1:DB:EB:A5
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:00:bd:94:d2:3c:bf:53:d0:25:c0:30:f6:a8:37:9b:01:0e:
9c:02:6f:01:98:f7:55:99:b7:f5:4a:71:15:86:1b:fd:85:1e:
68:d4:74:a3:05:db:3a:03:6e:73:af:ad:14:9c:e6:1f:a3:c8:
dc:39:12:61:fb:98:4e:ed:0e:06:54:5b:e6:d9:29:b0:d8:d0:
7b:3d:80:da:ad:50:1a:74:c4:cf:34:ce:9f:6f:8a:6e:83:34:
14:97:09:e3:a8:49:fc:45:4c:11:0c:74:b9:4f:72:05:ac:64:
e2:89:b1:a7:23:dc:f2:36:d4:75:cd:32:7b:59:9e:52:44:14:
d4:ee:a3:8f:9b:84:5f:9e:63:2e:99:de:7c:24:f7:a2:f2:2e:
31:62:62:c5:cf:86:a7:d4:9e:a8:07:69:67:8e:11:eb:14:f6:
09:1d:bf:1f:c2:a7:f2:d6:51:d7:e1:54:86:62:44:62:48:fb:
e4:dd:31:90:96:d9:20:1a:19:dd:a3:00:17:7f:62:57:ca:9f:
58:16:b5:5f:23:a6:73:94:07:4c:58:99:36:d5:09:25:c8:d8:
00:a2:e1:37:f1:ed:5e:83:70:a4:2e:07:fa:f2:ca:58:88:4c:
ab:c4:49:87:2c:23:50:d3:a9:c9:28:16:1a:27:63:15:b4:4f:
13:dd:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:55:52 2025 by rpki-client