Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: UTBiE1bSQO7r6E7NpTWYtewcx+NdxlOG4MCUdaDqQjk=
Subject key identifier: EA:FE:BB:9B:EE:12:C7:7A:B0:49:B7:78:7B:20:F8:50:FB:49:86:C2
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 0197C4252F7CFBC7EAD85ECC94EDAAA821BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 154D
Signing time: Tue 01 Jul 2025 04:01:00 +0000
Manifest this update: Tue 01 Jul 2025 04:01:00 +0000
Manifest next update: Wed 02 Jul 2025 04:01:00 +0000
Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=)
2: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: pJE4LRSxJAilpvEYa1d9LriM4HMVdUgR3eHO+AS+qnA=)
3: w3g4Q6aTfVevp6COhE1618_UEpo.roa (hash: OILWL7JqdZLsWKiYyVkTfZSv9EPE18ajIqjcTio33fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:25:2f:7c:fb:c7:ea:d8:5e:cc:94:ed:aa:a8:21:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Jul 1 04:01:00 2025 GMT
Not After : Jul 2 04:01:00 2025 GMT
Subject: CN=eafebb9bee12c77ab049b7787b20f850fb4986c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:06:a6:16:e6:99:d8:ca:3e:36:3a:f7:4d:
a5:fb:77:30:78:5f:6a:a8:1d:63:4c:fc:cf:01:ba:
42:c9:65:f1:5a:fe:08:db:a2:d9:72:5f:99:00:25:
2e:07:a8:b9:66:a6:c4:e5:8f:a8:75:86:97:a1:40:
a0:f2:ad:bf:63:d9:d9:f4:31:bf:a0:61:c0:c9:fc:
eb:57:ee:92:11:5f:15:33:b9:e5:ef:d2:60:b9:bc:
12:99:43:15:ec:be:a9:4a:9a:ef:8d:aa:a3:4b:de:
93:ad:ed:9c:04:3d:9b:5a:66:6f:62:27:9e:c6:79:
2c:39:ba:21:9b:93:94:a1:d3:e2:cb:d5:58:40:b7:
4e:db:df:4c:3a:1e:8a:89:e6:4a:df:bc:ac:d3:6c:
55:f3:3f:c4:16:05:9b:d7:cd:d8:ee:2f:ec:4a:c2:
b9:56:c1:72:fa:31:f4:0d:c2:d0:9d:d2:fb:1e:fa:
80:10:b4:be:fc:dd:78:93:4d:34:bf:fb:02:ec:bc:
18:01:8f:56:0d:cf:b1:63:d4:34:f8:b8:3f:fd:a1:
57:e7:70:85:40:cc:7f:0a:35:ff:73:82:db:03:c4:
52:fc:c4:be:2f:c8:b1:e7:f7:e7:90:3e:6a:8d:85:
d4:c2:65:b8:ac:cd:0b:61:5b:d5:3d:15:14:7b:39:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FE:BB:9B:EE:12:C7:7A:B0:49:B7:78:7B:20:F8:50:FB:49:86:C2
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9a:4f:f5:ee:82:46:9e:0e:68:77:33:01:09:86:f5:7a:e8:
7f:e3:68:16:e8:6b:2a:02:e1:bf:01:0f:f8:c3:65:72:2a:d2:
7a:fc:59:2a:3e:a6:4f:c9:a2:dd:d6:5d:05:6f:4e:cb:0a:e3:
0e:eb:39:e7:84:ca:9a:bc:26:80:99:8f:1c:12:3e:a4:ff:fe:
65:0b:c0:57:4d:98:75:48:94:6c:a4:c2:d4:f8:66:b7:bd:27:
d1:2e:b4:11:c1:ca:5e:31:c2:bc:c0:8f:35:30:b0:fb:41:d3:
17:ab:71:6c:73:30:64:b2:d1:b6:a2:24:ac:d8:52:1f:5f:6b:
da:56:d1:a6:9f:20:b5:2f:90:b3:28:34:9c:df:b1:c4:f6:96:
ca:a0:e3:85:c5:a6:82:74:81:9b:d4:46:4c:74:a1:16:d8:14:
4b:90:4c:f8:7a:a1:63:9f:cf:91:a8:b1:64:9c:ed:0f:18:b4:
29:5a:5d:d6:aa:5c:79:27:6d:bf:9d:9e:1d:72:ee:38:cb:89:
6b:c4:c8:35:6b:0c:e9:c0:32:a2:0f:b8:1b:4a:14:7e:a1:78:
3a:e6:2e:13:32:ec:9d:69:4c:83:02:37:1e:b6:ec:f6:f1:5d:
01:f1:45:7a:0b:53:66:be:9a:41:6a:bc:b4:01:ee:83:1f:0c:
28:6e:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:45 2025 by rpki-client