Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: gnC5CBp86mbfzluctIjlgJS2sFYFt9sUy6i48W2k0b4=
Subject key identifier: 97:39:E8:A5:FF:F2:B5:4D:A2:CF:72:57:26:A0:34:60:60:FA:2B:2E
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 0197B77C3DEF4B2C286412F3355C2F91EDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 0FB9
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: d9E6C3QPOt9u78MI9SfBmesK5F0.roa (hash: h3w+IvIr5e7qvP+/FTOi1Iivorry4KUdkg2Suq8DTl0=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: faI3e3qOpzqR1L7701GLXUcP/+NoHRv3CGkveSDSXxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3d:ef:4b:2c:28:64:12:f3:35:5c:2f:91:ed:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=9739e8a5fff2b54da2cf725726a0346060fa2b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:69:c2:46:57:c1:71:a9:da:82:fd:61:1c:6e:
61:16:16:76:61:ba:fe:5e:81:da:33:2e:8e:37:79:
5f:0b:ae:4e:0f:93:7a:91:c5:b7:1f:a3:d1:d9:d4:
80:77:2d:5b:a2:80:1c:e2:07:17:5d:47:ba:89:49:
ac:5c:41:6e:dc:42:a7:31:7d:43:a3:53:74:d4:c4:
06:0f:96:c7:a3:7d:6f:b1:18:bd:36:13:b3:cd:18:
9e:42:3e:02:52:c9:08:9c:64:a0:ef:3c:cf:a6:93:
bb:f6:5d:de:e9:a1:b4:a2:46:c8:b2:5c:5c:ba:ca:
35:85:9a:1f:c8:5f:32:e1:39:a6:b8:81:9e:d7:21:
21:63:05:f8:84:e7:dc:21:d4:94:7f:c4:5a:cf:b2:
07:d9:0a:51:99:0e:0d:de:20:65:99:91:92:d8:aa:
e4:ec:d5:14:d2:27:74:43:4b:0e:ac:8e:10:7e:0f:
ba:a7:3c:17:52:d6:5e:e7:1a:d1:7b:39:97:ee:19:
5c:81:11:39:dc:7a:43:5f:45:36:10:44:90:de:bc:
23:b6:84:e0:3e:79:ee:4d:d1:f2:ba:b2:31:4b:32:
9c:94:29:01:16:9a:de:bd:7f:50:e1:6c:bd:2b:72:
51:2a:ff:78:96:59:7f:11:d1:d7:4e:a5:ef:b9:6e:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:E8:A5:FF:F2:B5:4D:A2:CF:72:57:26:A0:34:60:60:FA:2B:2E
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a1:3e:b7:e6:17:b8:73:d3:ae:3f:57:98:82:bf:81:3c:ce:
3a:d4:e7:16:0b:91:4a:80:a7:0d:97:57:e4:18:54:04:1e:93:
25:26:1f:d4:53:8a:0e:0c:b6:e8:62:9a:24:4f:7e:17:7a:e7:
5b:9d:c5:df:18:e6:fc:fd:dc:e3:61:87:c7:66:01:ed:8e:30:
b1:c1:cb:48:5e:61:86:c7:3b:8a:9a:3c:0c:be:e6:a8:99:32:
8e:81:9e:39:d6:14:b0:16:4e:23:f0:64:4d:77:5e:6e:c3:68:
75:83:50:ff:01:f7:38:74:da:13:91:06:1c:fc:67:da:f6:9a:
c6:92:a8:bc:a3:c0:13:7e:4f:cb:1d:e8:3c:fb:d8:55:a2:15:
33:ec:60:f9:93:1e:fb:81:d6:63:b3:fa:42:f6:c0:da:87:54:
46:e9:4f:51:c1:83:1a:cb:7c:70:7a:91:c8:ec:a5:3e:6f:ca:
dc:9e:16:2d:ed:13:68:f7:16:b0:10:56:b4:cf:d3:91:39:f4:
32:2b:64:99:47:62:47:13:3b:69:45:c1:46:58:7f:b5:e4:99:
b9:fe:c5:60:e4:74:30:0f:df:1a:82:56:42:16:f3:5a:bf:c6:
61:ee:aa:fe:8a:9a:14:4f:9e:ad:dc:d8:35:39:b0:fa:1f:b3:
4f:c9:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:52 2025 by rpki-client