Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: YcqjMal6Vh1fDjo1KTS8KZ8ctOftjSc97nT6ftTmgrI=
Subject key identifier: 06:C9:F8:18:01:53:9D:9F:4D:8F:A4:84:46:AD:73:56:C7:FC:03:E8
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 0197C04901031AD5B80B511DBDFEDF6C8F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 0F2E
Signing time: Mon 30 Jun 2025 10:01:39 +0000
Manifest this update: Mon 30 Jun 2025 10:01:39 +0000
Manifest next update: Tue 01 Jul 2025 10:01:39 +0000
Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: my7CNGps1++A4elvINTZ507KauquP4ECrL+BMGKjMRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:01:03:1a:d5:b8:0b:51:1d:bd:fe:df:6c:8f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Jun 30 10:01:39 2025 GMT
Not After : Jul 1 10:01:39 2025 GMT
Subject: CN=06c9f81801539d9f4d8fa48446ad7356c7fc03e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:7b:9d:38:aa:1c:e3:1c:b6:4c:5d:d6:d5:
e8:46:99:c2:52:ec:ad:68:11:10:19:06:ca:19:54:
f9:98:c4:4a:98:4a:62:bb:3a:6c:2c:b6:60:17:db:
ce:b5:fd:a9:cd:0c:5d:7c:b3:9e:29:d8:66:56:36:
98:c7:f1:21:99:18:f4:ea:a7:6d:d9:da:2a:dc:a2:
f7:39:56:13:b9:bb:93:af:b8:e2:8e:11:fa:b9:eb:
20:fe:a7:aa:98:c5:84:49:7a:1a:ef:5f:60:82:27:
c0:6d:cc:93:26:7d:bf:89:87:e5:66:73:47:1d:b2:
22:de:a2:7a:64:23:7a:e1:05:1f:02:3d:58:4b:bf:
1b:f3:bd:3b:65:29:56:7d:2c:bf:78:a1:f2:12:2e:
0a:fb:c2:f8:49:8e:41:6e:45:c1:e5:d2:2e:02:69:
d8:9c:86:f3:48:a8:a0:40:87:c0:4f:24:5a:da:9b:
a3:79:e4:10:90:c3:4d:83:14:7f:da:02:4e:16:be:
5b:1b:86:2b:5c:68:a8:2b:64:cb:7a:eb:60:f9:ae:
1d:f8:dd:74:d5:9d:54:c3:62:0d:3d:bf:8d:a2:c2:
f2:95:ee:a6:15:f3:65:82:3a:a3:4c:9d:62:ea:6f:
ad:dd:e4:45:29:21:c0:2f:83:11:55:8b:b1:f6:c0:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:F8:18:01:53:9D:9F:4D:8F:A4:84:46:AD:73:56:C7:FC:03:E8
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:70:9c:08:69:30:ea:e1:66:06:e2:d3:49:f0:ee:03:0f:2a:
43:bf:c3:80:0b:d2:18:e7:c6:1d:af:6a:bf:14:49:ef:ba:66:
cf:12:d4:b5:60:bc:33:41:cc:5f:84:69:db:8a:16:13:56:d0:
79:2c:c7:28:6d:58:c0:05:75:ed:23:99:78:ca:43:ea:6a:6a:
07:04:f5:6f:12:53:b6:fd:79:44:1d:14:c0:64:c5:64:70:fb:
8e:b8:19:27:c6:5d:70:0b:c8:3a:b6:78:1e:08:a2:28:79:e3:
7a:e8:fd:54:a2:d0:33:bc:03:42:06:72:d9:65:04:2b:91:e5:
cd:80:0b:77:0f:cf:2b:aa:01:ae:93:aa:17:c2:e2:b7:98:ca:
fb:88:a4:1e:88:47:a6:ca:b1:d2:a4:71:1f:02:89:b6:ec:b4:
c7:32:d7:fb:36:62:58:81:dd:07:64:89:eb:ec:53:d7:69:57:
4c:34:d4:7f:a4:ab:6c:b7:19:9b:38:d6:df:ed:f6:9e:19:f6:
35:3d:b6:e6:09:d5:13:e3:38:c6:59:5f:61:5b:69:c3:33:b4:
5f:04:ed:e6:79:10:16:bc:9b:36:3f:3e:ef:63:cd:05:3f:2c:
6c:99:e4:96:55:0f:20:4c:66:89:ae:34:90:03:c4:0a:32:ad:
28:d9:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:39:48 2025 by rpki-client