Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
File: hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json)
Hash identifier: 2dqc8cwZOhATRCdUiPJLI5PMPaTaOaaaSAHo1KsemK4=
Subject key identifier: FA:24:F9:10:F6:DE:4B:F9:63:A3:95:4F:65:D0:3C:37:71:03:47:61
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: 0197C75D773FFE8B7274CB0507C7F27239C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
Manifest number: 0D4E
Signing time: Tue 01 Jul 2025 19:01:20 +0000
Manifest this update: Tue 01 Jul 2025 19:01:20 +0000
Manifest next update: Wed 02 Jul 2025 19:01:20 +0000
Files and hashes: 1: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: M+rgZ7pYwPGmZf0b6mQLmye8QwJ2Jup7J0mjhP5t86M=)
2: tpGVDM97XGpA5ofHLGA9otQIFM8.roa (hash: aWl1cnx2HDb3renuM7Fi/tYunaPtkTPWaRgrB19Lp4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:77:3f:fe:8b:72:74:cb:05:07:c7:f2:72:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: Jul 1 19:01:20 2025 GMT
Not After : Jul 2 19:01:20 2025 GMT
Subject: CN=fa24f910f6de4bf963a3954f65d03c3771034761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:82:1e:31:de:c7:0b:fb:a3:c2:15:b6:34:
a8:76:cb:d7:0a:c7:a2:4e:39:64:9e:96:23:41:93:
08:85:3b:ec:45:91:f0:a4:d9:0f:e8:94:75:68:d0:
67:94:4b:0d:69:71:5f:79:41:63:44:ea:2a:97:20:
95:cc:73:3d:8b:d6:2b:e0:dc:a2:a3:29:86:50:12:
ab:33:f6:67:6b:4a:13:9e:7e:f0:13:ae:0d:bc:77:
42:53:12:12:dd:59:8e:d7:8e:3c:e8:96:75:ea:70:
c8:11:c0:c1:ff:0a:3c:47:5d:50:d6:93:b3:b6:b6:
27:1a:86:26:cb:e7:96:1b:77:80:d1:ab:02:62:d3:
3d:f1:e6:86:67:13:71:68:1e:d5:53:ed:b4:c6:02:
b5:ce:47:0b:e9:b5:b9:4c:ca:d6:03:4f:c1:95:78:
22:79:3b:bf:1c:6b:ed:ce:af:e1:27:33:52:ab:91:
d8:30:e2:b4:c9:07:c0:a5:bb:a7:2c:3d:92:4c:22:
16:56:f9:17:a1:d0:a5:a3:7b:f6:db:07:ba:21:82:
16:11:5d:cf:7e:51:05:7e:b5:90:70:a6:ea:df:3b:
9b:05:54:2d:58:b5:44:51:78:0f:57:f3:16:e5:bd:
c1:38:05:50:ff:07:38:1e:35:0f:c7:e6:db:42:70:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:24:F9:10:F6:DE:4B:F9:63:A3:95:4F:65:D0:3C:37:71:03:47:61
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:00:33:85:27:68:4e:ea:ac:ec:87:17:08:43:14:5d:85:37:
f9:5d:a1:06:01:39:4e:0d:c1:ca:dc:e0:dd:3e:e4:fb:a8:78:
53:52:47:9e:15:ec:0d:6a:dc:26:47:28:e3:2e:99:5f:02:ce:
5d:4c:6e:6d:a2:2a:cd:a8:d4:99:ce:73:45:07:06:51:00:b2:
72:bc:27:f3:89:f1:aa:9f:e9:a7:f4:d0:42:b0:13:a3:bb:b0:
6c:db:64:93:37:50:0f:1a:9c:16:62:4b:ca:3b:8a:b4:f0:c1:
15:82:b3:0a:20:3a:1e:83:71:77:4f:d1:99:a1:43:c7:62:b0:
f2:d0:a9:16:a8:8c:06:de:6e:0c:19:43:a2:03:0e:3e:df:aa:
a2:07:08:7e:33:95:a9:bd:d2:6e:10:30:7f:ce:85:9f:85:53:
d7:2d:dc:dd:d8:24:59:5d:92:aa:2f:79:6d:98:a3:d6:43:11:
40:39:61:10:35:05:0a:ab:7a:c6:f7:41:69:45:79:90:92:8e:
16:81:a9:c0:7f:ec:ec:f8:f9:06:28:8b:f0:ff:f3:54:ae:c8:
16:43:79:32:23:17:fa:25:9b:d5:33:df:16:b3:61:d1:15:c5:
c5:69:cd:3b:43:d8:87:65:f7:0a:95:f1:0f:25:57:bd:3b:c1:
6f:dc:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:19:47 2025 by rpki-client