Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: eVrznE0pAB9o3rkM3NCoO3RDcBekU63kwWLi4fkWhyY=
Subject key identifier: 7D:34:ED:09:07:78:B7:D6:2F:65:77:A6:94:37:93:F4:8F:E8:90:10
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 0197B9341C3A58322FD5885D5AA807BA9089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 125C
Signing time: Sun 29 Jun 2025 01:01:29 +0000
Manifest this update: Sun 29 Jun 2025 01:01:29 +0000
Manifest next update: Mon 30 Jun 2025 01:01:29 +0000
Files and hashes: 1: OvE7gVL8MCEWJHKpQXsF4bPe3UM.roa (hash: l4/jaJLOp+Avt+TjQWwkFvtdykblfc3pi7YpMoKQxCI=)
2: gRQ4yCuvseaLE57M9fowKbjZKdc.roa (hash: 2erIoIyPnSV3Zcfsjq1qAurwTSkvBBBTKvIM2MmgiUw=)
3: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: yylINZ1ALdEbd+TmOc4J0nHCm/r5+J6BVVMdDKMFqyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:1c:3a:58:32:2f:d5:88:5d:5a:a8:07:ba:90:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Jun 29 01:01:29 2025 GMT
Not After : Jun 30 01:01:29 2025 GMT
Subject: CN=7d34ed090778b7d62f6577a6943793f48fe89010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:70:28:a7:b0:cd:65:57:5b:95:ef:69:7e:a7:
e2:df:38:9c:b7:da:5e:ed:5e:72:e6:2c:89:eb:53:
2d:2d:f7:74:38:c3:fa:dc:ce:39:0d:f5:18:99:7b:
e7:7d:f0:11:d0:79:32:94:d7:c8:47:1b:c1:87:4a:
df:75:08:08:b2:88:aa:41:b1:b8:d0:04:16:8d:46:
83:7a:73:a9:03:11:e0:ae:fb:9e:38:69:52:0e:4a:
a7:03:67:1a:87:c7:dd:f3:13:3e:48:bc:f8:bd:cf:
f4:b6:b2:f4:89:de:df:99:7d:19:3e:61:ff:e3:09:
a1:c1:a4:08:5b:32:e4:5d:99:a6:17:15:83:6d:45:
2b:2d:70:4f:ec:72:55:c2:e7:18:4c:d7:8f:1e:36:
c0:4f:e4:aa:f6:42:cc:f5:85:77:84:cb:6e:b6:4d:
14:1c:cf:7d:0a:86:34:a3:e9:3c:9a:a2:9b:2d:cc:
32:45:cc:74:3a:c6:a4:e9:94:80:a5:52:32:2a:01:
37:58:56:09:65:7f:14:90:ac:ed:5b:f1:cf:c3:32:
aa:3a:ca:08:b5:18:38:21:c7:95:8e:c1:4b:7d:96:
11:f8:7c:41:6a:34:82:9f:64:3b:8a:77:24:a8:3e:
b2:f0:52:2a:59:6c:a4:ef:f4:51:13:4d:96:df:89:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:34:ED:09:07:78:B7:D6:2F:65:77:A6:94:37:93:F4:8F:E8:90:10
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b1:79:ff:20:4a:87:ef:35:e0:5a:ac:f0:14:32:99:7a:c8:
b2:81:ac:33:4e:b0:a6:0e:67:31:70:68:64:bc:fb:ae:18:60:
26:f4:20:83:1f:0c:fd:34:d8:85:1c:2d:34:f6:ad:a3:89:75:
d6:c3:46:59:92:39:64:bb:0d:99:e2:19:c1:b8:82:9c:f0:8c:
a6:fe:c9:31:8c:1e:2f:2a:8b:13:98:15:b3:61:35:78:06:1e:
fa:d3:05:09:c2:e7:17:cc:cf:fe:47:57:3a:b4:e8:9d:a7:73:
60:7f:68:22:c5:30:56:04:3d:5b:4d:e0:61:e5:0a:21:3e:61:
0d:a4:37:b6:cd:77:37:dd:a4:76:98:5e:71:4d:05:c7:f8:01:
5d:b7:33:e9:0b:12:70:9f:c5:db:9c:dd:cd:39:67:0f:53:f0:
e6:18:48:b0:86:ab:ee:8d:8b:07:f2:b6:c5:ac:35:b4:29:be:
ad:56:3c:38:52:75:0f:23:79:62:80:58:5b:b8:7c:d4:93:9b:
46:2c:7e:4b:22:49:1e:9e:18:86:99:3f:0b:74:cc:be:b8:11:
69:9c:12:b3:9e:35:3b:46:b2:57:b4:9c:ea:0f:e5:76:af:ea:
a6:61:b0:8e:8a:5e:bb:07:c0:9f:23:eb:41:8f:21:ab:6b:8d:
18:b9:3c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:39 2025 by rpki-client