Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: 1GFBatDVyQzbGvHuq9sSicRfnPjJPRAH308SnFot2NE=
Subject key identifier: B7:F5:CD:B2:7F:12:A2:EA:C9:BE:29:6C:83:2E:06:8A:65:1E:6E:57
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 0197B6A03DA574C7FB9B294464BCF235D6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0EFD
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: Zj9lVIh8knr06HL6M68exsdyR78.roa (hash: DpNM17SY3ZBbdFnRbmny2u5MR4zgFSyDbmfcX50gqPI=)
2: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: oKNGwn8lX3kn+1FoljhPz0q8QmJH31+lrBG3tVOy0Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3d:a5:74:c7:fb:9b:29:44:64:bc:f2:35:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=b7f5cdb27f12a2eac9be296c832e068a651e6e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:18:e8:cf:62:07:5c:84:5a:2a:8f:f4:a3:
8f:8d:b7:91:f1:f7:c5:9b:e2:36:ff:76:52:82:06:
7e:2d:75:a1:51:64:6e:15:96:e3:8b:7e:84:4c:4f:
46:32:24:95:01:4d:be:bf:87:dd:e0:aa:b8:04:6e:
f9:14:eb:83:4e:fb:5b:63:6f:9a:7e:8b:45:c0:09:
82:e1:93:ac:5f:00:e6:69:c3:9e:d5:b3:5b:58:8e:
8f:7d:f6:ec:c3:22:bd:28:ab:7a:d0:36:82:e7:8b:
a0:90:8c:94:2e:d4:0d:ac:4c:2f:2d:f6:36:7c:e9:
eb:cb:b6:a9:a3:c7:06:47:a2:4a:81:c1:b2:79:ab:
fa:93:d3:f2:4b:56:b0:17:50:8b:87:8c:d8:16:58:
ce:95:90:f9:f7:fc:cf:91:82:b6:3d:b5:e6:98:9b:
e3:ec:68:3d:64:d4:e6:be:a2:41:99:2d:92:2f:fc:
4a:e8:49:c6:08:b2:39:7a:2d:c6:95:9e:ec:7d:f9:
a1:bf:5d:6e:18:a3:46:94:13:26:5b:c9:13:8a:0c:
10:e9:96:68:85:04:1a:88:16:e7:1c:d0:36:c0:fa:
cc:b8:1f:fa:a5:d4:18:30:b0:84:1d:5c:a1:c5:f6:
68:12:90:cf:25:26:8f:6c:8a:bd:1f:ae:9c:6f:41:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F5:CD:B2:7F:12:A2:EA:C9:BE:29:6C:83:2E:06:8A:65:1E:6E:57
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:62:ae:6e:f2:dd:1f:b5:6a:85:d6:1c:2a:90:84:8d:68:90:
fb:57:62:e4:0f:04:6e:a6:e4:45:70:5c:ab:4b:ad:3a:7f:9e:
7a:b3:0c:a7:af:f6:94:4c:a2:5c:f9:06:d1:51:07:b6:b4:fa:
2f:9b:31:db:4d:67:cd:a9:f4:7d:6f:d5:90:4a:ee:13:0e:b1:
dc:5b:ab:50:75:42:11:1f:03:fa:06:5f:cd:3a:bd:a1:e1:16:
ee:c1:78:80:e9:a9:f6:39:80:a5:64:ab:96:0d:e4:39:17:ff:
1e:43:05:fb:84:d5:cf:ba:0c:d6:00:0d:4f:b2:ed:47:fd:a8:
f0:fb:11:d9:0c:d7:f3:3b:35:f8:1e:50:4a:79:66:6d:ef:23:
e7:29:07:12:2c:fb:6c:33:fa:0d:39:f8:1d:7b:a8:8c:67:49:
c6:79:91:a5:9a:b2:50:71:2e:c0:73:0a:1c:81:0e:6f:73:ad:
20:1b:4e:3a:81:dd:6e:f3:4c:87:54:6a:00:9e:fb:1c:b4:9b:
d6:3d:11:bd:3b:46:5b:b6:b0:d6:02:28:ee:55:b2:2d:f3:e9:
c3:6d:31:53:1c:ec:ab:cf:9b:f9:03:e5:9e:b5:62:08:0e:1a:
60:7a:3b:e0:b3:f0:36:d1:24:0e:d1:72:6e:d1:69:0c:55:8b:
54:03:c5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:37 2025 by rpki-client