Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File: hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier: EYkrhx7QPPc0suGmICa/B/z8HfRFLbhZobVK1Mru7uo=
Subject key identifier: 76:21:D8:FB:E0:04:99:B1:90:9B:80:0D:17:2D:59:F8:57:5F:7A:5D
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer: /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial: 0197B77BF3470C556153CF9A01BCF4A491A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number: 150E
Signing time: Sat 28 Jun 2025 17:00:42 +0000
Manifest this update: Sat 28 Jun 2025 17:00:42 +0000
Manifest next update: Sun 29 Jun 2025 17:00:42 +0000
Files and hashes: 1: MbStNmXQF3r8BjIEIY6alBv8fXM.roa (hash: qBMHoSNp30r52ggSq1NF5Ja+ou1kpfZ0GNdRTXuZlMk=)
2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: A+S5sNT0sVA2S6gtkvbXCzFlNPIU+sPtabsgxV6/t4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f3:47:0c:55:61:53:cf:9a:01:bc:f4:a4:91:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
Validity
Not Before: Jun 28 17:00:42 2025 GMT
Not After : Jun 29 17:00:42 2025 GMT
Subject: CN=7621d8fbe00499b1909b800d172d59f8575f7a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:bc:59:45:5a:b4:d1:ff:43:a8:86:b4:f2:
90:1c:48:21:34:92:d9:68:3e:0b:59:09:65:7c:6f:
b4:24:d5:9b:10:2e:d3:6e:7d:cc:ba:74:23:13:be:
f5:ae:0a:92:b3:19:a3:34:58:d7:75:26:a5:ce:7e:
fd:ec:6a:46:5d:32:f4:c0:3d:7f:7d:04:cf:06:7d:
28:bf:04:36:33:e9:82:ae:71:d0:a1:55:a1:26:f2:
57:0b:ae:0e:cc:06:d1:ba:a8:8b:d6:bc:92:2b:64:
2a:5d:f8:5b:c2:6f:21:4e:a8:b2:af:a0:5e:83:a6:
18:de:b1:7f:e5:dd:e0:16:b9:e2:57:1b:4f:e1:37:
04:c6:f8:21:c3:dc:05:48:84:e3:51:60:b5:6a:1b:
c1:19:8c:76:ef:67:d3:62:19:74:52:d0:39:c9:60:
a4:78:3c:05:70:9a:0f:5b:fa:5b:59:71:3c:4e:18:
de:3b:b1:fb:4a:67:49:59:82:c6:04:5b:86:53:e4:
94:ed:8b:34:61:ff:60:75:ca:fa:62:32:28:24:74:
7c:f5:63:4b:1b:aa:8a:95:2d:fe:39:af:fe:fe:db:
a9:bd:ae:8a:72:b7:c9:a0:0b:3f:e1:84:7f:c2:07:
1d:94:14:fd:a1:7b:0f:37:ba:9c:09:64:56:bd:6c:
32:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:21:D8:FB:E0:04:99:B1:90:9B:80:0D:17:2D:59:F8:57:5F:7A:5D
X509v3 Authority Key Identifier:
keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:06:96:bd:3a:0f:9e:63:2d:ab:ca:7a:7a:93:70:b9:81:53:
f1:cb:1a:c9:20:b9:1c:9f:11:1a:71:06:d4:f7:08:25:5e:af:
32:95:67:01:53:cc:f8:0d:90:9c:9d:e8:4f:fd:b9:ef:75:1b:
a0:14:23:73:17:e7:c5:94:61:da:2b:d1:05:f1:95:f5:6e:f8:
5a:5d:ea:93:de:28:53:3d:75:0e:fe:32:16:6b:ca:68:c0:e2:
44:ce:98:09:2b:97:62:1e:42:43:73:6f:e1:af:14:f5:0c:05:
62:3c:86:87:c3:ed:60:86:63:12:ad:e4:59:41:40:5a:0d:6f:
28:ab:c1:4b:85:cd:66:a6:c1:63:8d:1d:10:a7:c8:04:2d:8a:
a0:f0:db:2d:e6:d2:b7:98:10:ff:51:cb:56:f7:ea:d6:b2:2e:
f5:46:df:29:c0:fc:3e:a8:ca:e7:1e:43:2d:2f:d1:bc:fd:dc:
8c:7a:98:ca:a6:ec:9a:e6:51:65:f6:4d:21:0e:ea:af:40:8b:
e5:af:79:ea:49:37:03:0c:81:5f:28:02:ce:20:db:3c:ad:3b:
17:74:44:1c:9c:d4:73:ca:b2:a1:32:0c:c0:01:79:87:b4:ab:
96:56:a8:ea:05:d2:31:30:33:42:83:4e:3f:9e:9d:a8:ca:f4:
59:69:c2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:57 2025 by rpki-client