Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json)
Hash identifier: JG0N8ctV18Pr6ZIIaqOnvyCulOK00F9So7p2R+ERs64=
Subject key identifier: B9:3C:A0:12:8C:61:12:E1:AD:DD:CF:BE:D7:EB:C2:E2:F3:2A:C7:C6
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 0197B8FD0753D8F26013621C69A2AC77A8F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
Manifest number: 0A80
Signing time: Sun 29 Jun 2025 00:01:19 +0000
Manifest this update: Sun 29 Jun 2025 00:01:19 +0000
Manifest next update: Mon 30 Jun 2025 00:01:19 +0000
Files and hashes: 1: 0nY8WimC5lB0bql9f3U9kRi_8I4.roa (hash: 8StTkkNbb/yW2jlpCIQh00ucmFvEjZPmIDJRuFhboiI=)
2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: VdcDq58KhfVhSklP2B6qBDEZ4DOtoyvZNpm1CZ+RIDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:07:53:d8:f2:60:13:62:1c:69:a2:ac:77:a8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Jun 29 00:01:19 2025 GMT
Not After : Jun 30 00:01:19 2025 GMT
Subject: CN=b93ca0128c6112e1adddcfbed7ebc2e2f32ac7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:62:07:ec:5b:30:3c:5c:93:93:05:45:ed:
86:4a:b7:7d:4b:c3:75:57:18:21:28:14:c1:66:19:
84:32:89:0b:f9:5a:bf:6f:20:f1:a9:16:50:05:4d:
d8:1b:0e:4c:4f:25:c5:cf:28:d1:9d:a3:06:df:ce:
66:03:23:cd:0c:12:e4:9e:30:18:47:97:a6:91:31:
18:f5:5f:da:ae:64:84:48:fd:a2:c6:be:0c:d1:d0:
cf:2c:f0:8f:e3:95:f6:04:2b:4e:e0:7d:d9:aa:f4:
53:1b:ce:87:97:cd:cb:b5:0e:7e:b4:1f:1d:f9:7f:
b4:3e:5e:fc:84:fe:70:41:d4:d2:eb:3d:25:34:6f:
2f:b1:ab:8d:4a:9e:31:63:8b:f5:89:31:b9:46:51:
0f:a6:24:64:5b:77:ee:c0:41:fa:b2:92:6b:c6:d1:
dd:f2:f8:b1:bb:e0:48:9d:1b:60:88:41:ec:11:e3:
18:9a:5b:92:87:fe:50:36:42:5d:3e:43:69:98:d6:
64:63:5d:dc:09:90:28:97:ec:e3:2f:3e:73:14:23:
25:24:43:be:29:69:15:0a:28:36:c8:a9:af:aa:14:
5e:93:aa:43:97:62:10:7f:15:f6:51:70:ac:b7:ee:
3b:8b:e9:ff:9a:d0:d1:c2:f5:39:ac:4b:bd:7f:55:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3C:A0:12:8C:61:12:E1:AD:DD:CF:BE:D7:EB:C2:E2:F3:2A:C7:C6
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c9:4c:80:19:9b:b7:54:ea:6d:e9:4f:b6:05:15:5a:d0:2b:
e0:0c:00:0a:63:06:08:94:bf:2a:84:2b:75:b2:11:68:05:ef:
9f:1e:ef:63:06:c1:71:09:10:7c:d0:4d:92:47:40:90:75:09:
ea:9a:dc:47:8a:3d:e8:71:86:c2:21:a9:aa:d2:eb:f5:a2:0e:
85:f1:07:25:8e:aa:65:7e:af:f2:21:c5:66:ba:10:8b:ec:6e:
d4:4e:bc:c6:31:d1:e4:84:4f:2e:2f:b4:01:64:30:c2:45:82:
a4:6d:55:67:56:0d:27:8c:5b:5e:a0:f3:73:51:9a:56:77:ed:
6a:f6:3f:d4:18:fb:32:10:ed:c6:00:43:72:8b:e3:84:fa:5a:
13:a8:c6:24:5a:13:dc:c2:26:e7:fe:1b:83:10:14:15:2b:1d:
39:b6:e4:72:a5:44:2f:1e:a2:a8:a6:65:9f:8c:7c:e1:96:fa:
2e:8b:16:50:94:63:15:f8:6a:53:bc:aa:79:75:aa:ff:24:9c:
25:79:1d:48:8f:4e:7e:ae:33:ad:8e:d8:33:28:8c:01:11:1c:
24:cb:aa:59:63:68:8f:24:51:06:b7:e7:d6:ca:5f:08:15:08:
71:e4:78:78:55:53:e2:08:15:ca:19:75:c6:d3:b7:f9:57:7d:
75:ab:b9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:17 2025 by rpki-client