Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: ruWRxhO4ukmwDBAqv153PgsrlXwXNbsQ8S3lSe8yoOo=
Subject key identifier: 5E:B0:72:DE:25:07:15:34:07:77:47:2B:0F:68:2A:70:C1:F5:67:27
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 0197B77CD9104CF0B9068D0B8DDF8160D36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 049D
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: 6FgFe4HMIbp4YmMNhi64cMUONhQBtrsYjj1bIuCCDok=)
2: d11D5FMeuAx9oHmui2Kj1XfjoC4.roa (hash: 5zOzBJZzZedY0D2DOhw0oc3kUo+4Q35gEG0yeOPr0rg=)
3: sUBkgJCpD3ZqzX_7qmTArV5BEgk.roa (hash: dqlXGiz9swMXmXvL7AO/g9/wLQ3iDn3rNE6iqCcU0fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d9:10:4c:f0:b9:06:8d:0b:8d:df:81:60:d3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=5eb072de250715340777472b0f682a70c1f56727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e6:0d:26:dd:94:b1:94:12:d7:bf:65:57:91:
05:5c:b8:d6:53:cf:08:fe:bb:96:20:1c:b0:fd:76:
a1:35:47:e5:60:60:84:95:67:06:11:a6:f1:38:23:
4c:33:bf:2d:3c:f3:d0:8d:26:61:2d:3d:91:49:91:
68:f2:01:1d:65:b7:87:fd:38:38:ab:00:6b:0d:af:
86:2a:27:e7:0d:11:f3:9e:aa:63:74:f9:83:c3:ba:
aa:12:4e:28:12:9a:2e:08:67:83:99:60:9d:e0:25:
82:0e:54:78:2e:05:2a:ae:c0:c8:b8:ca:91:84:bb:
98:8d:f3:7d:9e:5c:8c:37:d7:cc:51:14:7b:1e:2f:
b3:97:ac:2b:9f:a5:89:a7:11:a0:9a:0a:de:26:ba:
bf:c1:06:2d:df:83:59:54:d5:dd:5c:77:4e:89:62:
e4:e9:31:27:1f:e5:28:cd:06:7d:b0:fc:59:7e:59:
7b:21:b3:e8:bb:3f:49:cb:35:10:41:c8:76:7b:84:
5b:3b:ae:83:4b:f9:cc:ea:68:c7:d9:5d:93:7a:ec:
db:01:a9:94:46:3b:fe:e6:d8:66:82:ba:91:de:46:
76:b2:ff:27:7e:ba:d1:58:01:7e:5b:be:5b:87:f9:
56:61:64:bc:e2:f7:b8:af:06:b3:95:b4:4e:6e:23:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B0:72:DE:25:07:15:34:07:77:47:2B:0F:68:2A:70:C1:F5:67:27
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b7:4d:6b:a6:3e:35:72:36:dd:96:74:e7:49:29:50:12:1d:
55:0f:ad:91:e2:28:21:48:58:b3:04:5e:0c:0a:98:f4:92:20:
1a:ce:65:97:71:35:16:5b:b4:ab:5f:17:de:65:fb:ae:bf:eb:
af:03:02:7b:15:23:f3:ed:05:06:1b:6b:91:3a:bb:25:a9:65:
02:f6:33:5f:5c:f1:af:5c:ee:b5:99:9a:ff:c0:0f:07:32:90:
ca:7c:18:f2:d5:61:b7:bf:95:f0:cb:7c:f4:3a:2a:93:6d:6d:
95:19:f4:05:62:78:57:9c:84:6e:17:94:ae:7e:6f:80:15:32:
3f:37:25:86:f2:8b:e2:cd:64:d3:13:bb:e9:20:d8:da:dc:a5:
5f:44:b3:c3:9a:45:f1:1c:0c:32:ad:72:94:59:30:9d:e3:d8:
64:60:f9:80:6c:f9:63:58:5b:f2:b7:02:42:ca:6f:5b:b2:5c:
c1:87:42:28:c3:35:a8:c6:73:17:f8:f6:70:a1:97:fb:00:6d:
4d:1b:5d:26:e5:7b:1a:48:a9:bf:7e:13:6f:b0:59:03:27:86:
65:3e:39:08:1a:e3:77:1e:b0:e8:dc:dd:75:d7:95:37:24:75:
e6:e3:28:66:ba:16:c1:14:eb:b4:3a:39:91:e7:85:dc:9f:2e:
06:25:d5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:58 2025 by rpki-client