Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: lFt1soF0vM5C1c9B9/YCM1yfuYqyzG4Q3jrUptR9SeU=
Subject key identifier: 09:DA:E7:49:59:B9:3A:73:6B:19:A5:F6:28:14:95:15:33:F6:FF:27
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 0197B8FCE5DACD494367E40133854A5ED6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 15C0
Signing time: Sun 29 Jun 2025 00:01:11 +0000
Manifest this update: Sun 29 Jun 2025 00:01:11 +0000
Manifest next update: Mon 30 Jun 2025 00:01:11 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: PYiI8ThRMX+l/aKRHdMlHwO53ZJ1LIcllEGdoPc14Lw=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:e5:da:cd:49:43:67:e4:01:33:85:4a:5e:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jun 29 00:01:11 2025 GMT
Not After : Jun 30 00:01:11 2025 GMT
Subject: CN=09dae74959b93a736b19a5f62814951533f6ff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:1d:03:a5:c8:91:94:6e:0f:4c:f4:30:4f:
5c:98:87:e7:ba:6e:c1:49:ac:b5:32:a5:93:c5:5a:
ba:a1:57:42:cc:1b:f9:11:29:2a:b0:31:f2:4a:1f:
96:7f:59:b8:07:3e:e9:ba:79:8c:72:c9:64:8f:0d:
24:14:36:02:13:b9:e9:f9:e9:16:bf:4b:34:b8:5a:
af:5f:e7:a0:3c:2f:fc:84:e6:46:a2:8e:42:cb:f3:
92:01:62:44:4b:ae:58:35:ef:47:59:a9:96:78:93:
1e:d8:67:47:c7:bf:f4:c3:64:ec:ec:4a:2c:d4:45:
74:6e:2f:5e:f6:6f:4c:b0:61:f0:f8:37:d8:b9:82:
cd:a4:47:0f:bf:1b:54:b0:9d:20:55:ee:04:ce:0e:
4b:58:9f:49:e1:1c:05:47:08:ee:c3:f2:66:0a:d8:
15:61:33:2a:98:8d:2b:81:85:75:bd:00:56:25:4a:
b6:dc:ac:03:48:48:b4:dc:c4:2b:e4:ac:d8:97:ee:
98:3d:1a:00:ec:1a:3e:64:0e:e9:71:73:d3:78:e9:
cd:ff:05:d4:06:31:6f:5b:8a:12:62:d6:1c:50:b7:
f2:49:79:9e:79:ec:00:3e:57:57:29:ad:a3:08:a6:
fd:fe:a4:08:fe:06:42:c9:c5:52:91:2f:74:c7:d5:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DA:E7:49:59:B9:3A:73:6B:19:A5:F6:28:14:95:15:33:F6:FF:27
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:84:e2:ff:e3:36:bd:e5:80:cc:bb:d5:be:6f:2d:b5:d3:7a:
2e:01:2c:f6:7d:b1:ad:4f:b0:0f:0a:69:80:c4:c1:c5:85:6e:
78:30:ca:9c:b6:40:7e:eb:23:0d:42:77:47:99:03:76:65:9a:
33:57:ad:d0:57:d0:48:5c:2e:19:83:4e:37:82:47:e5:5d:17:
06:db:74:dd:b0:7c:e0:0b:c6:98:48:b7:a7:ac:56:43:0f:79:
ca:5b:6a:5c:7c:82:74:48:e0:e2:54:99:b7:6a:d6:d2:f4:bf:
a4:e5:0d:d1:66:8a:73:1f:3a:be:35:0b:4c:0b:3b:76:35:d1:
1a:ee:b7:43:4c:ff:e9:69:35:b5:3f:02:3f:f5:75:f9:e5:2a:
1d:7f:60:fd:a3:ed:73:8c:3e:4b:a7:1e:7b:76:2f:21:fe:41:
36:7e:bc:66:ef:5a:35:24:d2:99:ed:5f:eb:1d:f0:8b:aa:8f:
f3:0e:8a:03:27:8d:77:2b:8a:2d:ef:06:b3:fd:05:f4:15:04:
05:bb:5f:15:25:50:f4:52:91:5a:db:92:68:1e:3f:a5:9f:23:
d5:67:fc:88:1b:cd:70:ef:67:6b:e3:47:d6:a9:b9:e6:ed:71:
5e:18:5e:e7:92:5c:73:95:93:8c:70:d6:27:17:47:b7:3b:37:
b6:af:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:54:05 2025 by rpki-client