Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: ms1Q7z69xf2xn0TLDqr69saJ/8mLLvbvLcOKXpf7b0I=
Subject key identifier: 9C:84:05:DE:BF:93:D4:CF:E9:55:CC:E4:5D:B6:57:83:25:AE:5B:DD
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 0197B6A0948437106FA1D290F5C70744DEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: 79hU9sy+vViD9RvtZRTEt6FDFy6ZV6+i54GjGNmoCIA=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:94:84:37:10:6f:a1:d2:90:f5:c7:07:44:de:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=9c8405debf93d4cfe955cce45db6578325ae5bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:1e:33:8d:f2:54:00:ae:25:42:e7:90:4d:
24:a3:17:da:7d:ae:c0:b9:4f:c8:ee:f6:1c:e7:73:
40:a7:99:56:e4:34:9e:4e:de:77:0d:64:24:77:51:
13:81:b6:9c:be:a9:db:70:bd:a9:20:12:dc:ef:ba:
f5:29:0b:32:16:a6:4a:79:02:78:ed:49:d9:d1:9e:
8f:d5:09:a5:ac:44:da:3e:35:01:49:d1:47:87:dc:
fa:8d:81:43:74:c1:c0:2c:93:71:00:fc:3d:eb:d7:
f6:90:1f:ac:b4:6d:48:36:9e:f3:95:88:dc:6b:cd:
cf:fc:e6:dd:0c:0c:17:f2:77:64:ed:64:2f:ee:b0:
5e:c0:a9:83:c9:29:14:eb:33:bd:1c:bf:b4:5d:9e:
11:00:9b:f7:d6:31:52:84:5e:0e:9a:0a:56:f3:0b:
10:cf:d3:b1:93:4d:3b:ec:2d:51:46:b8:6c:14:d7:
4f:49:52:f0:3c:50:9e:d8:f7:b2:17:08:91:12:ea:
30:c2:f4:04:3b:22:71:40:bb:10:ab:c7:23:3d:63:
e6:76:6f:05:1b:44:3b:db:8f:fb:56:df:44:dc:70:
de:80:09:92:1d:6c:65:f9:fa:32:58:6b:3f:a3:92:
75:5c:0c:c3:09:a4:44:05:f9:dd:6c:ea:27:37:96:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:84:05:DE:BF:93:D4:CF:E9:55:CC:E4:5D:B6:57:83:25:AE:5B:DD
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5f:6f:2e:38:d7:20:26:3f:73:c6:f1:18:ad:61:16:2f:21:
82:11:0d:d4:8d:e8:18:cb:ce:17:78:cb:b0:ce:bb:6f:d7:12:
72:b1:27:30:be:39:9d:1a:04:6e:39:82:e9:da:84:46:a4:63:
4a:98:ba:1d:ee:3d:2a:3c:79:5d:a2:18:56:a1:b0:08:ac:26:
48:ed:05:34:9a:5a:e0:fb:8c:86:39:12:40:84:50:7d:84:f2:
97:dc:39:b9:0b:03:0f:53:4a:82:0a:03:9c:60:76:45:06:ad:
31:b4:f4:cf:d7:16:14:51:49:44:dd:5c:df:e2:ed:0c:33:50:
03:87:22:2d:fb:cb:e6:9d:d2:27:bb:b7:0b:19:c3:40:c1:f3:
9c:e7:a7:20:e2:35:4b:8a:4d:79:40:2b:af:f6:49:67:46:11:
98:e4:94:4f:65:16:c6:f9:0a:c4:ad:93:95:70:56:2d:2d:ac:
25:d0:e1:6b:66:9d:75:70:cc:d2:11:db:b8:0f:0a:3d:f4:cf:
90:d9:d3:fc:a0:32:6d:0a:cc:6b:e7:76:f3:ea:c6:fb:17:b0:
59:f2:dc:d3:83:e9:30:dd:de:b5:81:a4:34:e2:d2:84:30:7c:
23:e5:2d:97:57:71:8e:44:3a:26:a6:c8:97:c3:f5:f5:54:fe:
9b:5e:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:51 2025 by rpki-client